diff --git a/CHANGELOG.md b/CHANGELOG.md index 673eb7f855..70575dd26f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,7 +2,7 @@ All notable changes to this project will be documented in this file. -## 3.0.1 (2024-11-13) +## 3.0.1 (2024-12-17) * Changes in document structure and location. The following documents are now located in the diff --git a/rdf/spdx-context.jsonld b/rdf/spdx-context.jsonld index 83deaa0464..f692cb9960 100644 --- a/rdf/spdx-context.jsonld +++ b/rdf/spdx-context.jsonld @@ -17,10 +17,13 @@ "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IndividualElement": "https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement", "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", @@ -32,6 +35,7 @@ "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", @@ -306,9 +310,6 @@ "@type": "http://www.w3.org/2001/XMLSchema#string" }, "element": { - "@context": { - "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/Element/" - }, "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", "@type": "@vocab" }, @@ -330,6 +331,8 @@ "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "expandedlicensing_additionText": { @@ -446,9 +449,6 @@ "@type": "http://www.w3.org/2001/XMLSchema#anyURI" }, "from": { - "@context": { - "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/Element/" - }, "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", "@type": "@vocab" }, @@ -527,9 +527,6 @@ "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" }, "rootElement": { - "@context": { - "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/Element/" - }, "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "@type": "@vocab" }, @@ -566,9 +563,6 @@ "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" }, "security_assessedElement": { - "@context": { - "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/Element/" - }, "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "@type": "@vocab" }, @@ -783,9 +777,6 @@ "@type": "http://www.w3.org/2001/XMLSchema#string" }, "subject": { - "@context": { - "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/Element/" - }, "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", "@type": "@vocab" }, @@ -805,9 +796,6 @@ "@type": "@vocab" }, "to": { - "@context": { - "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/Element/" - }, "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", "@type": "@vocab" }, diff --git a/rdf/spdx-model.hext b/rdf/spdx-model.hext index b2d5d14078..284a032dfe 100644 --- a/rdf/spdx-model.hext +++ b/rdf/spdx-model.hext @@ -1,3488 +1,3569 @@ -["_:N8c3b465b415b409d895456c2f6ee7c50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N441c940eb087403188d7f17bd5a55a61", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N341003cfbb2341dc85b4e126aedddb6f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40997879b8144df69163822d2df5baef", "localId", "", ""] -["_:N2d8b30121bba468383f1a52208a233a0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Ncdcdce99937a4256a16f3f88605197d9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4cf191c2823c4f9ba2e3124c01643d11", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na4175476fbca48768ff989c226c9a147", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N7476374ddf7c4c82a95e5a63b60e4e0e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["_:N7c1de3ae74ec4d1d9b6be8a05eea2f76", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9c88962fdf0e47f99a0477fe51b4207d", "localId", "", ""] -["_:N5332cee7bc2443a3b1d7513e03dbfdca", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c42defa8afb4ab59df899067c1e54af", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:N2895a64ec18c48e68dbf01572a5d0cc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N442fd7eee89f41b2a0f43bb6b2a05372", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] -["_:N4379f82c1b44400197a0281504402fc5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nb953247c1d474ff9b1190938b713a604", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N00e5d1a9fc9f4e8ea643c5dec21372c9", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N74164e072d8147ca808c451ad6b5d980", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N784fd0e933c9417b9e11ea351159df76", "localId", "", ""] -["_:N49a4e0f670334d2cbe90cca23083d0ad", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N7e6385c5f3414e35862d986501bfff61", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] -["_:Nc034445fd507418d8439a09bb2e562dc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nfa5229038d564307aa21cdf1f0981a70", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb56a4a0aad9490faaa05462a9fcc5b9", "localId", "", ""] -["_:Nf9cc156a3e084f8ab0ce054200c8fca7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nc0df3f2041aa425183862b62f02dd829", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N35cc536a7b8e4401b4f4e6b8982306e1", "http://www.w3.org/ns/shacl#in", "_:N6f651952b35948a8be2adee1bac83c6f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Neb11974d792545bab359067d0609d8ef", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N5a9be7ba8fdb49af9acd6f2e114fd2b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3ef3340b9a594445b7754965e6a0adaf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:Nf39729cdf1294ea88879ccd16e468339", "http://www.w3.org/ns/shacl#in", "_:Na9e5a2b2a00c4436a1ad0b1cb737f8f7", "localId", "", ""] -["_:N1f599cc99ec04100bcd965c2ec4fdbfe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nc6fa5c5fdf614c2f88c2b4fc315663fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] -["_:Ne3895908b9eb4cf68888a0b70d8088ff", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nb6b505dc76be4a36b1710a497695e245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6731fd512ee84a2781b8140677b0161e", "localId", "", ""] -["_:Ne2b61099faaa4dfeb2a1dbb6cb39c943", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] -["_:Nad60293878ba46b5b12652a41f9e5b9e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N097b38569ab54334ba50aa2055c21bf9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["_:Ncadfef9a365e400a9db499b45bcaafcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N1b7b0e6303e14427817b4b206ef940ce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N9547de9ed84145228bed37ef2d51f84f", "localId", "", ""] -["_:Nc6fa5c5fdf614c2f88c2b4fc315663fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb6b505dc76be4a36b1710a497695e245", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N320baf3ea5274f3393919c1999ded96d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nd4eff7d7430d4e6f98acd7f97e4910f1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e376019b0684f24bf032cb891f1c491", "localId", "", ""] -["_:N14c84f27ec214a8aa7744493af4f1b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] -["_:Nd3eb5f22c3be4e02942314bbb3d6fc3e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N81774ccb63bb44f59726b12497ed50c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne8efa463e51845deb9ed8d60461313c3", "localId", "", ""] -["_:N5665c63b6756409c9cdaed2974ba4360", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N71251064642941d5a8323c552deea710", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N5ba1e97374714be89c6ce6144cda737a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N999ce6cccf4c43f493041f0c109b3166", "localId", "", ""] -["_:N293889ce0f674698af83932fc5a7b302", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ne2b61099faaa4dfeb2a1dbb6cb39c943", "localId", "", ""] -["_:N04f6ef255f0f45e0843face78e6af32f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] -["_:Nf43982ec469c40b4b91b9ef5cea7460d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N556257d7798d418ea42ac047b24405ec", "localId", "", ""] -["_:N97819d7a350747339be471fc904dd3e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] -["_:N3cfc6c76a3744d609a80a0095af2dcad", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N00f0f016bff441178fb3b14b0f1ba310", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N941027defe6c4c49915b8fb72263813e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353611490d3c430e8e861c3a903369fb", "localId", "", ""] -["_:Nc642cb7cb5d441eaaa4a1fc86368d998", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N68dfb19b51934b85a897e13ae36b552a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:N2be1468f91bc454082c8d0af333d205f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2751c2ba1ffd40bda218899993caf814", "localId", "", ""] -["_:N700fb510f2d245d387b84b64f59e834a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] -["_:N7c1de3ae74ec4d1d9b6be8a05eea2f76", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N69fe400001ad47cbb9e616ed9d727696", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] -["_:Nc26fe6b1cfc54bc6811b7d4724089f96", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N3df9880d78624ddba1dd8e35a428b9c9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["_:N1e4dbab89bc942d6934c8d53674bbf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] -["_:N37e9effec5ca4011a388b871588a9bfc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne1fcb633a4f546229e86a46e5a84a543", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42dac2d2cbe6407596e2fb585812097d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Nb3c96ed9edf047408c12db5df1daaf43", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0809050b78e64f1c8f5666cc9ffc92a6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1f599cc99ec04100bcd965c2ec4fdbfe", "localId", "", ""] -["_:N5ba1e97374714be89c6ce6144cda737a", "http://www.w3.org/ns/shacl#in", "_:N3051e5f9bfdf45b19c416045118502ef", "localId", "", ""] -["_:Ncf36f0c937574a40957458e67ccab9cc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N61bad2d32f474f829df8b09e757aec59", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] -["_:N35cc536a7b8e4401b4f4e6b8982306e1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N88066f14b8624768ac4e2ef3ea08df92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndecce5d991454f63835a411ad5c3d25f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Na62fed341d814dc8ac95b17410dd06e9", "localId", "", ""] -["_:Ne1476e00df5f4847a5f13d26ed774a56", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Ncd7fa1f2b5334cd680d0c04e40453667", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Na9d0fc4b8c454d308184549fca9959b6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] -["_:Nf2495df384ef4dfe9e42259508a5f433", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N13b921afee3a413e9a3b06c638bf7824", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] -["_:N045868218fe84846bfd5a8efe73f5f05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] -["_:N5c4503ba9d8a43719f83795d17b3c7a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nfa63aaf3414846a894fd74b0e16b27ef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c63fb970906431f8ed02f6980609420", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N1288d377b72c44a58a576536a10d2030", "localId", "", ""] -["_:N75a4a8a0dcc14090818fdc6eade781c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:N66b9ee3f008340d2b9dffa814afd424b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N7a1979daf894407dabf96d89e984ff05", "localId", "", ""] -["_:N80091d0c87724fbf9c10267c2549575d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Naee034377c334f78a3af1a4d25c3d468", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Ne6082a08d51b4476b3a983aafaf1d69e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nebb958f1bf4c40b2abcb1472090d7504", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:N015d97ba72604b6fa2e5fa44fa994d9a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5a9be7ba8fdb49af9acd6f2e114fd2b8", "localId", "", ""] -["_:N553eab502b9344dfa8c5091d3acb923d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N97819d7a350747339be471fc904dd3e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nfd92f942c5e84eb79e459f1d3f1ac4a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] -["_:Nad1212fd5ed241c891f8afc9235f406c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N86117ed461e44611b359453a2e0ddc6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4dc5e2b6b5fa44d79acdc84229f675fe", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N1cfe20f0d2a049b7b751bd3aa0b4a09d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Ncd807f7a6b8b429283fa3418dc19e6d9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nbf51d2fce0c449ca8df0fa964ec48e89", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N69fe400001ad47cbb9e616ed9d727696", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N0f509a18a72e4662a7e7fc2fe485c3ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:Nf3860ad4cc5d4d87be1f408701c9f435", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nd3eb5f22c3be4e02942314bbb3d6fc3e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:Necfb795205bb49a69ffa1a569c48717a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N6cddf83b203740bbb3558b7474a07821", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N275d7c15ea6640618cb7cde014c0aa3e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4707a6558f8643199e75a488fd156a09", "localId", "", ""] -["_:Ndaecf52053104527964b081f8f6d4dfe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] -["_:Na9d7622cd7e94569b9540b0dc94308f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf43982ec469c40b4b91b9ef5cea7460d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N8a37f4cffd6247e08ac9432f8447d89a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nf2495df384ef4dfe9e42259508a5f433", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N2895a64ec18c48e68dbf01572a5d0cc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N7f66313069b94a1386353f07d06a8ce2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e3eb89dc9a84ae0ae77a3bbc07580c9", "localId", "", ""] -["_:N67fc6e9fc5d24eabb8543cdc669b1145", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Ndfbc16b71fc74cb09458e7b7f0e12f1a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] -["_:N0da978c5d15a4e0ca2abb1d9a336eba1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] -["_:N68dfb19b51934b85a897e13ae36b552a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N9fc754cd17fe403b9e6567ff39e96ef5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N15fc27df69c64453aa991097a3de803a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N682a1c11ac5b4e2ea369c111bf3c01c7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a36e08577374de4a5b5818cbd4e6583", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N1b99de6ce73e49328dc792c34798532e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N67b0d956754a43a5b927ae155984d43e", "localId", "", ""] -["_:Nad60293878ba46b5b12652a41f9e5b9e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] -["_:Nf1c469cfa41644dd9f4cafc8ea99bad5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99061926c1b041518ba79742537acbaf", "localId", "", ""] -["_:Nb3c96ed9edf047408c12db5df1daaf43", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2305488d52f34ae3bd7f3de8a96329e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N3daf4b35020144689a44f0ff15ab9244", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Ne1476e00df5f4847a5f13d26ed774a56", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] -["_:N5a18c93b836b4c75887455a2be533616", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:Ne880e2c5878f4becba59cd843618c77a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] -["_:N86dbcc278d2a463da15bda1f007010e6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nab408dbbfc0f4711b251486cdcbf2168", "localId", "", ""] -["_:N2751f527dac048b29b31dea36517c56a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] -["_:Nf37cc853c16d47099115691bcb77f2e1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:Nb7591bd67efe44909d92824106c3b13d", "http://www.w3.org/ns/shacl#in", "_:N2e8a1060d29d437ba2a94908211b9554", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nf39729cdf1294ea88879ccd16e468339", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N2e7af3d6eac3464eafe353090d745bf8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne9376f7e610a4f378d34348bf09acb82", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N80a219d388944c2c9272a65ce39a65d4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N058b8decd10442dc9da66c8ec337fe89", "localId", "", ""] -["_:N36ba7d6688234724ae43de9320a88887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:Nc5839c1a42cb4cbf8b8f389491a2b604", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nbb554a0d397845a2a23c335ba508c87e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncb7110c05f9f446f887398fa2d241dd1", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N4d420b10df2e48ec90b7a163f5e7774c", "http://www.w3.org/ns/shacl#in", "_:N86117ed461e44611b359453a2e0ddc6d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nd0989d19000249b7b6abdfee096c9f41", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N082cb9b35b7b4791aa1d9debf6080789", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nfd60dc4acf8f405b86d3ebb119d8edeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] -["_:N3ed90f3640954f3cb8ac8478cc923b35", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nee5028549c054614bcad84bd05b4e1a7", "localId", "", ""] -["_:Nbb554a0d397845a2a23c335ba508c87e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] -["_:Ne4619e36e32c4fdc886ba17b636520a3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N293889ce0f674698af83932fc5a7b302", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["_:N00e5d1a9fc9f4e8ea643c5dec21372c9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N32c6410af083493aa3238362e1cbd67e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N00f0f016bff441178fb3b14b0f1ba310", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nd78d72bd38c34a3c804f97f9e6b927a3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9a4f2ea8112e48b18e9aaa109a1e02b3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N9b52daafec44429186724a6d9a846793", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:Ne0a4093971cc4c949d28cdad8bdcb48d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N46c1d107f9c3474aac7ed47419f9465a", "localId", "", ""] -["_:N4477c4b31f20446998b8dff00cd309b3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N931242be4ac14a95b8ef51122ba2cf40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N556257d7798d418ea42ac047b24405ec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N86dbcc278d2a463da15bda1f007010e6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] -["_:N6f651952b35948a8be2adee1bac83c6f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a5bd79f035f4d7c9d036bc4a4d9990a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N8746b43004e5422e8a87906a64680ef4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N5f799594600d45d0b83461261182f275", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N349d882683524e14ae98f62402cadf06", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2684328da52949f091f313d918153601", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N69674ef0cb504722bc20bd3195026b39", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Nd217b5feb10442a4b50049ba66de62ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd807f7a6b8b429283fa3418dc19e6d9", "localId", "", ""] -["_:N7cdb8eb1992246f785b58b577320b504", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc709c441c5e04513bcf2e73d3670fca8", "localId", "", ""] -["_:Nc416283f46f74c5ca28e42eede357fc1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N9ee209fef169433cbe6e5201db0529b7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] -["_:Ncf36f0c937574a40957458e67ccab9cc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N69fe400001ad47cbb9e616ed9d727696", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Necfb795205bb49a69ffa1a569c48717a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] -["_:Ne3895908b9eb4cf68888a0b70d8088ff", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["_:N4d420b10df2e48ec90b7a163f5e7774c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["_:Nad0e6f0b63fa454384d0c495911f493e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] -["_:N55072cbd77a64b16b152c20236d786f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nea611e5c42f94004b40d78331b3f6977", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N6f651952b35948a8be2adee1bac83c6f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N8e3eb89dc9a84ae0ae77a3bbc07580c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nab78d95787b8439db6189f9699047620", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] -["_:N5c4503ba9d8a43719f83795d17b3c7a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] -["_:N7884508b0c584d0288f2250c1ee3bc89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N137d0a75fd374daeb077f228da53897d", "localId", "", ""] -["_:Nd0d9b8cea40d40dc91877f32f673ef66", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] -["_:N833899f5b4b1487b8858f9aebd17a95c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf7e356ac5a1044be99fd42634fb81f7d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N5665c63b6756409c9cdaed2974ba4360", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Ne7755fef413944e6a5bd969d379e8410", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N6dd024b62af74fb5a94391f7343f1c79", "localId", "", ""] -["_:N2c65a23cf781468598b84d1456d825fb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] -["_:Ndfeaf41c217c4e0c8c442c54949d7e6a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N094c19bcead34504bd0d0b85f8ba1078", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0295e624408541b9b840c231db039610", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N6a3cf2ffe9b9430390c5ce23bd48fce4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] -["_:Nbfec05fc44f6435dbdeeb9f608a28e4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N931242be4ac14a95b8ef51122ba2cf40", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9b270772d72b4f059b6cf8c0703f1948", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2f51219aefd476d89347b0e1c485369", "localId", "", ""] -["_:N4d420b10df2e48ec90b7a163f5e7774c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N761b1b05ac5746c3b86d599c46526598", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] -["_:N3daf4b35020144689a44f0ff15ab9244", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N79f0bab894254f7aa8a118661d65f476", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] -["_:Ne4d0e63a8226430099ec09bd81396164", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Ne5992967c6784ac0a64f460548c9c73c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] -["_:N6dd024b62af74fb5a94391f7343f1c79", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N353611490d3c430e8e861c3a903369fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d67d474d6584406964ab34eebc78a17", "localId", "", ""] -["_:N9a2ece59dbaf463a9c858ceb00db829f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] -["_:N00e5d1a9fc9f4e8ea643c5dec21372c9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:N48e045eccfb146548852b6d7274d180e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N27a589ebe1bb40c483985fcde9a2d5f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N69674ef0cb504722bc20bd3195026b39", "http://www.w3.org/ns/shacl#in", "_:N49a4e0f670334d2cbe90cca23083d0ad", "localId", "", ""] -["_:Ne8b93e1651f84d5f8ff94e4b82012f07", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N8746b43004e5422e8a87906a64680ef4", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncd7fa1f2b5334cd680d0c04e40453667", "localId", "", ""] -["_:N6afb5f6c981f4dc0b9434c037cffebfb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7e45c1203a3548efa7e52e91b09b78f1", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9547de9ed84145228bed37ef2d51f84f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N5c4503ba9d8a43719f83795d17b3c7a7", "localId", "", ""] -["_:Na8a357017cea4aaf8263bb41e69ff340", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf385f0cc22b44164be25837552539b1c", "localId", "", ""] -["_:N015d97ba72604b6fa2e5fa44fa994d9a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N7d98dd34e2e442ec8f9dd87a82897c1a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] -["_:Nc6df8997e25c4618ad64b329bea18fa4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:Nc642cb7cb5d441eaaa4a1fc86368d998", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne616eaa63e1944649dd12a3061e5726a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N22c1a3c4c4964b7f90a94e0af7e75d87", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] -["_:N659a17727ec34fe487d556cc5ed935fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nd1e13d5c3983406c938eabee95860c0e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["_:N2895a64ec18c48e68dbf01572a5d0cc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne5992967c6784ac0a64f460548c9c73c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:N30a7d396784a431ba0eb686ae5b7e645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N18a257cc80b34d42949a3f99d880f84c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na9d7622cd7e94569b9540b0dc94308f3", "localId", "", ""] -["_:N9fc754cd17fe403b9e6567ff39e96ef5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Nc6df8997e25c4618ad64b329bea18fa4", "localId", "", ""] -["_:Nea611e5c42f94004b40d78331b3f6977", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] -["_:N8c0c4aa1f1ae4f7485a88627cfbc1631", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N596d74921771447c9b35785007e34f1c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nbfec05fc44f6435dbdeeb9f608a28e4c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N3393c7f385f241039c50705b72f15549", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "Element represents a runtime environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Nf98babca843e446f8ddf5dee59296ef5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N442fd7eee89f41b2a0f43bb6b2a05372", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] -["_:Ndaecf52053104527964b081f8f6d4dfe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N26117aef00804f4b9d67298a6fd9c1de", "localId", "", ""] -["_:N107aa4617cfc41499f0678d83f303c24", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N35cc536a7b8e4401b4f4e6b8982306e1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["_:N8e8fa340313748a7b459ba889204f2c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] -["_:N69674ef0cb504722bc20bd3195026b39", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N6cddf83b203740bbb3558b7474a07821", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] -["_:N28c8fedea4324ffa8c41338d5fae0fe5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] -["_:Ne3abaf912f304b1bbda537f0c9866ce8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N3b3c65b750eb401889ee9800adc1da9c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:Nffd32d595d024069b6df3a1ef8da642a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N7476374ddf7c4c82a95e5a63b60e4e0e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd", "localId", "", ""] -["_:Nb05234e65ed34c2e86c4abf63f02725c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N30ddffc861f14836a83cde39db10d792", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N64aa14b2a42d49a394ae8a9d4febed04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d0b150d561413c9ecc2d72bfc66683", "localId", "", ""] -["_:N0295e624408541b9b840c231db039610", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ee209fef169433cbe6e5201db0529b7", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf7805d1c06ba43eaa22c6043949bd567", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Nd78d72bd38c34a3c804f97f9e6b927a3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Na62fed341d814dc8ac95b17410dd06e9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N28c8fedea4324ffa8c41338d5fae0fe5", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] -["_:Nd4eff7d7430d4e6f98acd7f97e4910f1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne880e2c5878f4becba59cd843618c77a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N8411f84580e2497da97dab50dc3b4df3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N80a219d388944c2c9272a65ce39a65d4", "localId", "", ""] -["_:Nea5cd277bd75414183676bf891a32527", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc26fe6b1cfc54bc6811b7d4724089f96", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N6b8369d5442f4e3c902c0fd4c6ad7f11", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N97819d7a350747339be471fc904dd3e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N9a4f2ea8112e48b18e9aaa109a1e02b3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] -["_:N5cc19e587a4f464a9572d61b4352c919", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:Nff63d22b8dc54a40a1754583641b37f3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nfc79218ef172418cad1d73977bceaf78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element provides low level control over a device's hardware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Nb7591bd67efe44909d92824106c3b13d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:Nfafa3bfbbc7b4ea7bd042cec31c4660f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within a Document but defined\nexternal to that Document.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N069fdf6673d440b8ab54670ad7906662", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N7177e8b281d74917a500d212b7382b6b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f66313069b94a1386353f07d06a8ce2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N4d126f9477f941e8bd279a13b5a8f5bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Na9e5a2b2a00c4436a1ad0b1cb737f8f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] -["_:N682a1c11ac5b4e2ea369c111bf3c01c7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Ne92d6e989fde455e8e2dd493a67d27bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Ne3895908b9eb4cf68888a0b70d8088ff", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a machine learning or artificial intelligence model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["_:N8a37f4cffd6247e08ac9432f8447d89a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["_:Ne0a4093971cc4c949d28cdad8bdcb48d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] -["_:N99069f06ac76429c9f76e68132e89664", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N78f0595c63a44f9ea394e506cdf868e9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8551607a3f804986877c0affaed0b752", "localId", "", ""] -["_:Nb953247c1d474ff9b1190938b713a604", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] -["_:N3be22ea4244a43d6af104de9fed1b4fb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nd677bc1745684cf98fb92f17a75ebd52", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] -["_:N4d420b10df2e48ec90b7a163f5e7774c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N4c5910b87a7e4fc69577e8ccd52c8ab3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N0c63fb970906431f8ed02f6980609420", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N727e38139bfa40d9b56e586cf9ac5bdb", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["_:N6dd024b62af74fb5a94391f7343f1c79", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N9dfffc9a0d064fbbb99f222927600262", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "Element is documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N49d9ce37bbb44f77a01b48e5f2009c3f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf6aee0ab31d04453b5b92d210b1ad859", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N4d420b10df2e48ec90b7a163f5e7774c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N1013910040b04b98b3a99c32bab64312", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N2fa63ba2278342bb9c50f3eea6a8c45f", "localId", "", ""] -["_:N99061926c1b041518ba79742537acbaf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncadfef9a365e400a9db499b45bcaafcb", "localId", "", ""] -["_:N37e9effec5ca4011a388b871588a9bfc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N4379f82c1b44400197a0281504402fc5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N80091d0c87724fbf9c10267c2549575d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N35cc536a7b8e4401b4f4e6b8982306e1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["_:N1192fb0a041f4b77a8c069659dad0770", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Ne7755fef413944e6a5bd969d379e8410", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nec3642cffbce44abbfb1f66ffa74d5c1", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N9177e2ee3c054acba6cd2b8f4d78e4f3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] -["_:Naa8dde945f86469da5292aed6e8c1634", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nff58f069db3f4f099a21fd26a1b4e17e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nd43d5a2d7d1648598329bd2d9c226af3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b40da1378ab4d6e80898c98996790e2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Nf7805d1c06ba43eaa22c6043949bd567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N87ef2338681b493982fdd6660c334933", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nb28e67cb657b4e9e910e0447be07f36b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N76180350f15e4fd0be60faa3412ed1fa", "localId", "", ""] -["_:N6cddf83b203740bbb3558b7474a07821", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:Ne3abaf912f304b1bbda537f0c9866ce8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] -["_:N0da978c5d15a4e0ca2abb1d9a336eba1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] -["_:Nf1e92f23ec15434084ea8a1bcf7473a8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb40056258a0d4d96a453b1af72d463fc", "localId", "", ""] -["_:Nad0e6f0b63fa454384d0c495911f493e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1fcb633a4f546229e86a46e5a84a543", "localId", "", ""] -["_:N885913019f4b4fe7afcd38cc847f9ef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c56aaa0702449d89c679a6ae2d509e", "localId", "", ""] -["_:N082cb9b35b7b4791aa1d9debf6080789", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N42775851ecec45ee90ee1fe5c1071993", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N21d7410f6a994075adab308941db7bcd", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nec3642cffbce44abbfb1f66ffa74d5c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] -["_:Nc7ccb8d419ad49ab9f18f22daf82266f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N931242be4ac14a95b8ef51122ba2cf40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:Nd134630c82914216aaa76b9680232c0c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N700fb510f2d245d387b84b64f59e834a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00f0f016bff441178fb3b14b0f1ba310", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N2305488d52f34ae3bd7f3de8a96329e4", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne9348ee72a18435bbcdf5bb338a3fcb6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nd0d9b8cea40d40dc91877f32f673ef66", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxExtension name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Ndc5c3acba75e4205b113623c75621c6e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dce65a406e14831b9cc10cfd6e434a6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["_:Ne3895908b9eb4cf68888a0b70d8088ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N62048f401c7a408d8e6074d8172edd5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N950494b11f9e43fd9ce4b21264e6a0a8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] -["_:Nde44f9707bd34a41a8e403a4f539bb2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nf4064e5c7fb84a899bffb14df5844894", "localId", "", ""] -["_:Nf32238231fca45f1ac5221bd1ecd220c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N8c3b465b415b409d895456c2f6ee7c50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6f822a7a1a0748eaa9f4fe3e881d6726", "localId", "", ""] -["_:Nc642cb7cb5d441eaaa4a1fc86368d998", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N7f27ce1812214cf08ea19bcb018764e2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is the evidence that a specification or requirement has been fulfilled", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ncadfef9a365e400a9db499b45bcaafcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N092e19c1eb954e979b39018f62ba840a", "localId", "", ""] -["_:Nc5bf40e3b2584e2eaa4becc473bed079", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nf1c469cfa41644dd9f4cafc8ea99bad5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] -["_:Ncf36f0c937574a40957458e67ccab9cc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nb28e67cb657b4e9e910e0447be07f36b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nee5028549c054614bcad84bd05b4e1a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N124216cccbad47f486b33fd9dce70c06", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3ef3340b9a594445b7754965e6a0adaf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N941027defe6c4c49915b8fb72263813e", "localId", "", ""] -["_:N30ddffc861f14836a83cde39db10d792", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] -["_:N1a58fcdd17f342af8cfbbbb7d7a9ed87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] -["_:Na40768ed7c6a40fcb01c9e8f1793b8a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N73c4669b1ca14351aad291112524e432", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nba91218e21de428abcc29e6f6dd70951", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N55072cbd77a64b16b152c20236d786f7", "localId", "", ""] -["_:N441c940eb087403188d7f17bd5a55a61", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] -["_:N0809050b78e64f1c8f5666cc9ffc92a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N6f822a7a1a0748eaa9f4fe3e881d6726", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N301f290b72884ba28b9bf8cee6c7d12e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:Nffd32d595d024069b6df3a1ef8da642a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["_:N761b1b05ac5746c3b86d599c46526598", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne2b61099faaa4dfeb2a1dbb6cb39c943", "http://www.w3.org/ns/shacl#in", "_:N6afb5f6c981f4dc0b9434c037cffebfb", "localId", "", ""] -["_:Nf6a8366ab85b4074b187672b593f3e6e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nada0379a8e6840aeab21269255f5c588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N659a17727ec34fe487d556cc5ed935fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9b270772d72b4f059b6cf8c0703f1948", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Na40768ed7c6a40fcb01c9e8f1793b8a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] -["_:N7d98dd34e2e442ec8f9dd87a82897c1a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] -["_:N9fc754cd17fe403b9e6567ff39e96ef5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] -["_:N092e19c1eb954e979b39018f62ba840a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne9348ee72a18435bbcdf5bb338a3fcb6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nff63d22b8dc54a40a1754583641b37f3", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N80091d0c87724fbf9c10267c2549575d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nc7ccb8d419ad49ab9f18f22daf82266f", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N193f441ef82a4c6f872a77fdc536a646", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3642a2160e24cfd8d98230c09e472be", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf37cc853c16d47099115691bcb77f2e1", "localId", "", ""] -["_:Nb3642a2160e24cfd8d98230c09e472be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] -["_:Nbc63e97d65ef4f38936c3be4f51c6827", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N744e6bd4bf054480b6e284543bb79b87", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Necfb795205bb49a69ffa1a569c48717a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] -["_:Nc034445fd507418d8439a09bb2e562dc", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nb6697d6a50a946d9a78f5c1d507fee30", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N107aa4617cfc41499f0678d83f303c24", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["_:N89f5ced0d2b44da98e135f5754616ccc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N3df9880d78624ddba1dd8e35a428b9c9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["_:N9dfffc9a0d064fbbb99f222927600262", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Nfc79218ef172418cad1d73977bceaf78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N81c3ab3c353544c9b673be7535094681", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] -["_:N1f248bb10ce740cc9124e394b35259ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b5795c987f1446dbda919350438fd0a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N6cddf83b203740bbb3558b7474a07821", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N1a58fcdd17f342af8cfbbbb7d7a9ed87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3cfc6c76a3744d609a80a0095af2dcad", "localId", "", ""] -["_:N1b790cf0ad524fad8d4f129ccda94fa6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3df9880d78624ddba1dd8e35a428b9c9", "localId", "", ""] -["_:N28c546d9833444d7b7370a64f4274b1b", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N0da978c5d15a4e0ca2abb1d9a336eba1", "localId", "", ""] -["_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N6dd024b62af74fb5a94391f7343f1c79", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N60de5e93a2424ac08a6d0747c85f5699", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] -["_:Na1f3d174a6d64488a8ff34be710850c5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N731ab899248d4b07adeacd5aafffa0bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] -["_:Ndf7085005814495cbc9689c68bb9683d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N3d67d474d6584406964ab34eebc78a17", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2e7af3d6eac3464eafe353090d745bf8", "localId", "", ""] -["_:Nd7c9818a72e64d35a203d1b243e90dd6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] -["_:N5665c63b6756409c9cdaed2974ba4360", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] -["_:Nd1e13d5c3983406c938eabee95860c0e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N2fd6d6c96c7b46dabc958e2ddb32657c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nfc73e3099ed6465bb089df33bbf469ff", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] -["_:N744e6bd4bf054480b6e284543bb79b87", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N6349b0f36b7f449faa1d73050fbde88f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N9177e2ee3c054acba6cd2b8f4d78e4f3", "localId", "", ""] -["_:N5cc19e587a4f464a9572d61b4352c919", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] -["_:N21d7410f6a994075adab308941db7bcd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N5c307bac3b90460f8b755b5d46827013", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N35bab262301147c0b1b11e0643a659c6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] -["_:N8746b43004e5422e8a87906a64680ef4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N5f799594600d45d0b83461261182f275", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nbe2a417f2d204fcb9bb60e5d58b0044f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] -["_:N999ce6cccf4c43f493041f0c109b3166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] -["_:N6d28e1bd9c9f4454b0cd19fce2d51a40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] -["_:Nc709c441c5e04513bcf2e73d3670fca8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N78f0595c63a44f9ea394e506cdf868e9", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nfdf2a70978294bcebad4f299b134dc99", "localId", "", ""] -["_:N71251064642941d5a8323c552deea710", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a software framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9a36e08577374de4a5b5818cbd4e6583", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N73c4669b1ca14351aad291112524e432", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N5165398aea9744d49e3ba082cb6fa0d8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] -["_:N87ef2338681b493982fdd6660c334933", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:Nd78d72bd38c34a3c804f97f9e6b927a3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["_:N6d28e1bd9c9f4454b0cd19fce2d51a40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9f2f4966ca1442de8457e4f8329d0710", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["_:N5c307bac3b90460f8b755b5d46827013", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] -["_:N4c5910b87a7e4fc69577e8ccd52c8ab3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N999ce6cccf4c43f493041f0c109b3166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:N597e9b8e9fea4a669873e005bac16fc5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["_:Nc5bf40e3b2584e2eaa4becc473bed079", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nbf34bde0e54243da9c73928c648b8ad7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] -["_:Nbd9879e4dffa4f9bbdc67aa2782f06f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne92d6e989fde455e8e2dd493a67d27bd", "localId", "", ""] -["_:N950494b11f9e43fd9ce4b21264e6a0a8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N2454277637b14ff0b3c86e707c803ebf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] -["_:Nb37183f337474d0d8058f31577954cf8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] -["_:Nf4064e5c7fb84a899bffb14df5844894", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N896ec867378949ebbc26581fe9cf864c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nea611e5c42f94004b40d78331b3f6977", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:N41aee74b0dbe4609888f3e3488e75e26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nee5028549c054614bcad84bd05b4e1a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] -["_:N312b811b38e3467eb37fbf91bc0dd93b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N2a72f2e0c3d44dd5ac4c0633f336d556", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["_:N186b972a57284ae1946b3f7d8e762830", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N66595c518c6248f69bdca82dccebf454", "localId", "", ""] +["_:N8f24e4128c124ec08b9e80f45a43dd1e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00d83dee7aa44a7991821a46e83e5164", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N0c3b30ca2bdf4cb1839bdc608bc41186", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneLicense", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nebecc80c7e4045d1b3ad15ab0c1d04ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4278c3d777ea4ebd81cd23af80459c2d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N60be8975df7d4f659d6589e10d3c8e19", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] -["_:N065968ff4b1d468f80d208a94f728820", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N731ab899248d4b07adeacd5aafffa0bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb05234e65ed34c2e86c4abf63f02725c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Naae3483836e249d3a4cdd827af0f8631", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf7f8e578ea545babb3686ec4ccbd3ad", "localId", "", ""] -["_:Na9e5a2b2a00c4436a1ad0b1cb737f8f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N71c5c74023cf4a52a8b457b1547df6f4", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne0cb74aabc9c4794b4d9319b9a1fe42b", "http://www.w3.org/ns/shacl#in", "_:N4d126f9477f941e8bd279a13b5a8f5bd", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne9376f7e610a4f378d34348bf09acb82", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Nda26387d9677485d8554cf33b606d465", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N0809050b78e64f1c8f5666cc9ffc92a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N0da978c5d15a4e0ca2abb1d9a336eba1", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Na62fed341d814dc8ac95b17410dd06e9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N3ed90f3640954f3cb8ac8478cc923b35", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] -["_:Ndf7f8e578ea545babb3686ec4ccbd3ad", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8a357017cea4aaf8263bb41e69ff340", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N81c3ab3c353544c9b673be7535094681", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4545916c069c4e0ab8f2f3c3e582d429", "localId", "", ""] -["_:N293889ce0f674698af83932fc5a7b302", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["_:Nfdf2a70978294bcebad4f299b134dc99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] -["_:N40997879b8144df69163822d2df5baef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N9586947b2f2b402c815b61cb75a37942", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nee384a627c3d4a89bbf6312a1aa64aba", "localId", "", ""] -["_:N22c1a3c4c4964b7f90a94e0af7e75d87", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N5e77c3af3932465a99431b715d09d12e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["_:Nb55dc8c91e234dedbb3dbcc141a59bc9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe1303da564e44c3ab64d0e8f83a0713", "localId", "", ""] -["_:N5f799594600d45d0b83461261182f275", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N1192fb0a041f4b77a8c069659dad0770", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N57470b62e6a142f9928ab5bfe4606b0a", "localId", "", ""] -["_:N442fd7eee89f41b2a0f43bb6b2a05372", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:Nda26387d9677485d8554cf33b606d465", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Nc416283f46f74c5ca28e42eede357fc1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] -["_:N89f5ced0d2b44da98e135f5754616ccc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nff63d22b8dc54a40a1754583641b37f3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2fa63ba2278342bb9c50f3eea6a8c45f", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nada0379a8e6840aeab21269255f5c588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Ndfeaf41c217c4e0c8c442c54949d7e6a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N1fb6b0088d4c43e7b3c2fc9342ceaa64", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd134630c82914216aaa76b9680232c0c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N999ce6cccf4c43f493041f0c109b3166", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N26117aef00804f4b9d67298a6fd9c1de", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["_:Nf385f0cc22b44164be25837552539b1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] -["_:N40b61fa0587f469bb27b3e4ece9283bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N7476374ddf7c4c82a95e5a63b60e4e0e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a software application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N097b38569ab54334ba50aa2055c21bf9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nad1212fd5ed241c891f8afc9235f406c", "http://www.w3.org/ns/shacl#in", "_:Nfa63aaf3414846a894fd74b0e16b27ef", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N62c446ad08764db680206dcd96bc8476", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nda9579bf8aeb475c986dfda97af9e414", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["_:N5f35c1f648d4471ba9ad3e7fc90e56b7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1a58fcdd17f342af8cfbbbb7d7a9ed87", "localId", "", ""] -["_:Nf1e92f23ec15434084ea8a1bcf7473a8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] -["_:Nba91218e21de428abcc29e6f6dd70951", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6717b73c37f1437da67113b68f12bf12", "localId", "", ""] -["_:N208b27c07ce6469e9114d5b80dfc4f8f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Ncd807f7a6b8b429283fa3418dc19e6d9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N833899f5b4b1487b8858f9aebd17a95c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N441c940eb087403188d7f17bd5a55a61", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:N3b3c65b750eb401889ee9800adc1da9c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] -["_:N29943647d0a54ed3bbf4236b7f26fed8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] -["_:Ne7755fef413944e6a5bd969d379e8410", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N56b887d449ac42dcac573916474bbce1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2bae390e06fc47d4916dcf58441c0065", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N1e4dbab89bc942d6934c8d53674bbf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N70201d67aa3f481b9abefcb469f48d98", "localId", "", ""] -["_:Nf43982ec469c40b4b91b9ef5cea7460d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N100bd4537cc64a3c9da777da1eb0ce8e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9ea823dce8b4178968bb583746dda07", "localId", "", ""] -["_:Ne616eaa63e1944649dd12a3061e5726a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:N835bfbd04e26414fa4e0357251d9e6c7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1e92f23ec15434084ea8a1bcf7473a8", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3cf591f215db46d1b2957c0113ce16f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N16549d2169e94a4d8d291368d2d9f71b", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N69674ef0cb504722bc20bd3195026b39", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N990faf2e9bde43ab98201c748005987c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Naae3483836e249d3a4cdd827af0f8631", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] -["_:Ne3abaf912f304b1bbda537f0c9866ce8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Na40768ed7c6a40fcb01c9e8f1793b8a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["_:N659a17727ec34fe487d556cc5ed935fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8d911077b7fd4e4180299a09ca29ea53", "localId", "", ""] -["_:Nb6b505dc76be4a36b1710a497695e245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N3f6ce06e6ca2446781e41b064c3d1d58", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nd3eb5f22c3be4e02942314bbb3d6fc3e", "localId", "", ""] -["_:N80091d0c87724fbf9c10267c2549575d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:Nbfec05fc44f6435dbdeeb9f608a28e4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N88066f14b8624768ac4e2ef3ea08df92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] -["_:N60be8975df7d4f659d6589e10d3c8e19", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N20563c47790549c1a3121000a834c4cb", "localId", "", ""] -["_:N71251064642941d5a8323c552deea710", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nf98babca843e446f8ddf5dee59296ef5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] -["_:Nc2c6dbe5330f4b17ae33727e45f3e9d4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "Element is a bill of materials", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne4c7d5c25b2f46f3b980935a3b7858e2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb28e67cb657b4e9e910e0447be07f36b", "localId", "", ""] -["_:Ne1fcb633a4f546229e86a46e5a84a543", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N1cfe20f0d2a049b7b751bd3aa0b4a09d", "http://www.w3.org/ns/shacl#in", "_:N5332cee7bc2443a3b1d7513e03dbfdca", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] -["_:N8746b43004e5422e8a87906a64680ef4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N29943647d0a54ed3bbf4236b7f26fed8", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2d8b30121bba468383f1a52208a233a0", "localId", "", ""] -["_:Nbf34bde0e54243da9c73928c648b8ad7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1b7b0e6303e14427817b4b206ef940ce", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nc034445fd507418d8439a09bb2e562dc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Ndecce5d991454f63835a411ad5c3d25f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne8307a3d6a8a433fad20e9cf2bd69327", "localId", "", ""] -["_:N2751c2ba1ffd40bda218899993caf814", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N731ab899248d4b07adeacd5aafffa0bf", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N596d74921771447c9b35785007e34f1c", "localId", "", ""] -["_:N3be22ea4244a43d6af104de9fed1b4fb", "http://www.w3.org/ns/shacl#in", "_:N193f441ef82a4c6f872a77fdc536a646", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nbf51d2fce0c449ca8df0fa964ec48e89", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N0ffbbdd15b364d55bc0212ba5c32739b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:N30c0e029fe894fb8809a14d4f50d81cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Neb11974d792545bab359067d0609d8ef", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N442fd7eee89f41b2a0f43bb6b2a05372", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N67a7c2de8c574fb991ccc64346e1de56", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2fd6d6c96c7b46dabc958e2ddb32657c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] -["_:N315a049473324a5d82678153bc504c4b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c3b465b415b409d895456c2f6ee7c50", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N96ab198cab814dceb4dc205e80f644d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N727e38139bfa40d9b56e586cf9ac5bdb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8373dd8071e2429e95b3b0897bdab7de", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element refers to a chipset, processor, or electronic board", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element doesn't fit into any of the other categories", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ndfbc16b71fc74cb09458e7b7f0e12f1a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2bdf11c1b85e405a835c07e19f150556", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N37e9effec5ca4011a388b871588a9bfc", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N744e6bd4bf054480b6e284543bb79b87", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:N30ddffc861f14836a83cde39db10d792", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd698c35793ab47df8eaa1d9f6fe9f131", "localId", "", ""] -["_:Nbf51d2fce0c449ca8df0fa964ec48e89", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N08242c50c463457c930eba2a9659cdf9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb4381a5cee3143a482af28cf9a364f3c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N208b27c07ce6469e9114d5b80dfc4f8f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] -["_:N18ed9985cff84e34807e6aa0a780a707", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N0da978c5d15a4e0ca2abb1d9a336eba1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N3be22ea4244a43d6af104de9fed1b4fb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N6761e7f2e133401fa1a4d1f8bed0202e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N48e045eccfb146548852b6d7274d180e", "localId", "", ""] -["_:Nee384a627c3d4a89bbf6312a1aa64aba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] -["_:N99061926c1b041518ba79742537acbaf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] -["_:N37712d80dea04088b1ab530db3aaa7fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1192fb0a041f4b77a8c069659dad0770", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N6dd024b62af74fb5a94391f7343f1c79", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nad60293878ba46b5b12652a41f9e5b9e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] -["_:N56d611894502410481612d5cb6016003", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Na168e6a25ca4415aa927f2d16152226c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Nbfec05fc44f6435dbdeeb9f608a28e4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Na9d0fc4b8c454d308184549fca9959b6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N67b0d956754a43a5b927ae155984d43e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] -["_:N2895a64ec18c48e68dbf01572a5d0cc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Na9d0fc4b8c454d308184549fca9959b6", "http://www.w3.org/ns/shacl#in", "_:N64aa14b2a42d49a394ae8a9d4febed04", "localId", "", ""] -["_:N1f599cc99ec04100bcd965c2ec4fdbfe", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N65e7526ffa224998af69bd3d4082b522", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N045868218fe84846bfd5a8efe73f5f05", "localId", "", ""] -["_:N2c65a23cf781468598b84d1456d825fb", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nb09770ecd1d644e4aa2b0faf704a96de", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N2fd6d6c96c7b46dabc958e2ddb32657c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] -["_:Ne2b61099faaa4dfeb2a1dbb6cb39c943", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["_:N7f27ce1812214cf08ea19bcb018764e2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N67a7c2de8c574fb991ccc64346e1de56", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N46b3ee96a83c4a44bb51112e0ca4621c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["_:N87ef2338681b493982fdd6660c334933", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N57470b62e6a142f9928ab5bfe4606b0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N990faf2e9bde43ab98201c748005987c", "localId", "", ""] -["_:Nf3860ad4cc5d4d87be1f408701c9f435", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N28c546d9833444d7b7370a64f4274b1b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N80091d0c87724fbf9c10267c2549575d", "localId", "", ""] -["_:N70a01ce1edb94124ac3d6a3b187db793", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nde44f9707bd34a41a8e403a4f539bb2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndfbc16b71fc74cb09458e7b7f0e12f1a", "localId", "", ""] -["_:Nb3c96ed9edf047408c12db5df1daaf43", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N8049abc6ee7f449ebf27e3e8357bdf75", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N058b8decd10442dc9da66c8ec337fe89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] -["_:Na168e6a25ca4415aa927f2d16152226c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] -["_:N6e7150c4286149b7aa27ddf655625b5e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N1013910040b04b98b3a99c32bab64312", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60e06f4852a44b05b3dfdbd769a39b3a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "Element is an Artifact that can be run on a computer", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne84bb159066e48a1a884cceaa3854438", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1013910040b04b98b3a99c32bab64312", "localId", "", ""] -["_:N208b27c07ce6469e9114d5b80dfc4f8f", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Neb11974d792545bab359067d0609d8ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] -["_:N320baf3ea5274f3393919c1999ded96d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N150b1880a8e64af2af56beec5b8f629e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N5a18c93b836b4c75887455a2be533616", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N7e45c1203a3548efa7e52e91b09b78f1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N312b811b38e3467eb37fbf91bc0dd93b", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N5c307bac3b90460f8b755b5d46827013", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:Ncdb4a970c7f542688b373a1da217c447", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Na1ab85fdd72146cfb0eb275a20aed6fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] -["_:Ne14b54567e794b13a34acf8718d2ccf6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] -["_:N9b40da1378ab4d6e80898c98996790e2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf05790d65f4b451781271dd86a5b4005", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nce9a69dc19af4e1394f03174c67c5857", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc9ddcdf86e874968aa8f5ba821975eb4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N1647e706f6764e7d9ec4e0aa8979d0c6", "localId", "", ""] +["_:Nf284f365ba5c4e4da40d7d7900d82744", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4b7945a329d940d7a4167237a4e60e53", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc7b49cc0a08745e08e5ba42ee492184f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndde9f898797c42b989ef522557debf64", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4f7ca95fbfad4d20810e92ab09220394", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95c7a63c89e94f8d9ceb0dd0c34ac9e3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N91d11db27b28462b8545b78734a27503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na8cf54eee3ac40cca0ed6cfdaef6a576", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2061c93cd5774c61823bf76c952d5242", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6369a0cffc0445e888c1e30a54a5be5d", "localId", "", ""] +["_:Nbf6c9a626dad41fa8a0422cb3ddab7a3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndcdb30d7deca45a8bc3e563144933f0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Na96bc2776ef4488595f136d0fbac26a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc1332652da345c49ad3c948238f404b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N516b1b46dbb04f1c953906f0388bf8b4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne3e1ac11e78640fab50085207414679f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N510a0fe04f844da5bb96208d9e6a563c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nae8e63939c7c4cf4aa4ba555362d775c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N89d361d3f1d94de5b28ee82b1d3da3de", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93d2d1d1dc3e4b7ea516ee004f674bfb", "localId", "", ""] +["_:N163fe4499b2a454a9641b23118bf53ae", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N425d570f86674f7facee623f8d84a311", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd45f3e248c84b27b2e1a0da67d47a71", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N5ddf9ddcd2bc446f8729bd7a23566faf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0cac787ed3f3421fa6687df4da790a0c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na1cdda0a73e94e598b769cac4a5a5cb8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nebecc80c7e4045d1b3ad15ab0c1d04ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N58c62d134f5e41d78440946685ecf0cc", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0242fde5c314aa599a3a00cfb01634c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["_:N68e2aefd82ab40c59cc6c2bfeab0adc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["_:N07cb32d0626a45cfbea37a7dd2a8b854", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne21f363965114243b81ce67f76575de3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1a0279389d714631b1d12935e9f2b014", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N70cbc4a60eda4e648df0df882fab278d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b7945a329d940d7a4167237a4e60e53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4881d1614aa0403894d16c3ca276d790", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["_:Ne223bb746dc9463bbbe16ca844619e98", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na1cdda0a73e94e598b769cac4a5a5cb8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N7368659f06844e79815bdbdeac2b73f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nf71f6300b14a4726a20ffad899bed919", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8adbab8e05cf4258a0b7e9eedbd03e5f", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N66595c518c6248f69bdca82dccebf454", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["_:N6ac0694afb0c40c1bb0988b0569f0cb4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:N52399fdf517c416ebb2e470463b71b5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N38aeb59117654398b393a546eaaa5fd9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["_:N4f9424fdcb0643a6b8dbd2c83de164a1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne21f363965114243b81ce67f76575de3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3b40c9739164b2eb0ae163374d9c4ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na44640dae5c34e6ab6f3759a75426eb0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbbe9948554644fd8b49899d278739242", "localId", "", ""] +["_:N954579de61d84bef909737ad4568a536", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc51fb19223644705a84f646344b7e9d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:N9eda1b52fa264730ab0b383d300e1726", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N73f9586a8a7d4b978afcb9cfe998050b", "localId", "", ""] +["_:N036299b1f2af44eeb966da8a1217ac9e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6ca1bcbdc494e39a9c1a4da0c52a0b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4278c3d777ea4ebd81cd23af80459c2d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N78c7513398064da1a55c5df1b3c96444", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Ndb56a4a0aad9490faaa05462a9fcc5b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within a Document but defined external to\nthat Document.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N00f0f016bff441178fb3b14b0f1ba310", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N097b38569ab54334ba50aa2055c21bf9", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Na341e2127b1c4da9b7a2c521b48ba61d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc7468096abf8437e9360a8148a93acdf", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Nf37cc853c16d47099115691bcb77f2e1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N065968ff4b1d468f80d208a94f728820", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N761b1b05ac5746c3b86d599c46526598", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N75a4a8a0dcc14090818fdc6eade781c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N264b55b33a4549a6a131d79763879896", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N52399fdf517c416ebb2e470463b71b5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40f9e58aac214052a173ad93b4ed57e9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N36b7d391e5cf402199bf454d82f5735c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbd5a9c0923c423a84d0bb8fef89f4a3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N63f963c2c8a4467bb803f9af7eaafd3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne68051bb209048da9a57bc5dbaf28bf0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N30d5cdb21c144005b1d74c81aa0e129e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N37829b662873490d9964f7bbbc300fce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c8c7c06f10e44fea576f974877ed15b", "localId", "", ""] +["_:N576b7fbe3ba74572a6eb065c67761847", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e1bd25f594a483ab492b4c24a5748eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N85ad449141be453592e9e80c2bc379f4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7368659f06844e79815bdbdeac2b73f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2847f93323fd468eab2b926c5715c994", "localId", "", ""] +["_:N89d38dc48bd64f1d894f7f8c5494c264", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N13396ee366a94de388e2aff47754e81f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["_:N6bd3d2cfd9cd4f248e354deb40a851ff", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne68051bb209048da9a57bc5dbaf28bf0", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N034bf868068348fb92f2f33976cad5ae", "localId", "", ""] +["_:Na461e12485ec495f9d16f08504499025", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc4156282a9c34b6190b0869cdc1793db", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0bf807da343b4645904db560abf69583", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:N7a1979daf894407dabf96d89e984ff05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:N132cde65c9b14a1694d400388aecf0cc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N23a349d7f4a14351adf4c70293152926", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf26016059c3e414da185e30155b543f5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Ndde9f898797c42b989ef522557debf64", "localId", "", ""] +["_:N4f6d0abf94b14a189b945346f00ba9dc", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N8e672d95ff7d48e68c1ed7ecf019b269", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N40f9e58aac214052a173ad93b4ed57e9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf81435c80dee4c1db825f1917f62e947", "localId", "", ""] +["_:Nb2f2a5ddadbe4718954d50737f92e201", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na44640dae5c34e6ab6f3759a75426eb0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N0f509a18a72e4662a7e7fc2fe485c3ac", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N01b77c997a784a81856bfe55a59f0d26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] -["_:Nc0df3f2041aa425183862b62f02dd829", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N9c23cd2dcd4243b996ef8897bfa8759e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N37e9effec5ca4011a388b871588a9bfc", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:N687efc23ea2c4c0b9a09c9ca45dc49b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["_:N329ecc1447f349cc968623ddffe6a2f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N963f7603cd844b03bd4631e0713b1635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne93ae5d0cb664d7ab2554eaa72a23f25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb4381a5cee3143a482af28cf9a364f3c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc3c21678fc9a459784f054a6954a9aa8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:Na96bc2776ef4488595f136d0fbac26a6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N8adbab8e05cf4258a0b7e9eedbd03e5f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N731241b6024d4e109893eb1354404ec5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897df0f6e23b488988a2d2db8aad5bc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N58b8de667bb54771976a5e86a8a8139a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["_:Nbd47cac50394462f9015e00ec4b449a6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N894cee407d8747ec8adc2f05ce722a86", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00fcf1f501a749fc9cbbdbdf23a7aaa8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda71586c3c6541b4a6a907d316dca405", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N34cf4751490f48f9852ff2fa143a6321", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd1b797da281643468add752e036349fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N942417ca6d844df0914d75b099a457f8", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9c1ccbc2b86f454395a450f736b67eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9dbe04a2eaac4271aafe4a7650ec4e15", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N261545ecf40d4f65bf47dc050598e90f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45b62edbd5f3406dba20232288ec19fd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na3925605d49b4db382603ae946c37f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["_:Ndb06ff981cef4e94bfdbec22badacd4d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9bd771ac02cc41519919a01d4deca105", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41fda4edc0294fce84cdb5688d8ef9ef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne06f01bddfb24f69a9e1c0ba9694b11d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d9237b249544033acbf7d94cac2b424", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N2b7fa052bf664f2a9e1923831d282602", "http://www.w3.org/ns/shacl#in", "_:Na5ef7f1675b84ce99e4f4ca36d200a91", "localId", "", ""] +["_:N8e672d95ff7d48e68c1ed7ecf019b269", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N74551d5c49b94ece99a5fdec0d58d233", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N034bf868068348fb92f2f33976cad5ae", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N62b8677868664944abc9f19745aed957", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:Nc3c21678fc9a459784f054a6954a9aa8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb850dda843534d3ab3ffbadf70766fef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["_:N4aa1ea2c440f4aecb7a6656a599fbf22", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne11c75cafdb0438299216847b06716cf", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N5a2b8b0073a54a3db4d6092f1c5043ed", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na2b089e6c69d4697ae4de61d18f020f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N0bf807da343b4645904db560abf69583", "localId", "", ""] +["_:N615be2b8b7174608b24884d12a2039ad", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N37829b662873490d9964f7bbbc300fce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N894cee407d8747ec8adc2f05ce722a86", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ne20cfbefa1424ba79abfc89287f1eef3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N00fcf1f501a749fc9cbbdbdf23a7aaa8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb40076de31ba4cc08826656559e10385", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N59f692071bb64860ab9f02cfb4670088", "localId", "", ""] +["_:Nda71586c3c6541b4a6a907d316dca405", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7a48123f699948b5867af1fec0d7b88e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc8b9ea4213214eccb17ccccf3790161d", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na8cf54eee3ac40cca0ed6cfdaef6a576", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nae7b37ebeef141519b9f1102ae1b30c5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["_:N0713bbcf2b1f4e23b912a81e12b5d270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N542022ab56194a2184bd872572ca204b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce9a69dc19af4e1394f03174c67c5857", "localId", "", ""] +["_:Nf44042158d4d4c85a5bd6a0fcb538498", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf5531d9c16ff4f589dff19f480634c29", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N991d42b910e64656b45d7c4ce9e7f5e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N734a831b529349fb969fd328dc6dcb1c", "localId", "", ""] +["_:N565a78360e28494ea80897aadf944c0c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N5b2278fb3a8e4e239193a033f8b4bf04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N4f6d0abf94b14a189b945346f00ba9dc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N0781395df11e44a6a3186f0fa8908958", "localId", "", ""] +["_:N5a2b8b0073a54a3db4d6092f1c5043ed", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N763c69315ee040a88ca27b5205984626", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] ["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] -["_:Ne0cb74aabc9c4794b4d9319b9a1fe42b", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N41aee74b0dbe4609888f3e3488e75e26", "localId", "", ""] -["_:N55072cbd77a64b16b152c20236d786f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N5332cee7bc2443a3b1d7513e03dbfdca", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N80dc66a1ccec469392596c5291fa2864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nebecc80c7e4045d1b3ad15ab0c1d04ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N9b9dc778bc5c415fad7f82cf4f6047d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N68767751c5f64fc1afe82f2dcbae6636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2b089e6c69d4697ae4de61d18f020f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne820a8ec67114d53b03a71f5f7be31f5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N105628f6c8b040edb9db617f35f30bec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ne11c75cafdb0438299216847b06716cf", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7c7a260c778e4d4491ba75a0fe083ebe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd6f4245b3ebe44e6b100782b191deb97", "http://www.w3.org/ns/shacl#not", "_:Nf58f6bed32c5414ca98526a5d6a7b6dc", "localId", "", ""] +["_:Nc0c94fed0eb041ef8c4fe70f4b1fd7c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf32238231fca45f1ac5221bd1ecd220c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5e77c3af3932465a99431b715d09d12e", "localId", "", ""] -["_:N0f7bf6e1b6a84c71b96db0ed65f445fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] -["_:N5165398aea9744d49e3ba082cb6fa0d8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d3cea31b9db4418ad60cbbcd3f14b75", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nf7805d1c06ba43eaa22c6043949bd567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N62354c6ede0641c2a17958df1fce06bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5165398aea9744d49e3ba082cb6fa0d8", "localId", "", ""] -["_:Ne8b93e1651f84d5f8ff94e4b82012f07", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N13b921afee3a413e9a3b06c638bf7824", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfc79218ef172418cad1d73977bceaf78", "localId", "", ""] -["_:N75afbc0eb6e646f28396b52ee0131582", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nf37cc853c16d47099115691bcb77f2e1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["_:N9ed65925a89e40e8b7faaa925d739c72", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nc51fb19223644705a84f646344b7e9d3", "localId", "", ""] +["_:Na2b089e6c69d4697ae4de61d18f020f7", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N58c62d134f5e41d78440946685ecf0cc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N230a41f8c8d549b8844a37595ce56867", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N13396ee366a94de388e2aff47754e81f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne3b40c9739164b2eb0ae163374d9c4ac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nda71586c3c6541b4a6a907d316dca405", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N10002d3538094764a9c6d3893234cd04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N037a9f94d4da4593a56a6804fca57483", "localId", "", ""] +["_:N210fbcf85b384009a2cee68e4a7e6b78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4f6d0abf94b14a189b945346f00ba9dc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:N682abb8a6bbc40e9947aa2d9d66eec4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4571ded3acc34f068931feecaa278a44", "localId", "", ""] +["_:N2056bd91659a4260a6eb99a0cbdd9f14", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N825f749765e348a0abfef75f63c1588a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N53970517ea09401691d51549f8e0fd90", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:Naf01116eff7c4759be95f8f97c257d9c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf44042158d4d4c85a5bd6a0fcb538498", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N07868b0098174c478ac47f3fbc946ff0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["_:N53970517ea09401691d51549f8e0fd90", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1314ef461724483f9bd5c56d939b17c4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4dcad64fd9cf4af2b8d6ea98d6c5450a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N10f5cc15b506459db381c02764d60e76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nd3d538fe1cb544b5808c51dffd844c81", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nd11df36dd5014f759eab790e847b9857", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N510a0fe04f844da5bb96208d9e6a563c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7c7a260c778e4d4491ba75a0fe083ebe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N6369a0cffc0445e888c1e30a54a5be5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c8c7c06f10e44fea576f974877ed15b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c163fcab8684aa09c61e78b4cbb9b38", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N77f1a43a35e5447c83116261ae574acc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["_:N329ecc1447f349cc968623ddffe6a2f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nae7b37ebeef141519b9f1102ae1b30c5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N682abb8a6bbc40e9947aa2d9d66eec4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N786a3eaa8fbe4cf0bb67c4e086fa8b5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0274510beacf46b0b7cd7048ff3cbb4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b50e4323e8b4d388d8d522e18a49070", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4aa1ea2c440f4aecb7a6656a599fbf22", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:Nc704d39d408f41caa9805e140ff0016a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N954579de61d84bef909737ad4568a536", "http://www.w3.org/ns/shacl#in", "_:N48b3e9d109d34fdeaa6cbef58c05c171", "localId", "", ""] +["_:Nc4156282a9c34b6190b0869cdc1793db", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N5ddf9ddcd2bc446f8729bd7a23566faf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:Nb40076de31ba4cc08826656559e10385", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N91d11db27b28462b8545b78734a27503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N8adbab8e05cf4258a0b7e9eedbd03e5f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N79b4dcdd054d4ca8a87fc86377c9366b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N30d1dbbf97fb456eb18d38b76c8004d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N7a66c734ced842b4913ff95c5f5cf452", "localId", "", ""] +["_:N5ab248e680454bbcb3ed254de24ac49f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4182e8c878544ebb842682b1ece2bd3a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae7b37ebeef141519b9f1102ae1b30c5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na42e3794f624483e818646ed683c5ba2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7f095ac56c3e4bccbcd4348b29980439", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["_:Nf142b126cd744b69be8d6c35ee1361e4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ndbf7c5384f2242b98dd62b6a8d6a503f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This individual element was defined by the spec.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N83935261300041758021c5a3fbdae6c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7368659f06844e79815bdbdeac2b73f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na79e142094fb464da3de3ceb4108e4ff", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N28c7097edd884a9b92697ec6b6729dc9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["_:N5b2e4dda703849e4933338ff0970e968", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Naf01116eff7c4759be95f8f97c257d9c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N68e2aefd82ab40c59cc6c2bfeab0adc4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N87131d5acc2b478ba16230f714aa0bb0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N27a8c8f61e944083abcc670fe4586df8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na3925605d49b4db382603ae946c37f51", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Naa7e95f812804669b3e89daed8d27b21", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc7f12b88e8f5489dacbbfeb81192696a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Ndde9f898797c42b989ef522557debf64", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ncae19f1586924a439b37e75eb5b57ed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["_:N96120491adc84204822952240ddadf13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N39638ea4b52f4236b7a808cb979d2f4b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:Na1ce1658c3be4bc0b082944caae9ddea", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N328adb4bb1ec422084a2169890188a03", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N507c6135f8424e8db67fe59ae93eb464", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N8692a82c280845c3a6fa37c02ddae229", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N3c163fcab8684aa09c61e78b4cbb9b38", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N07cb32d0626a45cfbea37a7dd2a8b854", "localId", "", ""] +["_:N942417ca6d844df0914d75b099a457f8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N8b86dbc23a22407a9380fbd9376d3b83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:N07cb32d0626a45cfbea37a7dd2a8b854", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:N510a0fe04f844da5bb96208d9e6a563c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dbe04a2eaac4271aafe4a7650ec4e15", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N0295e624408541b9b840c231db039610", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nf56fec24d5a44761b7a239c789c51504", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] -["_:Nfe1303da564e44c3ab64d0e8f83a0713", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nde44f9707bd34a41a8e403a4f539bb2e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N896ec867378949ebbc26581fe9cf864c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nfc79218ef172418cad1d73977bceaf78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nf2495df384ef4dfe9e42259508a5f433", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:Nf05790d65f4b451781271dd86a5b4005", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:Nef3e82bf7eac41aa8dc101eabd0f1815", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ac93d52ef544d5cb73aeaeb279b7567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfcc30e48020d4dd2b3493a0cd55ea457", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N27a8c8f61e944083abcc670fe4586df8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N0b728d22a9674ecc87af12fde5aae61c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf507b9bee5ae4254bafe4ce3c72a9f18", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb6e99584403541df96486fcac6d79017", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:Nc15495aea74e4883afce40f042a057d5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N58c3f747313349d396ead702e2de2953", "localId", "", ""] +["_:N14d7232930234cad917631e1993d7ccd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb06ff981cef4e94bfdbec22badacd4d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N65301d1be04341678842dfc049e2a33c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N269b628c85f04f5d8a10fa3c500745a4", "localId", "", ""] +["_:N264b55b33a4549a6a131d79763879896", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0c94fed0eb041ef8c4fe70f4b1fd7c0", "localId", "", ""] +["_:Nc82d9b6d9a4a40d6b95e4cd04612ac98", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad4011b5f8c44cbb3e76f5da0885cfd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N516b1b46dbb04f1c953906f0388bf8b4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N722c45f262084ffa9b063b852952397b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a37deb026864cdca312209746e2caaa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0e471571470240e5872be57bfd58fed9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:Naa7e95f812804669b3e89daed8d27b21", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45481eab750645b4929b7b63c8ca7916", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf94717c65e4f4b86b4df261ecf26650d", "localId", "", ""] +["_:Ne820a8ec67114d53b03a71f5f7be31f5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5e678b3ba38745b58c0103b8e085d5c8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7f2c8d25f5df4c27b35c70d38090eab3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1a8882804ac24104946e7afa0b36905a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N85ad449141be453592e9e80c2bc379f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N328adb4bb1ec422084a2169890188a03", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Ne81afbff18a74c75ac853da24ab327a0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nabd40767fbd84edea7e048b911a681e4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncba4137ebcf84a728acd12bde91130e9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N61b9a25cae674e199ce6572456d8e72f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N00d83dee7aa44a7991821a46e83e5164", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc4286224070a4248ad8590c45a7c8bc6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N425d570f86674f7facee623f8d84a311", "localId", "", ""] +["_:Na3d930b22d4f462cb8bcb86adb108e16", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["_:Nd73c69088f734dffb4cc9539c637aecf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nadd5d6fa295c47ee82d49e5fde059110", "localId", "", ""] +["_:N6f8ca85700744b0e9f7a8672675d1dca", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf507b9bee5ae4254bafe4ce3c72a9f18", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1aac3c1c2ffb45d79910e133d9ec02f9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c34004e669a4f809790739b55299420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne03121e956234709bc0f8f288597ff50", "http://www.w3.org/ns/shacl#in", "_:N261c61aa119e4f4e9ce3c9387fb29c9f", "localId", "", ""] +["_:N40bcef929ef64825a68929a36aefa27c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc82d9b6d9a4a40d6b95e4cd04612ac98", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N1256cfafa26e453a9d5f8b08cc5920d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N90cb783276d74a2881e21a08abf01e2f", "localId", "", ""] +["_:N61b9a25cae674e199ce6572456d8e72f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["_:N74551d5c49b94ece99a5fdec0d58d233", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Nc3c21678fc9a459784f054a6954a9aa8", "localId", "", ""] +["_:N00d83dee7aa44a7991821a46e83e5164", "http://www.w3.org/ns/shacl#in", "_:N2456bf573caa4efeab27607dfed5a451", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nd08114b692094bc788d0ff08c066c7fe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N229d11f8176c4bb7acd631c6b7187287", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ndf7085005814495cbc9689c68bb9683d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N1b7b0e6303e14427817b4b206ef940ce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b17c87267444ae5aae5e12fc54addb6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N73c4669b1ca14351aad291112524e432", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:Nb40056258a0d4d96a453b1af72d463fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9063493949754db985c6c4bb9effda34", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nda791debefe5491aa84d61433873c630", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N93d2d1d1dc3e4b7ea516ee004f674bfb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc71de92f1cc649fcab4d77d974dac329", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N916e8c3c85774fcd96b700a20240ca75", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["_:Nb2747510507b404f9243bfd7225f629d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc9235a4485e64fff9b1298095061a58e", "localId", "", ""] +["_:N904326509fc04cc4be66ea123ed9fdc4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc63741a7112e471ba97ce37e05f2dac1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N50c6944cf3544d0ab17d40d70d7715c3", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ne8b93e1651f84d5f8ff94e4b82012f07", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N5665c63b6756409c9cdaed2974ba4360", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N1f599cc99ec04100bcd965c2ec4fdbfe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ne0cb74aabc9c4794b4d9319b9a1fe42b", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nc034445fd507418d8439a09bb2e562dc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Ne2b61099faaa4dfeb2a1dbb6cb39c943", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N6717b73c37f1437da67113b68f12bf12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N37712d80dea04088b1ab530db3aaa7fd", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nc05797f950af44fbadd42eee2e56df6c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N558588160dbd42e28c5618ebcbb6e00a", "localId", "", ""] -["_:Nab78d95787b8439db6189f9699047620", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1b99de6ce73e49328dc792c34798532e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N7f27ce1812214cf08ea19bcb018764e2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N1685d66aa43c40318d7f1a9af5281dbf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] -["_:Nf37cc853c16d47099115691bcb77f2e1", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N896ec867378949ebbc26581fe9cf864c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] -["_:N7e45c1203a3548efa7e52e91b09b78f1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] -["_:Nf3860ad4cc5d4d87be1f408701c9f435", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nc7468096abf8437e9360a8148a93acdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] -["_:N21edc1b1c7c94a53a14c23900721c4b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] -["_:N3e6f3584b185432c90902e8ec47e33fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f35c1f648d4471ba9ad3e7fc90e56b7", "localId", "", ""] -["_:Nb953247c1d474ff9b1190938b713a604", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd73c665e4d964b40be2d12cdc7ab7fa2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N64aa14b2a42d49a394ae8a9d4febed04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Ne14b54567e794b13a34acf8718d2ccf6", "localId", "", ""] -["_:N6b93f4527c92420f97b4d4d8c27840f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne7755fef413944e6a5bd969d379e8410", "localId", "", ""] -["_:N4a26fc9e687f4bfda660730718e55700", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nc642cb7cb5d441eaaa4a1fc86368d998", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N5665c63b6756409c9cdaed2974ba4360", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N9ee209fef169433cbe6e5201db0529b7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd4eff7d7430d4e6f98acd7f97e4910f1", "localId", "", ""] -["_:N3051e5f9bfdf45b19c416045118502ef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca1589ab2b443ac91b26c54805eb352", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nb040ef9136c54fc59750d17abc90a3ea", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] -["_:Ncdb4a970c7f542688b373a1da217c447", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N37712d80dea04088b1ab530db3aaa7fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N53970517ea09401691d51549f8e0fd90", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b79adf6684a4d328dc28ae0ee98d95d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N45b62edbd5f3406dba20232288ec19fd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nf9bf03371d92462f91a54baa946fd625", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the SimpleLicensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] -["_:N950494b11f9e43fd9ce4b21264e6a0a8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N4dc5e2b6b5fa44d79acdc84229f675fe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N784fd0e933c9417b9e11ea351159df76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb387237d7787460e8f7e72786252a39f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] -["_:N784fd0e933c9417b9e11ea351159df76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N99c96394ef494f739f0ba15682e92ea3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] -["_:Ndaea8b0d88324897b34af58f66f51f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9586947b2f2b402c815b61cb75a37942", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2e8a1060d29d437ba2a94908211b9554", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2751f527dac048b29b31dea36517c56a", "localId", "", ""] -["_:Ne0cb74aabc9c4794b4d9319b9a1fe42b", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N0ac53be222cb49b7af09086cfaaed1db", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Nd5b3406d866f449096ede6b24376294b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7177e8b281d74917a500d212b7382b6b", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nff63d22b8dc54a40a1754583641b37f3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N4fd4703e2c5d4687bed9b05563fc9cda", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd9879e4dffa4f9bbdc67aa2782f06f5", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Na2392fa55f5342ceaccb5f4312194416", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49d9ce37bbb44f77a01b48e5f2009c3f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Na2392fa55f5342ceaccb5f4312194416", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nfd60dc4acf8f405b86d3ebb119d8edeb", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["_:Nc05797f950af44fbadd42eee2e56df6c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N61bad2d32f474f829df8b09e757aec59", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N2751c2ba1ffd40bda218899993caf814", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nfc8707d6d8b944508b09d8d3125e53f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3cb5c5f5df694e3aaf52da4c410b011e", "localId", "", ""] -["_:N9d46caf53cc94a77812c6af4cd5653dd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Na9d0fc4b8c454d308184549fca9959b6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf2495df384ef4dfe9e42259508a5f433", "localId", "", ""] -["_:Nc14cc862b5494776966375d4711f1f8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfafa3bfbbc7b4ea7bd042cec31c4660f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N866122f61ea34bdca92b963b42f6fae2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N10f5cc15b506459db381c02764d60e76", "http://www.w3.org/ns/shacl#not", "_:Ne41f054fce23460dba46863153e67567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ndaeba75fb43b4db7b777e9b00ecd7064", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N8bdb3da6da754d98843024e1dcbe3e43", "http://www.w3.org/ns/shacl#in", "_:Ndc659c8552d54ab684aadbdacdbd7a8d", "localId", "", ""] +["_:Nd05558aa816f416f8c26895bb8d1d9bb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N97120636b11b4b158892706019486fb5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89d38dc48bd64f1d894f7f8c5494c264", "localId", "", ""] +["_:N96c753d614db4e7b844bcb3b5f9ff291", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N168bcfc831bd4f85b6a82742eb7ad4f5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ndb31c53559be41e0b28e79b74da0b557", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N425d570f86674f7facee623f8d84a311", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N38e1279dca3f4e53be4eb3245a0e4ec2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N916e8c3c85774fcd96b700a20240ca75", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne976bc717eb6446291a939038610ee2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Nbc1332652da345c49ad3c948238f404b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N894cee407d8747ec8adc2f05ce722a86", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne7cb91f8739a4acdb1e220785f261efb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["_:N77f1a43a35e5447c83116261ae574acc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81c1c3e2bbc4470ab2eaf9e5c6c4d1f0", "localId", "", ""] +["_:N94e6bbd4fb004035a4cbdb3e969a1fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] ["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7e6385c5f3414e35862d986501bfff61", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N320baf3ea5274f3393919c1999ded96d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N7d98dd34e2e442ec8f9dd87a82897c1a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N065968ff4b1d468f80d208a94f728820", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Na168e6a25ca4415aa927f2d16152226c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] -["_:Nb7591bd67efe44909d92824106c3b13d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N1cfe20f0d2a049b7b751bd3aa0b4a09d", "localId", "", ""] -["_:N5c42defa8afb4ab59df899067c1e54af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne616eaa63e1944649dd12a3061e5726a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] -["_:Nd698c35793ab47df8eaa1d9f6fe9f131", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N13b921afee3a413e9a3b06c638bf7824", "http://www.w3.org/ns/shacl#in", "_:N35bab262301147c0b1b11e0643a659c6", "localId", "", ""] -["_:N77693c7bc7954401a66962a8958fac0c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] -["_:N9fc754cd17fe403b9e6567ff39e96ef5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N107aa4617cfc41499f0678d83f303c24", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nf0d9d94b4d9a4523a1d863217249938a", "localId", "", ""] -["_:N0eeb34b48dec4bf48dbba6ee4c6f829f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] -["_:Ne7755fef413944e6a5bd969d379e8410", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N8e8fa340313748a7b459ba889204f2c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["_:Nc7468096abf8437e9360a8148a93acdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndee65321b0f14da3a2a5675702243602", "localId", "", ""] -["_:Naee034377c334f78a3af1a4d25c3d468", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N6dd024b62af74fb5a94391f7343f1c79", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] -["_:N6b8369d5442f4e3c902c0fd4c6ad7f11", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N4379f82c1b44400197a0281504402fc5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] -["_:N69fe400001ad47cbb9e616ed9d727696", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:N40b61fa0587f469bb27b3e4ece9283bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81774ccb63bb44f59726b12497ed50c2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N1288d377b72c44a58a576536a10d2030", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N5e82508a25064d719d7bcac05ecaa033", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nd08114b692094bc788d0ff08c066c7fe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N744e6bd4bf054480b6e284543bb79b87", "localId", "", ""] -["_:Ne8efa463e51845deb9ed8d60461313c3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f248bb10ce740cc9124e394b35259ba", "localId", "", ""] -["_:N5ba1e97374714be89c6ce6144cda737a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["_:N1cfe20f0d2a049b7b751bd3aa0b4a09d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nda26387d9677485d8554cf33b606d465", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nb1e48771e71b47e98ac6156affc3e067", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:N14c84f27ec214a8aa7744493af4f1b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nb09770ecd1d644e4aa2b0faf704a96de", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neca5f29d67c84d0ba9ac05e9216798e8", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N0ac53be222cb49b7af09086cfaaed1db", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N29943647d0a54ed3bbf4236b7f26fed8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N75a4a8a0dcc14090818fdc6eade781c2", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["_:N67b0d956754a43a5b927ae155984d43e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N597e9b8e9fea4a669873e005bac16fc5", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N999ce6cccf4c43f493041f0c109b3166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N87f3315e965b43ebab1aa1b8deccf16f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nd3eb5f22c3be4e02942314bbb3d6fc3e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N2305488d52f34ae3bd7f3de8a96329e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["_:N56d611894502410481612d5cb6016003", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N8a37f4cffd6247e08ac9432f8447d89a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] -["_:N8373dd8071e2429e95b3b0897bdab7de", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nbb925214ef4742999c6047ece09174ec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "Element represents software that controls hardware devices", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N1af3b716f6264641976ddd0da85d3b1a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N328adb4bb1ec422084a2169890188a03", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8692a82c280845c3a6fa37c02ddae229", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N825f749765e348a0abfef75f63c1588a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc4156282a9c34b6190b0869cdc1793db", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N75f6c4472b7b45349200afcce0dbacef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N58c62d134f5e41d78440946685ecf0cc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b7fa052bf664f2a9e1923831d282602", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:N250a4372ab014e66ba3eec07accb85dc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N74551d5c49b94ece99a5fdec0d58d233", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N163fe4499b2a454a9641b23118bf53ae", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Ne976bc717eb6446291a939038610ee2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5485992ed4e4cbea07fa6d87ee716ac", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N716ee87802fd4b6f98bfcff38ca5ff8a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4881d1614aa0403894d16c3ca276d790", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N53970517ea09401691d51549f8e0fd90", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N461fe7f9c28b4d81a4fb17726fc9adf6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf5531d9c16ff4f589dff19f480634c29", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N105628f6c8b040edb9db617f35f30bec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneElement", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "globalId", "", ""] +["_:Nb850dda843534d3ab3ffbadf70766fef", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Ne820a8ec67114d53b03a71f5f7be31f5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Nbd47cac50394462f9015e00ec4b449a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4d92ede494e34e51ba6eca91292dc0dc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["_:N91d11db27b28462b8545b78734a27503", "http://www.w3.org/ns/shacl#in", "_:N1a8882804ac24104946e7afa0b36905a", "localId", "", ""] +["_:Nf81435c80dee4c1db825f1917f62e947", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N507c6135f8424e8db67fe59ae93eb464", "localId", "", ""] +["_:Na3743aad0c334d06a729f81988609c9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f2c8d25f5df4c27b35c70d38090eab3", "localId", "", ""] +["_:N82b5fa65536b400a809bd5f3104f6ec0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndfe4dc1d7d574b10a92ee8955837ad9d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N0b353053b3cd41e89351acf39abb719c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na449b0b56e3540618b2a2698204edde9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nae8e63939c7c4cf4aa4ba555362d775c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nfa72871f5924444491d18910ec431abb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd77657e0b19d459c931f64f48ed7e1a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nd90adf23ae66491daa68ac6dd4501bdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N243ef6907efb40d38e00f4430d63fc19", "localId", "", ""] +["_:N93d2d1d1dc3e4b7ea516ee004f674bfb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25b71b41baf8408a91b66336f376a5b6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:N30d5cdb21c144005b1d74c81aa0e129e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc37985fef6884679b49d387a2ef08d3f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N105628f6c8b040edb9db617f35f30bec", "localId", "", ""] +["_:Nd11df36dd5014f759eab790e847b9857", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "https://spdx.org/rdf/3.0.1/creationInfo_SpdxOrganization", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N565a78360e28494ea80897aadf944c0c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d9237b249544033acbf7d94cac2b424", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncc35596b6f164968b0bd35143cbc52ea", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dc54ccc3f8d4afe897d7be97f9f6928", "localId", "", ""] +["_:Nfc3f4dc279d7471b83aa1a9df09f8d3f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:N4881d1614aa0403894d16c3ca276d790", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N64ae0543871444f6b7d2a497fcf55186", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na0242fde5c314aa599a3a00cfb01634c", "localId", "", ""] +["_:Nd90adf23ae66491daa68ac6dd4501bdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "https://spdx.org/rdf/3.0.1/creationInfo_NoneLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5eab3a0a527f4705bdb2f04b7c39e36c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb6e99584403541df96486fcac6d79017", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb07efffce0ba43a2bcac0e3a90a48609", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb245e59ae52342bea2f1feb05bb80e79", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N34cf4751490f48f9852ff2fa143a6321", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:N377b547285074591a904911ef1fc1977", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne976bc717eb6446291a939038610ee2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncba4137ebcf84a728acd12bde91130e9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nb916f2dfc1c640bd8e0dac9bb5956172", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91adaf3024344ddcbcbf3f943faaad6b", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["_:Nf6a05248229d4fe292d04534a4c4573d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N7a66c734ced842b4913ff95c5f5cf452", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nad909dcc4fad4339a9eb809fabd6a871", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33da303c78e142a2acc0db12f3ee6686", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nedaa28cbd856413e95e7805cf2d255dd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8bdb3da6da754d98843024e1dcbe3e43", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N8ec4229c1a674693bde766506ca93e87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f694c64068844ca80652791ca7749d9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2d1a418cbe234eceb99e5900d573b9f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] -["_:Ndc5c3acba75e4205b113623c75621c6e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] -["_:N2279545cee4f47fb9986df1b11a68c0f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] -["_:N13b921afee3a413e9a3b06c638bf7824", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] -["_:Ne202363026264077a74d779bbd16e04c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba91218e21de428abcc29e6f6dd70951", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Ndaecf52053104527964b081f8f6d4dfe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N75afbc0eb6e646f28396b52ee0131582", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na40768ed7c6a40fcb01c9e8f1793b8a7", "localId", "", ""] -["_:N3df9880d78624ddba1dd8e35a428b9c9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N67fc6e9fc5d24eabb8543cdc669b1145", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:Neecbcd12ce83469c90d8e79c41ce15e2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["_:N208b27c07ce6469e9114d5b80dfc4f8f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] -["_:Nd43d5a2d7d1648598329bd2d9c226af3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] -["_:Nb1e48771e71b47e98ac6156affc3e067", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N3be22ea4244a43d6af104de9fed1b4fb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Na9d0fc4b8c454d308184549fca9959b6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Neecbcd12ce83469c90d8e79c41ce15e2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N4a26fc9e687f4bfda660730718e55700", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08242c50c463457c930eba2a9659cdf9", "localId", "", ""] -["_:N069fdf6673d440b8ab54670ad7906662", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] -["_:Nb134dbc7f13f499887fd10287bcaba2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] -["_:N2e8a1060d29d437ba2a94908211b9554", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc8b9ea4213214eccb17ccccf3790161d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["_:N4f6d0abf94b14a189b945346f00ba9dc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N2dbc8b0a30da433a94050a3ab1190bb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Nb4381a5cee3143a482af28cf9a364f3c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd33af007bad14a4594f7039df1c5df75", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na267e7b88a344e4fbd0c59a6dc760e65", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["_:N1a0a0b40de254f55a8372bba19b60496", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N694be39aecbe44d49f3850275de952ec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29cadfcf5dfa4e73b1b0f56fa6e4352f", "localId", "", ""] +["_:Nfbb5f5e996be44989d31d47d46540443", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc7b49cc0a08745e08e5ba42ee492184f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4609fa7f53e4898a47341b507b5e03e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N91adaf3024344ddcbcbf3f943faaad6b", "localId", "", ""] +["_:Nd2a11bb8a1a14a82994d02e9dd610275", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4382805b6a5947d38ffcfd8b182bddbf", "localId", "", ""] +["_:N79e0fdc8a753446e8e1931aab90b02ae", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the ExpandedLicensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne778a773be4f408192f2ed37c6143a5d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N2a72f2e0c3d44dd5ac4c0633f336d556", "localId", "", ""] +["_:N5e678b3ba38745b58c0103b8e085d5c8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Ncb6c9deb0ba44382a0b957b7ea80228c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:N8ad3af20ea5248df91865def0b7a98de", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd0d48abef81b4c44a952c0925a6e30a9", "localId", "", ""] +["_:N1dd7c94072d1478ca91bee2c7af967a8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nda791debefe5491aa84d61433873c630", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N8358def5fd2b4668b759d786315e799f", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nddcc9ac569c4442b894f208d7722b4f8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N65301d1be04341678842dfc049e2a33c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na00b6f47e860415881f7e8a524a04316", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf6f1751e3ea84341bdeec66f7c44a8ce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N694e3d4238ff4006b46b450b91f4179a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:Ndc4f18efad334d78a498ea9df84fbd02", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["_:Nf1326177a8f54cd38fb0d7aae60d69bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5f799594600d45d0b83461261182f275", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N329ecc1447f349cc968623ddffe6a2f7", "localId", "", ""] +["_:N261545ecf40d4f65bf47dc050598e90f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N451bba51c46a4c9d9a2343aef3356453", "localId", "", ""] +["_:Nd1b797da281643468add752e036349fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nddcc9ac569c4442b894f208d7722b4f8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbb0a3a63cdba4f078c6de6eef7ff6579", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5eab3a0a527f4705bdb2f04b7c39e36c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9bd771ac02cc41519919a01d4deca105", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc63741a7112e471ba97ce37e05f2dac1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nda9579bf8aeb475c986dfda97af9e414", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "Element contains a set of changes to update, fix, or improve another Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2fd6d6c96c7b46dabc958e2ddb32657c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["_:Nd3eb5f22c3be4e02942314bbb3d6fc3e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N1288d377b72c44a58a576536a10d2030", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:N4477c4b31f20446998b8dff00cd309b3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N29943647d0a54ed3bbf4236b7f26fed8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:N2bae390e06fc47d4916dcf58441c0065", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e4dbab89bc942d6934c8d53674bbf1b", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nc642cb7cb5d441eaaa4a1fc86368d998", "localId", "", ""] +["_:N315dc3dd043c41a49ffaaba74d10eeb0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb916f2dfc1c640bd8e0dac9bb5956172", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N40f9e58aac214052a173ad93b4ed57e9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N29cadfcf5dfa4e73b1b0f56fa6e4352f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na3d930b22d4f462cb8bcb86adb108e16", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N236307149ca247fcad8df1b0dd41fcfc", "localId", "", ""] +["_:Nce9a69dc19af4e1394f03174c67c5857", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N10f5cc15b506459db381c02764d60e76", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c8c5257e6c144099de859c3f43b1961", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["_:N963f7603cd844b03bd4631e0713b1635", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N62c446ad08764db680206dcd96bc8476", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N2bae390e06fc47d4916dcf58441c0065", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne14b54567e794b13a34acf8718d2ccf6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ne20cfbefa1424ba79abfc89287f1eef3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N07cb32d0626a45cfbea37a7dd2a8b854", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3b50e4323e8b4d388d8d522e18a49070", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N275d7c15ea6640618cb7cde014c0aa3e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nd134630c82914216aaa76b9680232c0c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] -["_:Ncb7110c05f9f446f887398fa2d241dd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nfc1e6fef13174b9e90d4ca817a331079", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na1f3d174a6d64488a8ff34be710850c5", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N1b970adab24f43699ff9033a7892334e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbb554a0d397845a2a23c335ba508c87e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N80091d0c87724fbf9c10267c2549575d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N4c5910b87a7e4fc69577e8ccd52c8ab3", "http://www.w3.org/ns/shacl#in", "_:Nd5b3406d866f449096ede6b24376294b", "localId", "", ""] -["_:N3b17c87267444ae5aae5e12fc54addb6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb6697d6a50a946d9a78f5c1d507fee30", "localId", "", ""] -["_:N37e9effec5ca4011a388b871588a9bfc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N1f599cc99ec04100bcd965c2ec4fdbfe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nc416283f46f74c5ca28e42eede357fc1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N35cc536a7b8e4401b4f4e6b8982306e1", "localId", "", ""] -["_:N70201d67aa3f481b9abefcb469f48d98", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] -["_:N18a257cc80b34d42949a3f99d880f84c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nff58f069db3f4f099a21fd26a1b4e17e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] -["_:N4b5795c987f1446dbda919350438fd0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N30a7d396784a431ba0eb686ae5b7e645", "localId", "", ""] -["_:Nad60293878ba46b5b12652a41f9e5b9e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Naee034377c334f78a3af1a4d25c3d468", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N7a477b2d627c40bfbee3b6eca010b404", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nbe19063f503a46969af5f11469f71a33", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N998d2725c2574c8f8344620b839e2d6f", "localId", "", ""] -["_:Ne8efa463e51845deb9ed8d60461313c3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9547de9ed84145228bed37ef2d51f84f", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N3cb5c5f5df694e3aaf52da4c410b011e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N015d97ba72604b6fa2e5fa44fa994d9a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nebb958f1bf4c40b2abcb1472090d7504", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:N26117aef00804f4b9d67298a6fd9c1de", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] -["_:Nf3860ad4cc5d4d87be1f408701c9f435", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3f1a11bf8f004d80a83fff483af24469", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] -["_:N8d911077b7fd4e4180299a09ca29ea53", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Ne4d0e63a8226430099ec09bd81396164", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:N6cddf83b203740bbb3558b7474a07821", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Nb3c96ed9edf047408c12db5df1daaf43", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nb040ef9136c54fc59750d17abc90a3ea", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nebb958f1bf4c40b2abcb1472090d7504", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne883dfda4a7445ceb1e70f39ddd03fea", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Na267e7b88a344e4fbd0c59a6dc760e65", "http://www.w3.org/ns/shacl#in", "_:N89d361d3f1d94de5b28ee82b1d3da3de", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["_:N3daf4b35020144689a44f0ff15ab9244", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nd78d72bd38c34a3c804f97f9e6b927a3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] -["_:N2684328da52949f091f313d918153601", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbb8a5798239c4e919f8766e4ec36f99c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N70201d67aa3f481b9abefcb469f48d98", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1d5173c248f14304bd9adef81206e060", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N71251064642941d5a8323c552deea710", "localId", "", ""] -["_:Nd5b3406d866f449096ede6b24376294b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] -["_:N35cc536a7b8e4401b4f4e6b8982306e1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N4477c4b31f20446998b8dff00cd309b3", "http://www.w3.org/ns/shacl#in", "_:Nbf34bde0e54243da9c73928c648b8ad7", "localId", "", ""] -["_:N9063493949754db985c6c4bb9effda34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] -["_:Na108e2b1e33249d1a7c16ae86469a51b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N91adaf3024344ddcbcbf3f943faaad6b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N904326509fc04cc4be66ea123ed9fdc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nca9532c3dd0b421e95d0800b68e3442a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N79e0fdc8a753446e8e1931aab90b02ae", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N3ba51db196c04386ae47cb64aab6c95c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd8679c5e3311467ca097a4151ac8fa54", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc7f12b88e8f5489dacbbfeb81192696a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ned1f0afb78d3460c9478383abf3da36b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nf284f365ba5c4e4da40d7d7900d82744", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na449b0b56e3540618b2a2698204edde9", "http://www.w3.org/ns/shacl#in", "_:Ndc4add4edebe43f4821fb10dd712e481", "localId", "", ""] +["_:Ndc4add4edebe43f4821fb10dd712e481", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N28c7097edd884a9b92697ec6b6729dc9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02fadd3757064be6a0b797d8675b611e", "localId", "", ""] +["_:Ne81afbff18a74c75ac853da24ab327a0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc63741a7112e471ba97ce37e05f2dac1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5d195bb929fc404584503e9c9b17a526", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Naf01116eff7c4759be95f8f97c257d9c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N626b5ad29167479dabae9a9177315404", "localId", "", ""] +["_:N3c8c7c06f10e44fea576f974877ed15b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N79b4dcdd054d4ca8a87fc86377c9366b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N87131d5acc2b478ba16230f714aa0bb0", "localId", "", ""] +["_:Nf3c62ca118b94d17a1ef6b04e407421c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N186b972a57284ae1946b3f7d8e762830", "localId", "", ""] +["_:N9ed65925a89e40e8b7faaa925d739c72", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N722c45f262084ffa9b063b852952397b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4609fa7f53e4898a47341b507b5e03e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N63f963c2c8a4467bb803f9af7eaafd3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nba03adbea09d477299a596cac9fd8319", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N024478cff6eb4ef48dc45dabdb7b0a35", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Nff33e8337dc8421d9e74b338e35a75d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N7c9974a53d5443c5831f3e7dc56073d0", "localId", "", ""] +["_:Nbd47cac50394462f9015e00ec4b449a6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8adbab8e05cf4258a0b7e9eedbd03e5f", "http://www.w3.org/ns/shacl#in", "_:N7eb015d497fc4c09bb8530f59c65624d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N348ad67a2abe4f9d929b1e20acc594b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N82b5fa65536b400a809bd5f3104f6ec0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["_:N3bf9008e5422473bb689602da04ccca1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nad909dcc4fad4339a9eb809fabd6a871", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N14c84f27ec214a8aa7744493af4f1b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Ne4619e36e32c4fdc886ba17b636520a3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N1cfe20f0d2a049b7b751bd3aa0b4a09d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N00e5d1a9fc9f4e8ea643c5dec21372c9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nc7ccb8d419ad49ab9f18f22daf82266f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nb55dc8c91e234dedbb3dbcc141a59bc9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nf0d9d94b4d9a4523a1d863217249938a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] -["_:N22c1a3c4c4964b7f90a94e0af7e75d87", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N4cf191c2823c4f9ba2e3124c01643d11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne4d0e63a8226430099ec09bd81396164", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncdb4a970c7f542688b373a1da217c447", "localId", "", ""] -["_:N99c96394ef494f739f0ba15682e92ea3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eeb34b48dec4bf48dbba6ee4c6f829f", "localId", "", ""] -["_:N6b8369d5442f4e3c902c0fd4c6ad7f11", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N4545916c069c4e0ab8f2f3c3e582d429", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nf39729cdf1294ea88879ccd16e468339", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Na168e6a25ca4415aa927f2d16152226c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N81a9816f437e481bb798da6e731d8252", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] -["_:N2757a283e93b45ad88b85a593725d092", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Ncd7fa1f2b5334cd680d0c04e40453667", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] -["_:Nc6df8997e25c4618ad64b329bea18fa4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Ne9376f7e610a4f378d34348bf09acb82", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N5ca015566baa49e1be7bab3e5ca1b85a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] -["_:N6535885322084aa986c62f1ad80b3668", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N9d46caf53cc94a77812c6af4cd5653dd", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Neecbcd12ce83469c90d8e79c41ce15e2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N28c8fedea4324ffa8c41338d5fae0fe5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nf39729cdf1294ea88879ccd16e468339", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N7a1979daf894407dabf96d89e984ff05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N870a0a4f2a794e2aae2a22975ec6fa49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N7476374ddf7c4c82a95e5a63b60e4e0e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N14c84f27ec214a8aa7744493af4f1b05", "localId", "", ""] -["_:Nc0df3f2041aa425183862b62f02dd829", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9dce65a406e14831b9cc10cfd6e434a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] -["_:Nec3642cffbce44abbfb1f66ffa74d5c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N13b921afee3a413e9a3b06c638bf7824", "localId", "", ""] -["_:N7bd6e74fed5e42d29e8234d5933efd98", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncb9989fa0c964e6f8d1f94c2ac8e2674", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N9c23cd2dcd4243b996ef8897bfa8759e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81c3ab3c353544c9b673be7535094681", "localId", "", ""] -["_:N6ca1589ab2b443ac91b26c54805eb352", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:N870a0a4f2a794e2aae2a22975ec6fa49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b270772d72b4f059b6cf8c0703f1948", "localId", "", ""] -["_:N55072cbd77a64b16b152c20236d786f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N9b40da1378ab4d6e80898c98996790e2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N62c446ad08764db680206dcd96bc8476", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["_:N66b9ee3f008340d2b9dffa814afd424b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6761e7f2e133401fa1a4d1f8bed0202e", "localId", "", ""] -["_:N4477c4b31f20446998b8dff00cd309b3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] -["_:N70a01ce1edb94124ac3d6a3b187db793", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:N456086b235914b4f9bd89adfd54de37c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] -["_:Nc7ccb8d419ad49ab9f18f22daf82266f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] -["_:N443dd85c241c4fe58205e0b7c7f18034", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6eb9ec15081f404a99935ff4e2aaa14b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:N7676f1bbd99e47659502f87b9936453e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N98018fef19484e2fae944af82b21920e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc704d39d408f41caa9805e140ff0016a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N328adb4bb1ec422084a2169890188a03", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["_:N1314ef461724483f9bd5c56d939b17c4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7676f1bbd99e47659502f87b9936453e", "http://www.w3.org/ns/shacl#in", "_:N5b2278fb3a8e4e239193a033f8b4bf04", "localId", "", ""] +["_:N9a582f09d0b7426d81ae74b09a5ed252", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f095ac56c3e4bccbcd4348b29980439", "localId", "", ""] +["_:Nb3e77cdb9a14442eafb0659c7081c110", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Nf26016059c3e414da185e30155b543f5", "localId", "", ""] +["_:Ndb31c53559be41e0b28e79b74da0b557", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N72dd028519c2443b94229cfc4a2639bc", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["_:N5912892962274966938ef83f3f23c015", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N6f8ca85700744b0e9f7a8672675d1dca", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N30d1dbbf97fb456eb18d38b76c8004d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nece0b4f721a847f98727202b50f4a753", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N894cee407d8747ec8adc2f05ce722a86", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nc9ccffdec66347509395f75c9845128f", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N576b7fbe3ba74572a6eb065c67761847", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad4011b5f8c44cbb3e76f5da0885cfd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9e3f2c4f96904bddb1aa46c01701b0f6", "localId", "", ""] +["_:N38aeb59117654398b393a546eaaa5fd9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N17c879855daa4fd7b7d7ef9da34e7ea6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nce436d556d4e4606ba37d9ad32d22967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfcc30e48020d4dd2b3493a0cd55ea457", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N024478cff6eb4ef48dc45dabdb7b0a35", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd951591fca6c47c2985dd159db6ad52c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:Na96bc2776ef4488595f136d0fbac26a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["_:N61b9a25cae674e199ce6572456d8e72f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N694be39aecbe44d49f3850275de952ec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:N7b50bf552c054e5baab961ecc882b722", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["_:Nbd013d07f45a42d99931fe619ee4ca95", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7583808b54c947658126a7846ad7cc76", "localId", "", ""] +["_:Nbbbec88245754e9d9390b9a11f0b67c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N54d1f829ecc441b9b7d9248324cbea6b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8b86dbc23a22407a9380fbd9376d3b83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4f9424fdcb0643a6b8dbd2c83de164a1", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne880e2c5878f4becba59cd843618c77a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N8a37f4cffd6247e08ac9432f8447d89a", "localId", "", ""] -["_:N62354c6ede0641c2a17958df1fce06bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] -["_:N1b99de6ce73e49328dc792c34798532e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] -["_:N13b921afee3a413e9a3b06c638bf7824", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N46c1d107f9c3474aac7ed47419f9465a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01e0073f9d2a49f49037b8e666018bbd", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N419137dca06848e2a161d5eaadc9992f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] -["_:Nd0d9b8cea40d40dc91877f32f673ef66", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] -["_:N3cf591f215db46d1b2957c0113ce16f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N0c63fb970906431f8ed02f6980609420", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N6b8369d5442f4e3c902c0fd4c6ad7f11", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:Nda9579bf8aeb475c986dfda97af9e414", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nfc1e6fef13174b9e90d4ca817a331079", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] -["_:Nf2495df384ef4dfe9e42259508a5f433", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N81a9816f437e481bb798da6e731d8252", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf56fec24d5a44761b7a239c789c51504", "localId", "", ""] -["_:N26117aef00804f4b9d67298a6fd9c1de", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:Neecbcd12ce83469c90d8e79c41ce15e2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N7d98dd34e2e442ec8f9dd87a82897c1a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] -["_:N069fdf6673d440b8ab54670ad7906662", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nffd32d595d024069b6df3a1ef8da642a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] -["_:N8049abc6ee7f449ebf27e3e8357bdf75", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nf98babca843e446f8ddf5dee59296ef5", "localId", "", ""] -["_:N62c446ad08764db680206dcd96bc8476", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] -["_:Nc0df3f2041aa425183862b62f02dd829", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] -["_:Nc6df8997e25c4618ad64b329bea18fa4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N6731fd512ee84a2781b8140677b0161e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nff83286adad842f19d79a36e90df97d2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N5ba1e97374714be89c6ce6144cda737a", "localId", "", ""] -["_:N2684328da52949f091f313d918153601", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] -["_:N866122f61ea34bdca92b963b42f6fae2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] -["_:Nf32238231fca45f1ac5221bd1ecd220c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["_:Nb9bfca375550473584a9365efe4f29a3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N77693c7bc7954401a66962a8958fac0c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9832a681241a4a91bd95ecdfaa05670d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N4a639a72aca4429f900632616a34bef4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N6afb5f6c981f4dc0b9434c037cffebfb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] -["_:N87f3315e965b43ebab1aa1b8deccf16f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6b93f4527c92420f97b4d4d8c27840f3", "localId", "", ""] -["_:N5c307bac3b90460f8b755b5d46827013", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N069fdf6673d440b8ab54670ad7906662", "localId", "", ""] -["_:Nb3642a2160e24cfd8d98230c09e472be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:N3851673c346e4c9cacc8cf50837d6cfb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb9bfca375550473584a9365efe4f29a3", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Nf9cc156a3e084f8ab0ce054200c8fca7", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N5cc19e587a4f464a9572d61b4352c919", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9dfffc9a0d064fbbb99f222927600262", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Nee384a627c3d4a89bbf6312a1aa64aba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:Nf0b9c1849e524f0e8b565e2bde495ce5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] -["_:Nb9bfca375550473584a9365efe4f29a3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] -["_:N3f6ce06e6ca2446781e41b064c3d1d58", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N2be1468f91bc454082c8d0af333d205f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ndb8f89749acf4352b1d62c554af7fde6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] -["_:N7d3cea31b9db4418ad60cbbcd3f14b75", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N097b38569ab54334ba50aa2055c21bf9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N2454277637b14ff0b3c86e707c803ebf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5e9739ded9643ef8a3fe72118c28135", "localId", "", ""] -["_:N9586947b2f2b402c815b61cb75a37942", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N761b1b05ac5746c3b86d599c46526598", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N6535885322084aa986c62f1ad80b3668", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N70a01ce1edb94124ac3d6a3b187db793", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["_:N0ac53be222cb49b7af09086cfaaed1db", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:N29943647d0a54ed3bbf4236b7f26fed8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N8049abc6ee7f449ebf27e3e8357bdf75", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nb387237d7787460e8f7e72786252a39f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N2d8b30121bba468383f1a52208a233a0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nf4064e5c7fb84a899bffb14df5844894", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Nd73c665e4d964b40be2d12cdc7ab7fa2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:N082cb9b35b7b4791aa1d9debf6080789", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:N951ec4cbce414b3bab847840bf18d59f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Na82fb3a822a04f6180f1ca7808276d8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6bdb22311b243119db2aee3b54fabe4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["_:Nfcc30e48020d4dd2b3493a0cd55ea457", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nadd6173eaf8b4550a3ec8c90524cc599", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4d86b5ad122d431bbf443326643a51df", "localId", "", ""] +["_:Nabd40767fbd84edea7e048b911a681e4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N58b8de667bb54771976a5e86a8a8139a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Nd77e569c4d2d4d2c9bb29ea462bc94cc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N39638ea4b52f4236b7a808cb979d2f4b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4d2df683a0ea4c39be288b78f9e61ca4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N184c02d9c66a4e9d988d681d20c5ddc6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3de741ac343042e6ac53564501076e44", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ff4ba19d0a41c18c6ccfc733f2193d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["_:N4278c3d777ea4ebd81cd23af80459c2d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["_:N73833299f42a4f78b3a3379f9d2302d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N38e1279dca3f4e53be4eb3245a0e4ec2", "localId", "", ""] +["_:N30a10bdc909f4c4bb84f02821147b416", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf6a05248229d4fe292d04534a4c4573d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nb2747510507b404f9243bfd7225f629d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf81435c80dee4c1db825f1917f62e947", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N61753ca6fa484199b143356d20b0476e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N5a2b8b0073a54a3db4d6092f1c5043ed", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7b5b4ad7f9a54d91a292ac0738539050", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Na34b98cc7abc4ac2bb5b1ba9777ec6a0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc2ac7680f26b40408ebfc2b4bb40def7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nc6bdb22311b243119db2aee3b54fabe4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N963f7603cd844b03bd4631e0713b1635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:N70cf024bfa9e40a08de101b510631f60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4f925ef656b840928e22aa51252c2976", "localId", "", ""] +["_:Na3b27046864941989a486e5a70e0edb4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ndc659c8552d54ab684aadbdacdbd7a8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf142b126cd744b69be8d6c35ee1361e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncff880d9e9c24887adcf512cbce2a444", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Na1ce1658c3be4bc0b082944caae9ddea", "localId", "", ""] +["_:N74551d5c49b94ece99a5fdec0d58d233", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:N0e4d30a5dd60459dbbb5efc7333deb37", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N73e74213eec84d8daaa36a51dab963d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Nf3c62ca118b94d17a1ef6b04e407421c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N8692a82c280845c3a6fa37c02ddae229", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7091d1b764924e4db3551e0b422e61ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1d4668e7f12244a7a9407b898c9b0534", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N28c7097edd884a9b92697ec6b6729dc9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453a2981f56c4d3a943752e7740f87fd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6e913b09266e498887238fae6898e289", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bd3d2cfd9cd4f248e354deb40a851ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N072d6f5c7eee40859e3a93d05034536f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a3178783c58491bb646a056a8dbb37a", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N04f6ef255f0f45e0843face78e6af32f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf854d2bed3524a08aa85d987a15ae3b4", "localId", "", ""] -["_:N15fc27df69c64453aa991097a3de803a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nc71de92f1cc649fcab4d77d974dac329", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc3f4dc279d7471b83aa1a9df09f8d3f", "localId", "", ""] +["_:N4f7ca95fbfad4d20810e92ab09220394", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne883dfda4a7445ceb1e70f39ddd03fea", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd0d551be201428eb241c70d0e315cfa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N79b4dcdd054d4ca8a87fc86377c9366b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N8115c0678af046f9bb8fe56f1541b92b", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N2456bf573caa4efeab27607dfed5a451", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb40076de31ba4cc08826656559e10385", "localId", "", ""] +["_:N5912892962274966938ef83f3f23c015", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nd3d538fe1cb544b5808c51dffd844c81", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N269b628c85f04f5d8a10fa3c500745a4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N95c7a63c89e94f8d9ceb0dd0c34ac9e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N348ad67a2abe4f9d929b1e20acc594b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nef3e82bf7eac41aa8dc101eabd0f1815", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nadd5d6fa295c47ee82d49e5fde059110", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0dc54ccc3f8d4afe897d7be97f9f6928", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6946aaeee89545da9d91b8527c54139a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N8eab6125211e4549a03d744617823ad5", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:Na92e8ceda7e548bb9a144c2e9c857639", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N74551d5c49b94ece99a5fdec0d58d233", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd385c846dfa14371a0a3697f7168b4c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N91adaf3024344ddcbcbf3f943faaad6b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8f24e4128c124ec08b9e80f45a43dd1e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N951ec4cbce414b3bab847840bf18d59f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N451bba51c46a4c9d9a2343aef3356453", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["_:N4e6142c3e2dd4f3f9e2aed1df9452bc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N716ee87802fd4b6f98bfcff38ca5ff8a", "localId", "", ""] +["_:Nc37985fef6884679b49d387a2ef08d3f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na3b27046864941989a486e5a70e0edb4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc1bb7a1b7d034342906511e27e066abc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf21725c3245f4286b67bd679d3351c59", "localId", "", ""] +["_:Nd05558aa816f416f8c26895bb8d1d9bb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N4382805b6a5947d38ffcfd8b182bddbf", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:Ne3b40c9739164b2eb0ae163374d9c4ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7a66c734ced842b4913ff95c5f5cf452", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf0752cee7bef48efaa39267516a6b21a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7091d1b764924e4db3551e0b422e61ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf41c7f62f52f4c10b14344ec13dfe1e5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb6e99584403541df96486fcac6d79017", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4538304380bf48b895869aa8dbea3275", "localId", "", ""] +["_:Ne223bb746dc9463bbbe16ca844619e98", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45481eab750645b4929b7b63c8ca7916", "localId", "", ""] +["_:N06465237afe4406eb4803558f7a57c08", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N024478cff6eb4ef48dc45dabdb7b0a35", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["_:Nce9a69dc19af4e1394f03174c67c5857", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9e3f2c4f96904bddb1aa46c01701b0f6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N453a2981f56c4d3a943752e7740f87fd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne11c75cafdb0438299216847b06716cf", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2c7697a923534e9988689746f1d03e41", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb28702ad1ccc478ba7b8aa42bc12985d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na3d930b22d4f462cb8bcb86adb108e16", "localId", "", ""] +["_:N4b7945a329d940d7a4167237a4e60e53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2056bd91659a4260a6eb99a0cbdd9f14", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf94717c65e4f4b86b4df261ecf26650d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N576b7fbe3ba74572a6eb065c67761847", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N6eb9ec15081f404a99935ff4e2aaa14b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na42e3794f624483e818646ed683c5ba2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N734a831b529349fb969fd328dc6dcb1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Ne03121e956234709bc0f8f288597ff50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N78c7513398064da1a55c5df1b3c96444", "localId", "", ""] +["_:Nf44042158d4d4c85a5bd6a0fcb538498", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N61753ca6fa484199b143356d20b0476e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc22ee04d695b4582bd604f6206900620", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N187a93895c7b43bea96131212a0ba3f5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nce6e2333750a40619f2e93e40be35d7e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc37985fef6884679b49d387a2ef08d3f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd6ca1bcbdc494e39a9c1a4da0c52a0b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb81407b76fc94f228f1f5ad011d931a5", "localId", "", ""] +["_:Nf0752cee7bef48efaa39267516a6b21a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Na1ce1658c3be4bc0b082944caae9ddea", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7a66c734ced842b4913ff95c5f5cf452", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nadc18a90b6ca4cc3af0fb2aa7418dda8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc2ac7680f26b40408ebfc2b4bb40def7", "localId", "", ""] +["_:Nd8679c5e3311467ca097a4151ac8fa54", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N0e4d30a5dd60459dbbb5efc7333deb37", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N10ab85203a394bd3ba6ef86074d64233", "localId", "", ""] +["_:N95b6da49b56e4298924cd2f153f00905", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf507b9bee5ae4254bafe4ce3c72a9f18", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7c9974a53d5443c5831f3e7dc56073d0", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc4f18efad334d78a498ea9df84fbd02", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N61753ca6fa484199b143356d20b0476e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd14f0a1267744e89f6930e710689414", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndfe4dc1d7d574b10a92ee8955837ad9d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:Na96bc2776ef4488595f136d0fbac26a6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4c8c5257e6c144099de859c3f43b1961", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N97120636b11b4b158892706019486fb5", "localId", "", ""] +["_:N45481eab750645b4929b7b63c8ca7916", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["_:N87131d5acc2b478ba16230f714aa0bb0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N2056bd91659a4260a6eb99a0cbdd9f14", "localId", "", ""] +["_:N30d5cdb21c144005b1d74c81aa0e129e", "http://www.w3.org/ns/shacl#in", "_:Nbffaba2351c747ef8e380b89888a5f14", "localId", "", ""] +["_:N80dac4ea19f44488ae2dc09ba1429116", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:N2b94274553ab4bc2bbc78307f39b3327", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Naa7e95f812804669b3e89daed8d27b21", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N451bba51c46a4c9d9a2343aef3356453", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N731241b6024d4e109893eb1354404ec5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd14f0a1267744e89f6930e710689414", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N25b71b41baf8408a91b66336f376a5b6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29e8eb1e03be45ae92093e6937585f14", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N954579de61d84bef909737ad4568a536", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_SpdxOrganization", "https://spdx.org/rdf/3.0.1/terms/Core/created", "2024-11-22T03:00:01Z", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "", ""] +["_:N16cb468a2dcd423bb3654b71a6f00062", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["_:Ndb50eefe33ac4feda6cfb13073b5324e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N94e6bbd4fb004035a4cbdb3e969a1fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf68ed04ac534a92808a38217fa55530", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N453a2981f56c4d3a943752e7740f87fd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N072d6f5c7eee40859e3a93d05034536f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["_:N02fadd3757064be6a0b797d8675b611e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne7cb91f8739a4acdb1e220785f261efb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N38aeb59117654398b393a546eaaa5fd9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nc704d39d408f41caa9805e140ff0016a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N47d32bc3b4e04c9ab083ec76d4f22585", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:N6f8ca85700744b0e9f7a8672675d1dca", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N30a10bdc909f4c4bb84f02821147b416", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N03140b327b9d4620b37b847528c7140b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4d2df683a0ea4c39be288b78f9e61ca4", "localId", "", ""] +["_:Nd1b797da281643468add752e036349fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40bcef929ef64825a68929a36aefa27c", "localId", "", ""] +["_:Nb0ab9a298e9845b1b1b770398def929d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabd40767fbd84edea7e048b911a681e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc704d39d408f41caa9805e140ff0016a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd45f3e248c84b27b2e1a0da67d47a71", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8adbab8e05cf4258a0b7e9eedbd03e5f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc7f12b88e8f5489dacbbfeb81192696a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N80dac4ea19f44488ae2dc09ba1429116", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2b94274553ab4bc2bbc78307f39b3327", "localId", "", ""] +["_:N23a349d7f4a14351adf4c70293152926", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e913b09266e498887238fae6898e289", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0b353053b3cd41e89351acf39abb719c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ndcdb30d7deca45a8bc3e563144933f0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6be5db9035a14b779b13bfa0a5a51c3e", "localId", "", ""] +["_:Na96bc2776ef4488595f136d0fbac26a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8711a8ae5ca942d1bbd795a0144ca9a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N13f4d81403034faaa93ea1abc3bd3d91", "localId", "", ""] +["_:N32f50a51e84f4a2499a5d17f54bbed6b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N694be39aecbe44d49f3850275de952ec", "localId", "", ""] +["_:Na5a538a0052340c0ba01747cca3d3da8", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N8f24e4128c124ec08b9e80f45a43dd1e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4466be96ec5a4942b916c3f1fad2d3ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N904326509fc04cc4be66ea123ed9fdc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48b3e9d109d34fdeaa6cbef58c05c171", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N220b4463e39147e99e8eeeb9974c5370", "localId", "", ""] +["_:N7d2dbee05b72455c995a675186de5fd1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nf028d12b2d0f4f6cb20747b6b39a8b5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncb6c9deb0ba44382a0b957b7ea80228c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Nd6f4245b3ebe44e6b100782b191deb97", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["_:N1358bfc70dc14db6aa3a799228bc2fdd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4091b2fb3d5c417fad7305927740d1d5", "localId", "", ""] +["_:Nbd0d551be201428eb241c70d0e315cfa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd0cfba2a98544626a8566f29105598e9", "localId", "", ""] +["_:Nc9235a4485e64fff9b1298095061a58e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N05edbc4959e844438800e546abaebaea", "localId", "", ""] +["_:N68e2aefd82ab40c59cc6c2bfeab0adc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0c49370c41124d50ac6081418cb2432d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N511c01e1b6a146c3bf99fe3e88272f2e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N00fcf1f501a749fc9cbbdbdf23a7aaa8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Nfbd5a9c0923c423a84d0bb8fef89f4a3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:Nff83286adad842f19d79a36e90df97d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndaea8b0d88324897b34af58f66f51f7c", "localId", "", ""] -["_:N9dfffc9a0d064fbbb99f222927600262", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Neb11974d792545bab359067d0609d8ef", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N4379f82c1b44400197a0281504402fc5", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne4619e36e32c4fdc886ba17b636520a3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N9177e2ee3c054acba6cd2b8f4d78e4f3", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] -["_:N3f6ce06e6ca2446781e41b064c3d1d58", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N4545916c069c4e0ab8f2f3c3e582d429", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2279545cee4f47fb9986df1b11a68c0f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["_:Nb7591bd67efe44909d92824106c3b13d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9f2f4966ca1442de8457e4f8329d0710", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] -["_:N2fa63ba2278342bb9c50f3eea6a8c45f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["_:N835bfbd04e26414fa4e0357251d9e6c7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["_:N97777d3f00c44071a9af1cf1e9b8d4bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["_:N71c5c74023cf4a52a8b457b1547df6f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] -["_:Nc6df8997e25c4618ad64b329bea18fa4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N7f27ce1812214cf08ea19bcb018764e2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N75afbc0eb6e646f28396b52ee0131582", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N7884508b0c584d0288f2250c1ee3bc89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N00f0f016bff441178fb3b14b0f1ba310", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] -["_:Nb387237d7787460e8f7e72786252a39f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] -["_:Nf6a8366ab85b4074b187672b593f3e6e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nff63d22b8dc54a40a1754583641b37f3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N40997879b8144df69163822d2df5baef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc05797f950af44fbadd42eee2e56df6c", "localId", "", ""] -["_:N3f1a11bf8f004d80a83fff483af24469", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7884508b0c584d0288f2250c1ee3bc89", "localId", "", ""] -["_:N094c19bcead34504bd0d0b85f8ba1078", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N58b8de667bb54771976a5e86a8a8139a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6f8ca85700744b0e9f7a8672675d1dca", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N3d9237b249544033acbf7d94cac2b424", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N64a80dfe5e954cf59753ab8a96e4eff3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["_:Na1cdda0a73e94e598b769cac4a5a5cb8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9c1ccbc2b86f454395a450f736b67eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0f4d0a9a8e7d46a0b9cf255274bcce6b", "localId", "", ""] +["_:Nbc8ae53aacf942ca88840a6c1d655d6c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N243ef6907efb40d38e00f4430d63fc19", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["_:N81c1c3e2bbc4470ab2eaf9e5c6c4d1f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:Nfa72871f5924444491d18910ec431abb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nbdc672a90df4480da8648bd31507d48e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nf142b126cd744b69be8d6c35ee1361e4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5b2e4dda703849e4933338ff0970e968", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b94274553ab4bc2bbc78307f39b3327", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N8b959a4ad4834d5a96d17ac52b3571cf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N553eab502b9344dfa8c5091d3acb923d", "localId", "", ""] -["_:N124216cccbad47f486b33fd9dce70c06", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] -["_:N4707a6558f8643199e75a488fd156a09", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ed90f3640954f3cb8ac8478cc923b35", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Na62fed341d814dc8ac95b17410dd06e9", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ndecce5d991454f63835a411ad5c3d25f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] -["_:Na108e2b1e33249d1a7c16ae86469a51b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a plan, guideline or strategy how to create, perform or analyse an application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N393d2d53bef34fe0846e87c7df91588d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na1ab85fdd72146cfb0eb275a20aed6fb", "localId", "", ""] -["_:N61bad2d32f474f829df8b09e757aec59", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Neecbcd12ce83469c90d8e79c41ce15e2", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N9832a681241a4a91bd95ecdfaa05670d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N75afbc0eb6e646f28396b52ee0131582", "localId", "", ""] -["_:N998d2725c2574c8f8344620b839e2d6f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N72dd028519c2443b94229cfc4a2639bc", "http://www.w3.org/ns/shacl#not", "_:N0a961d271f304c8cbb2e0a1307a9d8ad", "localId", "", ""] +["_:N89d361d3f1d94de5b28ee82b1d3da3de", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:Ndaeba75fb43b4db7b777e9b00ecd7064", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4b7945a329d940d7a4167237a4e60e53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nc6d18260ddfa478b84c2dc19c2059aa2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3c163fcab8684aa09c61e78b4cbb9b38", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb28702ad1ccc478ba7b8aa42bc12985d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N7d2dbee05b72455c995a675186de5fd1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nccde3ac271484f91b83ed5fb2e1d70c9", "http://www.w3.org/ns/shacl#in", "_:N0f568f8825144082a14a0e000b8ff13f", "localId", "", ""] +["_:N619e2a32fb994ed69f916340e12ed7f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N315dc3dd043c41a49ffaaba74d10eeb0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nddcc9ac569c4442b894f208d7722b4f8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndaeba75fb43b4db7b777e9b00ecd7064", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc22ee04d695b4582bd604f6206900620", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N4a56b875349e44729e9aca40972c86cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:N4538304380bf48b895869aa8dbea3275", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne4baf3becb8740a79f8bceb49f40679f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd91122440e7149a28656eb9394e082b2", "localId", "", ""] +["_:N6bd3d2cfd9cd4f248e354deb40a851ff", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N618f8c59ed9345ca8692a68f777a0fb0", "localId", "", ""] +["_:N6ac0694afb0c40c1bb0988b0569f0cb4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Na449b0b56e3540618b2a2698204edde9", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na1cdda0a73e94e598b769cac4a5a5cb8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ndf7085005814495cbc9689c68bb9683d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N896ec867378949ebbc26581fe9cf864c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Ne0cb74aabc9c4794b4d9319b9a1fe42b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N41aee74b0dbe4609888f3e3488e75e26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N8d911077b7fd4e4180299a09ca29ea53", "http://www.w3.org/ns/shacl#in", "_:N443dd85c241c4fe58205e0b7c7f18034", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N8e8fa340313748a7b459ba889204f2c1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["_:N4707a6558f8643199e75a488fd156a09", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2fa63ba2278342bb9c50f3eea6a8c45f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Ne1476e00df5f4847a5f13d26ed774a56", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Na341e2127b1c4da9b7a2c521b48ba61d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is used to install software on disk", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nd217b5feb10442a4b50049ba66de62ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] -["_:N8d911077b7fd4e4180299a09ca29ea53", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] -["_:N9a36e08577374de4a5b5818cbd4e6583", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] -["_:Nfdf2a70978294bcebad4f299b134dc99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Na168e6a25ca4415aa927f2d16152226c", "localId", "", ""] -["_:Nbe2a417f2d204fcb9bb60e5d58b0044f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nca5f3f2dadbd4839a75e31645149c809", "localId", "", ""] -["_:Nb95a1dba72b847409cd9eab4ed5e0033", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] -["_:Ncd7fa1f2b5334cd680d0c04e40453667", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:Nd677bc1745684cf98fb92f17a75ebd52", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nb95a1dba72b847409cd9eab4ed5e0033", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxExtension name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nc8b9ea4213214eccb17ccccf3790161d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N132cde65c9b14a1694d400388aecf0cc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9bd771ac02cc41519919a01d4deca105", "http://www.w3.org/ns/shacl#in", "_:N96c753d614db4e7b844bcb3b5f9ff291", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] -["_:N1dc8357fca8043ee86196ff6f1400d3f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8411f84580e2497da97dab50dc3b4df3", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N97819d7a350747339be471fc904dd3e6", "localId", "", ""] -["_:Nd677bc1745684cf98fb92f17a75ebd52", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N81774ccb63bb44f59726b12497ed50c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] -["_:N7d98dd34e2e442ec8f9dd87a82897c1a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nb7591bd67efe44909d92824106c3b13d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3be22ea4244a43d6af104de9fed1b4fb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Ndaea8b0d88324897b34af58f66f51f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] -["_:Nca5f3f2dadbd4839a75e31645149c809", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nf7e356ac5a1044be99fd42634fb81f7d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:Nc034445fd507418d8439a09bb2e562dc", "localId", "", ""] -["_:N6197d862963b45bb806101e5df0a51a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3df9880d78624ddba1dd8e35a428b9c9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N28c8fedea4324ffa8c41338d5fae0fe5", "http://www.w3.org/ns/shacl#in", "_:N100bd4537cc64a3c9da777da1eb0ce8e", "localId", "", ""] -["_:Nf5e9739ded9643ef8a3fe72118c28135", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["_:Nf6aee0ab31d04453b5b92d210b1ad859", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:Ndee65321b0f14da3a2a5675702243602", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N65e7526ffa224998af69bd3d4082b522", "localId", "", ""] -["_:Nada0379a8e6840aeab21269255f5c588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:Ne1476e00df5f4847a5f13d26ed774a56", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N28c546d9833444d7b7370a64f4274b1b", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nbb8a5798239c4e919f8766e4ec36f99c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne84bb159066e48a1a884cceaa3854438", "localId", "", ""] -["_:N744e6bd4bf054480b6e284543bb79b87", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Ne2f51219aefd476d89347b0e1c485369", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb6e9515340134630a513fd38825c064d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["_:N320baf3ea5274f3393919c1999ded96d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["_:Nad1212fd5ed241c891f8afc9235f406c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N87ef2338681b493982fdd6660c334933", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneElement", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "3.0.1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N763c69315ee040a88ca27b5205984626", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N2b7fa052bf664f2a9e1923831d282602", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N236307149ca247fcad8df1b0dd41fcfc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["_:N269b628c85f04f5d8a10fa3c500745a4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["_:N4538304380bf48b895869aa8dbea3275", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne223bb746dc9463bbbe16ca844619e98", "localId", "", ""] +["_:N163b018b3d984833a5523252ed920c58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["_:N511c01e1b6a146c3bf99fe3e88272f2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd0ec388aab40469ab0a4297c30e0c906", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1256cfafa26e453a9d5f8b08cc5920d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4182e8c878544ebb842682b1ece2bd3a", "localId", "", ""] +["_:N9b79adf6684a4d328dc28ae0ee98d95d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5eab3a0a527f4705bdb2f04b7c39e36c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of Element used by Individuals in the\nCore profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N0b728d22a9674ecc87af12fde5aae61c", "localId", "", ""] +["_:N2f8145031850475ba01bc466221debed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nf9bf03371d92462f91a54baa946fd625", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7b50bf552c054e5baab961ecc882b722", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf593d6da70614e2581430bd37d9cd4ef", "localId", "", ""] +["_:N4278c3d777ea4ebd81cd23af80459c2d", "http://www.w3.org/ns/shacl#in", "_:N82b5fa65536b400a809bd5f3104f6ec0", "localId", "", ""] +["_:N4e4b35788e1b4064b856bcd8d2cc6670", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nd2a11bb8a1a14a82994d02e9dd610275", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0753f471dae945e885cde15702c705bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N619e2a32fb994ed69f916340e12ed7f3", "localId", "", ""] +["_:N2b7fa052bf664f2a9e1923831d282602", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na92e8ceda7e548bb9a144c2e9c857639", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9dbe04a2eaac4271aafe4a7650ec4e15", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N885913019f4b4fe7afcd38cc847f9ef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] -["_:N04c56aaa0702449d89c679a6ae2d509e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1e6fef13174b9e90d4ca817a331079", "localId", "", ""] -["_:Ne3895908b9eb4cf68888a0b70d8088ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncb6c9deb0ba44382a0b957b7ea80228c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne7cb91f8739a4acdb1e220785f261efb", "localId", "", ""] +["_:N96c753d614db4e7b844bcb3b5f9ff291", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N8b5253826157456ba3297cf9f4f8db15", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["_:N516b1b46dbb04f1c953906f0388bf8b4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N8049abc6ee7f449ebf27e3e8357bdf75", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nab408dbbfc0f4711b251486cdcbf2168", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N62c446ad08764db680206dcd96bc8476", "localId", "", ""] -["_:N4c5910b87a7e4fc69577e8ccd52c8ab3", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] -["_:Nfdf2a70978294bcebad4f299b134dc99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:Nb6e9515340134630a513fd38825c064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N89f5ced0d2b44da98e135f5754616ccc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] -["_:N727e38139bfa40d9b56e586cf9ac5bdb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb040ef9136c54fc59750d17abc90a3ea", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3cfc6c76a3744d609a80a0095af2dcad", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe19063f503a46969af5f11469f71a33", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N2d1a418cbe234eceb99e5900d573b9f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2454277637b14ff0b3c86e707c803ebf", "localId", "", ""] -["_:N8373dd8071e2429e95b3b0897bdab7de", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["_:N7f66313069b94a1386353f07d06a8ce2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] -["_:N596d74921771447c9b35785007e34f1c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] -["_:Nab408dbbfc0f4711b251486cdcbf2168", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nad0e6f0b63fa454384d0c495911f493e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:N31d0b150d561413c9ecc2d72bfc66683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b959a4ad4834d5a96d17ac52b3571cf", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nf854d2bed3524a08aa85d987a15ae3b4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N6e7150c4286149b7aa27ddf655625b5e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N16549d2169e94a4d8d291368d2d9f71b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N315a049473324a5d82678153bc504c4b", "localId", "", ""] -["_:N2c65a23cf781468598b84d1456d825fb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Ne4619e36e32c4fdc886ba17b636520a3", "localId", "", ""] -["_:N8c0c4aa1f1ae4f7485a88627cfbc1631", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3cf591f215db46d1b2957c0113ce16f8", "localId", "", ""] -["_:N13b921afee3a413e9a3b06c638bf7824", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N9d46caf53cc94a77812c6af4cd5653dd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N46c1d107f9c3474aac7ed47419f9465a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N75afbc0eb6e646f28396b52ee0131582", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nefe7cf242fd84f90a4f3cc6062e671c8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd217b5feb10442a4b50049ba66de62ed", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N9063493949754db985c6c4bb9effda34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd08114b692094bc788d0ff08c066c7fe", "localId", "", ""] -["_:Ne8b93e1651f84d5f8ff94e4b82012f07", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nff58f069db3f4f099a21fd26a1b4e17e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne202363026264077a74d779bbd16e04c", "localId", "", ""] -["_:N0da978c5d15a4e0ca2abb1d9a336eba1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83935261300041758021c5a3fbdae6c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:Ne20cfbefa1424ba79abfc89287f1eef3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3ba51db196c04386ae47cb64aab6c95c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N1d4668e7f12244a7a9407b898c9b0534", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Naa7e95f812804669b3e89daed8d27b21", "localId", "", ""] +["_:Nc3c21678fc9a459784f054a6954a9aa8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5011f0cdb4544a70b796520ecd436a25", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4f925ef656b840928e22aa51252c2976", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nce6e2333750a40619f2e93e40be35d7e", "localId", "", ""] +["_:N91d11db27b28462b8545b78734a27503", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N626b5ad29167479dabae9a9177315404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N96120491adc84204822952240ddadf13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0ab9a298e9845b1b1b770398def929d", "localId", "", ""] +["_:Nb3e77cdb9a14442eafb0659c7081c110", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc5485992ed4e4cbea07fa6d87ee716ac", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc85a3a5deac54465a32d993ba5434b00", "localId", "", ""] +["_:Nf6a05248229d4fe292d04534a4c4573d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N83935261300041758021c5a3fbdae6c0", "localId", "", ""] +["_:N737b3d5b3c8f4cb7b5fb665b52f1dd96", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne820a8ec67114d53b03a71f5f7be31f5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N80dc66a1ccec469392596c5291fa2864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N81c1c3e2bbc4470ab2eaf9e5c6c4d1f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N461fe7f9c28b4d81a4fb17726fc9adf6", "localId", "", ""] +["_:N763c69315ee040a88ca27b5205984626", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nf7fd042770064703a84cd9039273e4f7", "localId", "", ""] +["_:Ne03121e956234709bc0f8f288597ff50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["_:N3b695bebf32746039b555b8460ffe552", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbffaba2351c747ef8e380b89888a5f14", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N288949a61054447689377b531414e0b7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2b94274553ab4bc2bbc78307f39b3327", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nad909dcc4fad4339a9eb809fabd6a871", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nccde3ac271484f91b83ed5fb2e1d70c9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4e4b35788e1b4064b856bcd8d2cc6670", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Ndb31c53559be41e0b28e79b74da0b557", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N942417ca6d844df0914d75b099a457f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na42e3794f624483e818646ed683c5ba2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf9bf03371d92462f91a54baa946fd625", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["_:Nc6d18260ddfa478b84c2dc19c2059aa2", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N377b547285074591a904911ef1fc1977", "localId", "", ""] +["_:N78c7513398064da1a55c5df1b3c96444", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N6ca1589ab2b443ac91b26c54805eb352", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc8707d6d8b944508b09d8d3125e53f3", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Ne0cb74aabc9c4794b4d9319b9a1fe42b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N8049abc6ee7f449ebf27e3e8357bdf75", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] -["_:Nb3c96ed9edf047408c12db5df1daaf43", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N5e77c3af3932465a99431b715d09d12e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nc14cc862b5494776966375d4711f1f8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N1fcc6df939fe4ff6b57639467f64eff7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N5a18c93b836b4c75887455a2be533616", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N96ab198cab814dceb4dc205e80f644d6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N092e19c1eb954e979b39018f62ba840a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a module of a piece of software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9c88962fdf0e47f99a0477fe51b4207d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] -["_:N9a4f2ea8112e48b18e9aaa109a1e02b3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N150b1880a8e64af2af56beec5b8f629e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2c65a23cf781468598b84d1456d825fb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N999ce6cccf4c43f493041f0c109b3166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N659a17727ec34fe487d556cc5ed935fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] -["_:N8746b43004e5422e8a87906a64680ef4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] -["_:Ne8307a3d6a8a433fad20e9cf2bd69327", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] -["_:N5a9be7ba8fdb49af9acd6f2e114fd2b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0f7bf6e1b6a84c71b96db0ed65f445fd", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N5e82508a25064d719d7bcac05ecaa033", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N66b9ee3f008340d2b9dffa814afd424b", "localId", "", ""] -["_:N3cd13df3eb014a37bb535428e0c037e6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N275d7c15ea6640618cb7cde014c0aa3e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N293889ce0f674698af83932fc5a7b302", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne1476e00df5f4847a5f13d26ed774a56", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0b728d22a9674ecc87af12fde5aae61c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["_:N73e74213eec84d8daaa36a51dab963d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N75f6c4472b7b45349200afcce0dbacef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91fee785616543dd9952683d70d387bf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N06465237afe4406eb4803558f7a57c08", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4ac93d52ef544d5cb73aeaeb279b7567", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["_:N00fcf1f501a749fc9cbbdbdf23a7aaa8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndbf7c5384f2242b98dd62b6a8d6a503f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:Nf71f6300b14a4726a20ffad899bed919", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc9ddcdf86e874968aa8f5ba821975eb4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N105628f6c8b040edb9db617f35f30bec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Nfbb5f5e996be44989d31d47d46540443", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N163fe4499b2a454a9641b23118bf53ae", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5011f0cdb4544a70b796520ecd436a25", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N0bf807da343b4645904db560abf69583", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nadd5d6fa295c47ee82d49e5fde059110", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Ne778a773be4f408192f2ed37c6143a5d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:Na1cdda0a73e94e598b769cac4a5a5cb8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc63741a7112e471ba97ce37e05f2dac1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf71f6300b14a4726a20ffad899bed919", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneLicense", "https://spdx.org/rdf/3.0.1/terms/Core/created", "2024-11-22T03:00:01Z", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "", ""] +["_:Nb916f2dfc1c640bd8e0dac9bb5956172", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nbc1332652da345c49ad3c948238f404b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Nce9a69dc19af4e1394f03174c67c5857", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N64a80dfe5e954cf59753ab8a96e4eff3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nfe1814d375d7456e843deb8cde1cf341", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This individual element was defined by the spec.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbbe9948554644fd8b49899d278739242", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N8adbab8e05cf4258a0b7e9eedbd03e5f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N73f9586a8a7d4b978afcb9cfe998050b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N897df0f6e23b488988a2d2db8aad5bc4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfa72871f5924444491d18910ec431abb", "localId", "", ""] +["_:N7b5b4ad7f9a54d91a292ac0738539050", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb28702ad1ccc478ba7b8aa42bc12985d", "localId", "", ""] +["_:N70cf024bfa9e40a08de101b510631f60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc9ddcdf86e874968aa8f5ba821975eb4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Na267e7b88a344e4fbd0c59a6dc760e65", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N66b43817d95d4468bf805207af159230", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N90cb783276d74a2881e21a08abf01e2f", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na92e8ceda7e548bb9a144c2e9c857639", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N288949a61054447689377b531414e0b7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nca9532c3dd0b421e95d0800b68e3442a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd47cac50394462f9015e00ec4b449a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N675847984777421d9fb9b171cdf0bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N261c61aa119e4f4e9ce3c9387fb29c9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb9165bd1d4e8406eb56e237a892cfba4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N80dc66a1ccec469392596c5291fa2864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nc6d18260ddfa478b84c2dc19c2059aa2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5d195bb929fc404584503e9c9b17a526", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5912892962274966938ef83f3f23c015", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5e678b3ba38745b58c0103b8e085d5c8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nc22ee04d695b4582bd604f6206900620", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N59f692071bb64860ab9f02cfb4670088", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N27a8c8f61e944083abcc670fe4586df8", "localId", "", ""] +["_:N05edbc4959e844438800e546abaebaea", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nff8e6ed55f604249b913b2bbc6d8411d", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfbb5f5e996be44989d31d47d46540443", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7c7a260c778e4d4491ba75a0fe083ebe", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N73f9586a8a7d4b978afcb9cfe998050b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N58c62d134f5e41d78440946685ecf0cc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N88e97455b377466daa24bff58cde8f0d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["_:Nfc8b91023a9e4e08ae989e08b6c0b9ec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf7e1508801cf4398b830fad84fe53388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nae8e63939c7c4cf4aa4ba555362d775c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ndfe4dc1d7d574b10a92ee8955837ad9d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e31c4b45c4b442e9f1d32ab917a76ae", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N168bcfc831bd4f85b6a82742eb7ad4f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["_:Nad909dcc4fad4339a9eb809fabd6a871", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:Na92e8ceda7e548bb9a144c2e9c857639", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N45b62edbd5f3406dba20232288ec19fd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc9ddcdf86e874968aa8f5ba821975eb4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nfe1814d375d7456e843deb8cde1cf341", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N5e678b3ba38745b58c0103b8e085d5c8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5b2278fb3a8e4e239193a033f8b4bf04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf3c62ca118b94d17a1ef6b04e407421c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Naf01116eff7c4759be95f8f97c257d9c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b94274553ab4bc2bbc78307f39b3327", "http://www.w3.org/ns/shacl#in", "_:Nadd6173eaf8b4550a3ec8c90524cc599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N79e0fdc8a753446e8e1931aab90b02ae", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["_:N9e3f2c4f96904bddb1aa46c01701b0f6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8ad3af20ea5248df91865def0b7a98de", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Na3925605d49b4db382603ae946c37f51", "localId", "", ""] +["_:N7c9974a53d5443c5831f3e7dc56073d0", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0f4d0a9a8e7d46a0b9cf255274bcce6b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N70cf024bfa9e40a08de101b510631f60", "localId", "", ""] +["_:Nf10e65ca64f84003827c23ef339743e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbbe9948554644fd8b49899d278739242", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b50bf552c054e5baab961ecc882b722", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne81afbff18a74c75ac853da24ab327a0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dda90621fe746a2972ace6f1e26f9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na00b6f47e860415881f7e8a524a04316", "localId", "", ""] +["_:N91fee785616543dd9952683d70d387bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N94e6bbd4fb004035a4cbdb3e969a1fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N47d32bc3b4e04c9ab083ec76d4f22585", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:N58c3f747313349d396ead702e2de2953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["_:N0cac787ed3f3421fa6687df4da790a0c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N44928392b4d8458f847c7fd69533d2ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne68051bb209048da9a57bc5dbaf28bf0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbac401e4be1249dd86dd149952baf59b", "http://www.w3.org/ns/shacl#not", "_:N5bda6a3731444310990a06326743f6aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0d2bee57931544d786ff3bc0afb223b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8f1dd8dbe42e46fb934adf94515048b1", "localId", "", ""] +["_:Nc22ee04d695b4582bd604f6206900620", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["_:Nd385c846dfa14371a0a3697f7168b4c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:N8a37deb026864cdca312209746e2caaa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf3dfbb7f98e84c61b58f5b17e3ae9f19", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne820a8ec67114d53b03a71f5f7be31f5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na82fb3a822a04f6180f1ca7808276d8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N13acbf7806c648f19f147c9073a04385", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N0d09683a42354debacdd0b0625119609", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8f1dd8dbe42e46fb934adf94515048b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N991d42b910e64656b45d7c4ce9e7f5e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:Nae8e63939c7c4cf4aa4ba555362d775c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0f4d0a9a8e7d46a0b9cf255274bcce6b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N5ab248e680454bbcb3ed254de24ac49f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nbd14f0a1267744e89f6930e710689414", "localId", "", ""] +["_:Na267e7b88a344e4fbd0c59a6dc760e65", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbb0a3a63cdba4f078c6de6eef7ff6579", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb81407b76fc94f228f1f5ad011d931a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc82d9b6d9a4a40d6b95e4cd04612ac98", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1a0a0b40de254f55a8372bba19b60496", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N61b9a25cae674e199ce6572456d8e72f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N63f963c2c8a4467bb803f9af7eaafd3d", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nddcc9ac569c4442b894f208d7722b4f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4382805b6a5947d38ffcfd8b182bddbf", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf7fd042770064703a84cd9039273e4f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:Nac0a6f045e7e4efd9dbaf01201286a14", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c7697a923534e9988689746f1d03e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Nf5531d9c16ff4f589dff19f480634c29", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:N2b7fa052bf664f2a9e1923831d282602", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9bd771ac02cc41519919a01d4deca105", "localId", "", ""] +["_:N4f6d0abf94b14a189b945346f00ba9dc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N72a328f4b7e14cb194d99b35236c3430", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#property", "_:N3b695bebf32746039b555b8460ffe552", "localId", "", ""] +["_:N6f8ca85700744b0e9f7a8672675d1dca", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["_:N17c879855daa4fd7b7d7ef9da34e7ea6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nd91122440e7149a28656eb9394e082b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1647e706f6764e7d9ec4e0aa8979d0c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53970517ea09401691d51549f8e0fd90", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["_:Nc15495aea74e4883afce40f042a057d5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N89d641eef49d4a5f9ef42bfe5c4221bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8bdb3da6da754d98843024e1dcbe3e43", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nf6541e98d99947d9a7ccb49088b43ea0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N230a41f8c8d549b8844a37595ce56867", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:N349d882683524e14ae98f62402cadf06", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nad60293878ba46b5b12652a41f9e5b9e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N6731fd512ee84a2781b8140677b0161e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N618f8c59ed9345ca8692a68f777a0fb0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N36b7d391e5cf402199bf454d82f5735c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N13acbf7806c648f19f147c9073a04385", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7a48123f699948b5867af1fec0d7b88e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne11c75cafdb0438299216847b06716cf", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["_:N4881d1614aa0403894d16c3ca276d790", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9bd771ac02cc41519919a01d4deca105", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N65301d1be04341678842dfc049e2a33c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N85ad449141be453592e9e80c2bc379f4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N7676f1bbd99e47659502f87b9936453e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne4baf3becb8740a79f8bceb49f40679f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb916f2dfc1c640bd8e0dac9bb5956172", "localId", "", ""] +["_:N8ec4229c1a674693bde766506ca93e87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88e97455b377466daa24bff58cde8f0d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N6a4847abbdd84dbb8e43386c5d710563", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc5c3acba75e4205b113623c75621c6e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:N18ed9985cff84e34807e6aa0a780a707", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Ncd7fa1f2b5334cd680d0c04e40453667", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:N8373dd8071e2429e95b3b0897bdab7de", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N69fe400001ad47cbb9e616ed9d727696", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:N96ab198cab814dceb4dc205e80f644d6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nda26387d9677485d8554cf33b606d465", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N2757a283e93b45ad88b85a593725d092", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Nc38c872821b548ee8f430a027b2d711f", "localId", "", ""] +["_:N3ba51db196c04386ae47cb64aab6c95c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N80dac4ea19f44488ae2dc09ba1429116", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:N64ae0543871444f6b7d2a497fcf55186", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N6cddf83b203740bbb3558b7474a07821", "localId", "", ""] -["_:N058b8decd10442dc9da66c8ec337fe89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfd92f942c5e84eb79e459f1d3f1ac4a6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5cc19e587a4f464a9572d61b4352c919", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9547de9ed84145228bed37ef2d51f84f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:Nc416283f46f74c5ca28e42eede357fc1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N5ba1e97374714be89c6ce6144cda737a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N60e06f4852a44b05b3dfdbd769a39b3a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4c7d5c25b2f46f3b980935a3b7858e2", "localId", "", ""] -["_:Na4175476fbca48768ff989c226c9a147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["_:N5e376019b0684f24bf032cb891f1c491", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] -["_:N97777d3f00c44071a9af1cf1e9b8d4bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] -["_:N700fb510f2d245d387b84b64f59e834a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N489ddf1400ed455cbb0fe6a27f318011", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] -["_:N79f0bab894254f7aa8a118661d65f476", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb8f89749acf4352b1d62c554af7fde6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nbd9879e4dffa4f9bbdc67aa2782f06f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:N8d911077b7fd4e4180299a09ca29ea53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N7f27ce1812214cf08ea19bcb018764e2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N3e6f3584b185432c90902e8ec47e33fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["_:N8d911077b7fd4e4180299a09ca29ea53", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["_:Ndfeaf41c217c4e0c8c442c54949d7e6a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N6a3cf2ffe9b9430390c5ce23bd48fce4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4ba84d3c35422383f41faeffab544e", "localId", "", ""] -["_:Ncdb4a970c7f542688b373a1da217c447", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] -["_:Nbed681e4050a4ed381ead86181284b9d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87f3315e965b43ebab1aa1b8deccf16f", "localId", "", ""] -["_:Ne6082a08d51b4476b3a983aafaf1d69e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6d28e1bd9c9f4454b0cd19fce2d51a40", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N3e048db4a4e747afb8dbf69ebcfef3c7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N4d420b10df2e48ec90b7a163f5e7774c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Ne5992967c6784ac0a64f460548c9c73c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9d46caf53cc94a77812c6af4cd5653dd", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N301f290b72884ba28b9bf8cee6c7d12e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N35bab262301147c0b1b11e0643a659c6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1326177a8f54cd38fb0d7aae60d69bf", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nb95a1dba72b847409cd9eab4ed5e0033", "localId", "", ""] -["_:N6a5bd79f035f4d7c9d036bc4a4d9990a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nb6697d6a50a946d9a78f5c1d507fee30", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3f1a11bf8f004d80a83fff483af24469", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N4fd4703e2c5d4687bed9b05563fc9cda", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nc2c6dbe5330f4b17ae33727e45f3e9d4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04f6ef255f0f45e0843face78e6af32f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N5665c63b6756409c9cdaed2974ba4360", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["_:Nec3642cffbce44abbfb1f66ffa74d5c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N04c144f227684ce48b50371ca423d8ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] -["_:Na108e2b1e33249d1a7c16ae86469a51b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9fc754cd17fe403b9e6567ff39e96ef5", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a file system image that can be written to a disk (or virtual) partition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N353611490d3c430e8e861c3a903369fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] -["_:N67a7c2de8c574fb991ccc64346e1de56", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N21d7410f6a994075adab308941db7bcd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N763c69315ee040a88ca27b5205984626", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N41fda4edc0294fce84cdb5688d8ef9ef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N13396ee366a94de388e2aff47754e81f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N06465237afe4406eb4803558f7a57c08", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd3d538fe1cb544b5808c51dffd844c81", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4f6d0abf94b14a189b945346f00ba9dc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N72a328f4b7e14cb194d99b35236c3430", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ncf68ed04ac534a92808a38217fa55530", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N250a4372ab014e66ba3eec07accb85dc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N13f4d81403034faaa93ea1abc3bd3d91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncff880d9e9c24887adcf512cbce2a444", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na5a538a0052340c0ba01747cca3d3da8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["_:N0cac787ed3f3421fa6687df4da790a0c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N2456bf573caa4efeab27607dfed5a451", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["_:Nc8b9ea4213214eccb17ccccf3790161d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N5912892962274966938ef83f3f23c015", "localId", "", ""] +["_:Nc51fb19223644705a84f646344b7e9d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N675847984777421d9fb9b171cdf0bb53", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N68e2aefd82ab40c59cc6c2bfeab0adc4", "localId", "", ""] +["_:Ne70b85feb564419597741ca637d61d03", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N5d195bb929fc404584503e9c9b17a526", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a2b8b0073a54a3db4d6092f1c5043ed", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N72a328f4b7e14cb194d99b35236c3430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nc4286224070a4248ad8590c45a7c8bc6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N13396ee366a94de388e2aff47754e81f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf7fd042770064703a84cd9039273e4f7", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncae19f1586924a439b37e75eb5b57ed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nce9a69dc19af4e1394f03174c67c5857", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N91d11db27b28462b8545b78734a27503", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d86b5ad122d431bbf443326643a51df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N88e97455b377466daa24bff58cde8f0d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4571ded3acc34f068931feecaa278a44", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1aac3c1c2ffb45d79910e133d9ec02f9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:N4e4b35788e1b4064b856bcd8d2cc6670", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f095ac56c3e4bccbcd4348b29980439", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na461e12485ec495f9d16f08504499025", "localId", "", ""] +["_:N61753ca6fa484199b143356d20b0476e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N72dd028519c2443b94229cfc4a2639bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8679c5e3311467ca097a4151ac8fa54", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06465237afe4406eb4803558f7a57c08", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:N763c69315ee040a88ca27b5205984626", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5ab248e680454bbcb3ed254de24ac49f", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N32f50a51e84f4a2499a5d17f54bbed6b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:N716ee87802fd4b6f98bfcff38ca5ff8a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd951591fca6c47c2985dd159db6ad52c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8ad3af20ea5248df91865def0b7a98de", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na00b6f47e860415881f7e8a524a04316", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["_:N14d2ccc3ee7749088945c0ba96e7a88a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dbc8b0a30da433a94050a3ab1190bb8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na44640dae5c34e6ab6f3759a75426eb0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionElement", "https://spdx.org/rdf/3.0.1/terms/Core/created", "2024-11-22T03:00:01Z", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "", ""] +["_:Nbdc672a90df4480da8648bd31507d48e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N963f7603cd844b03bd4631e0713b1635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5ab248e680454bbcb3ed254de24ac49f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:N034bf868068348fb92f2f33976cad5ae", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6eb9ec15081f404a99935ff4e2aaa14b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ff4ba19d0a41c18c6ccfc733f2193d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e1bd25f594a483ab492b4c24a5748eb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd385c846dfa14371a0a3697f7168b4c1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne81afbff18a74c75ac853da24ab327a0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7d2dbee05b72455c995a675186de5fd1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf26016059c3e414da185e30155b543f5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbd5a9c0923c423a84d0bb8fef89f4a3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nadc18a90b6ca4cc3af0fb2aa7418dda8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nc4156282a9c34b6190b0869cdc1793db", "localId", "", ""] +["_:N954579de61d84bef909737ad4568a536", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd0d48abef81b4c44a952c0925a6e30a9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9bb1cced9aa14e08b36ebf9f952b1d01", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4881d1614aa0403894d16c3ca276d790", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:Nd05558aa816f416f8c26895bb8d1d9bb", "localId", "", ""] +["_:Nb07efffce0ba43a2bcac0e3a90a48609", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["_:Nc1bb7a1b7d034342906511e27e066abc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne5e123ab8f7d4aa4b35a7442690fe19d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N072d6f5c7eee40859e3a93d05034536f", "localId", "", ""] +["_:Nfbd3df443088485abe551fc6374a3c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb850dda843534d3ab3ffbadf70766fef", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7eb015d497fc4c09bb8530f59c65624d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:N4091b2fb3d5c417fad7305927740d1d5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Ne1917fc7b2894ab7a09e78e8e8b21989", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8ae53aacf942ca88840a6c1d655d6c", "localId", "", ""] +["_:Nc3c21678fc9a459784f054a6954a9aa8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb345ac20ec3244e480ec30eee26dc06e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N187a93895c7b43bea96131212a0ba3f5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N904326509fc04cc4be66ea123ed9fdc4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ncdb4a970c7f542688b373a1da217c447", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N990faf2e9bde43ab98201c748005987c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na2392fa55f5342ceaccb5f4312194416", "localId", "", ""] -["_:N2fa63ba2278342bb9c50f3eea6a8c45f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N4c5910b87a7e4fc69577e8ccd52c8ab3", "localId", "", ""] -["_:N9dce65a406e14831b9cc10cfd6e434a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9c23cd2dcd4243b996ef8897bfa8759e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N21d7410f6a994075adab308941db7bcd", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] -["_:N784fd0e933c9417b9e11ea351159df76", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Ne9376f7e610a4f378d34348bf09acb82", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N9d46caf53cc94a77812c6af4cd5653dd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N150b1880a8e64af2af56beec5b8f629e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N045868218fe84846bfd5a8efe73f5f05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3393c7f385f241039c50705b72f15549", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na3925605d49b4db382603ae946c37f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N024478cff6eb4ef48dc45dabdb7b0a35", "localId", "", ""] +["_:Nf028d12b2d0f4f6cb20747b6b39a8b5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd77657e0b19d459c931f64f48ed7e1a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nd33af007bad14a4594f7039df1c5df75", "localId", "", ""] +["_:N694e3d4238ff4006b46b450b91f4179a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a582f09d0b7426d81ae74b09a5ed252", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Ne11c75cafdb0438299216847b06716cf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0781395df11e44a6a3186f0fa8908958", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nc37985fef6884679b49d387a2ef08d3f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N0d09683a42354debacdd0b0625119609", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nb9165bd1d4e8406eb56e237a892cfba4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf10e65ca64f84003827c23ef339743e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1917fc7b2894ab7a09e78e8e8b21989", "localId", "", ""] +["_:N833dac5833c24d35a16d11f2e318aeef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd90adf23ae66491daa68ac6dd4501bdf", "localId", "", ""] +["_:Nece0b4f721a847f98727202b50f4a753", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Na5a538a0052340c0ba01747cca3d3da8", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd83655f2100e4025b2eefd465fc154ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c3b30ca2bdf4cb1839bdc608bc41186", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168bcfc831bd4f85b6a82742eb7ad4f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ned1f0afb78d3460c9478383abf3da36b", "localId", "", ""] +["_:N2f8145031850475ba01bc466221debed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb655ff9dcc6442baa6046d411f0624c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N8f24e4128c124ec08b9e80f45a43dd1e", "localId", "", ""] +["_:Nf4609fa7f53e4898a47341b507b5e03e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N210fbcf85b384009a2cee68e4a7e6b78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02daaf1ea3874989948c16e26274de9f", "localId", "", ""] +["_:Ne68051bb209048da9a57bc5dbaf28bf0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N97120636b11b4b158892706019486fb5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["_:N8186b6d9dc534ac1b7a906d040a88d6a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b79adf6684a4d328dc28ae0ee98d95d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N73e74213eec84d8daaa36a51dab963d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne94d7f462c66468a8c52086b6b54de89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["_:N682abb8a6bbc40e9947aa2d9d66eec4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["_:N10ab85203a394bd3ba6ef86074d64233", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne778a773be4f408192f2ed37c6143a5d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7c9974a53d5443c5831f3e7dc56073d0", "http://www.w3.org/ns/shacl#not", "_:N8358def5fd2b4668b759d786315e799f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5e678b3ba38745b58c0103b8e085d5c8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nebecc80c7e4045d1b3ad15ab0c1d04ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na3b27046864941989a486e5a70e0edb4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e4b35788e1b4064b856bcd8d2cc6670", "http://www.w3.org/ns/shacl#in", "_:Nce436d556d4e4606ba37d9ad32d22967", "localId", "", ""] +["_:Ne06f01bddfb24f69a9e1c0ba9694b11d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na3925605d49b4db382603ae946c37f51", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90cb783276d74a2881e21a08abf01e2f", "http://www.w3.org/ns/shacl#not", "_:N986501d57648498ea8ed156092baf32c", "localId", "", ""] +["_:Nd73c69088f734dffb4cc9539c637aecf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N58c3f747313349d396ead702e2de2953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ddf9ddcd2bc446f8729bd7a23566faf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb9165bd1d4e8406eb56e237a892cfba4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0753f471dae945e885cde15702c705bb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N88ce0438020d4326924db53dec9bd6b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:Nb4381a5cee3143a482af28cf9a364f3c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbbbec88245754e9d9390b9a11f0b67c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nbbbec88245754e9d9390b9a11f0b67c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf7fd042770064703a84cd9039273e4f7", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N98018fef19484e2fae944af82b21920e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N7676f1bbd99e47659502f87b9936453e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nccde3ac271484f91b83ed5fb2e1d70c9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e4b35788e1b4064b856bcd8d2cc6670", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N00fcf1f501a749fc9cbbdbdf23a7aaa8", "localId", "", ""] +["_:N79e0fdc8a753446e8e1931aab90b02ae", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Naa7e95f812804669b3e89daed8d27b21", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne68051bb209048da9a57bc5dbaf28bf0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf7e1508801cf4398b830fad84fe53388", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nccde3ac271484f91b83ed5fb2e1d70c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["_:N40bcef929ef64825a68929a36aefa27c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4d92ede494e34e51ba6eca91292dc0dc", "localId", "", ""] +["_:Na461e12485ec495f9d16f08504499025", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N73833299f42a4f78b3a3379f9d2302d7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6aa0e623203745d7b1fb18b485918354", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4286224070a4248ad8590c45a7c8bc6", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nfd92f942c5e84eb79e459f1d3f1ac4a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N094c19bcead34504bd0d0b85f8ba1078", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N18ed9985cff84e34807e6aa0a780a707", "localId", "", ""] -["_:N597e9b8e9fea4a669873e005bac16fc5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e82508a25064d719d7bcac05ecaa033", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nc5bf40e3b2584e2eaa4becc473bed079", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N7f27ce1812214cf08ea19bcb018764e2", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc416283f46f74c5ca28e42eede357fc1", "localId", "", ""] -["_:N1685d66aa43c40318d7f1a9af5281dbf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62048f401c7a408d8e6074d8172edd5b", "localId", "", ""] -["_:Nf9ea823dce8b4178968bb583746dda07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7a477b2d627c40bfbee3b6eca010b404", "localId", "", ""] -["_:N30c0e029fe894fb8809a14d4f50d81cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1af3b716f6264641976ddd0da85d3b1a", "localId", "", ""] -["_:Ne4d0e63a8226430099ec09bd81396164", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d420b10df2e48ec90b7a163f5e7774c", "localId", "", ""] -["_:N301f290b72884ba28b9bf8cee6c7d12e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N79f0bab894254f7aa8a118661d65f476", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N1b790cf0ad524fad8d4f129ccda94fa6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] -["_:N65e7526ffa224998af69bd3d4082b522", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] -["_:Nfdf2a70978294bcebad4f299b134dc99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nbf51d2fce0c449ca8df0fa964ec48e89", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nb6e9515340134630a513fd38825c064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88066f14b8624768ac4e2ef3ea08df92", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N4477c4b31f20446998b8dff00cd309b3", "localId", "", ""] -["_:N26117aef00804f4b9d67298a6fd9c1de", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N6535885322084aa986c62f1ad80b3668", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N9d46caf53cc94a77812c6af4cd5653dd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["_:Nf385f0cc22b44164be25837552539b1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N456086b235914b4f9bd89adfd54de37c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N67fc6e9fc5d24eabb8543cdc669b1145", "localId", "", ""] -["_:N5e77c3af3932465a99431b715d09d12e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nf56fec24d5a44761b7a239c789c51504", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N393d2d53bef34fe0846e87c7df91588d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:N2e7af3d6eac3464eafe353090d745bf8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:N7d98dd34e2e442ec8f9dd87a82897c1a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N2c65a23cf781468598b84d1456d825fb", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7c7a260c778e4d4491ba75a0fe083ebe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ne1917fc7b2894ab7a09e78e8e8b21989", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:Nc51fb19223644705a84f646344b7e9d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N576b7fbe3ba74572a6eb065c67761847", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1a8882804ac24104946e7afa0b36905a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc7b49cc0a08745e08e5ba42ee492184f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N619e2a32fb994ed69f916340e12ed7f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N98018fef19484e2fae944af82b21920e", "localId", "", ""] +["_:N68767751c5f64fc1afe82f2dcbae6636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:Nb2f2a5ddadbe4718954d50737f92e201", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5d195bb929fc404584503e9c9b17a526", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nfa63aaf3414846a894fd74b0e16b27ef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] -["_:N596d74921771447c9b35785007e34f1c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] -["_:N3daabc6c6db94e5596afc49544cf4f73", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne6082a08d51b4476b3a983aafaf1d69e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Ne9348ee72a18435bbcdf5bb338a3fcb6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N885913019f4b4fe7afcd38cc847f9ef6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] -["_:N7476374ddf7c4c82a95e5a63b60e4e0e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N489ddf1400ed455cbb0fe6a27f318011", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] -["_:N4b5795c987f1446dbda919350438fd0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] -["_:Nbb14891b173645c4a19f0f952441b988", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nbfec05fc44f6435dbdeeb9f608a28e4c", "http://www.w3.org/ns/shacl#in", "_:N3ef3340b9a594445b7754965e6a0adaf", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:Nad1212fd5ed241c891f8afc9235f406c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nda26387d9677485d8554cf33b606d465", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] -["_:N1cfe20f0d2a049b7b751bd3aa0b4a09d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] -["_:N42dac2d2cbe6407596e2fb585812097d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341003cfbb2341dc85b4e126aedddb6f", "localId", "", ""] -["_:N3393c7f385f241039c50705b72f15549", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N52a5c2aa05cb4f3da33bc1a69bc054d3", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N097b38569ab54334ba50aa2055c21bf9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N18ed9985cff84e34807e6aa0a780a707", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N8049abc6ee7f449ebf27e3e8357bdf75", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] -["_:Ne880e2c5878f4becba59cd843618c77a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N6535885322084aa986c62f1ad80b3668", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N61bad2d32f474f829df8b09e757aec59", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01b77c997a784a81856bfe55a59f0d26", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N89f5ced0d2b44da98e135f5754616ccc", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3be22ea4244a43d6af104de9fed1b4fb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N9177e2ee3c054acba6cd2b8f4d78e4f3", "http://www.w3.org/ns/shacl#in", "_:N40b61fa0587f469bb27b3e4ece9283bf", "localId", "", ""] -["_:Nc5839c1a42cb4cbf8b8f389491a2b604", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N0ffbbdd15b364d55bc0212ba5c32739b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] -["_:Nc5839c1a42cb4cbf8b8f389491a2b604", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N00e5d1a9fc9f4e8ea643c5dec21372c9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] -["_:Nbb14891b173645c4a19f0f952441b988", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:N01b77c997a784a81856bfe55a59f0d26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nf7805d1c06ba43eaa22c6043949bd567", "http://www.w3.org/ns/shacl#in", "_:Nbc63e97d65ef4f38936c3be4f51c6827", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N6a9c7fd96f82444aac9a3bae9894656b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N60de5e93a2424ac08a6d0747c85f5699", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N46b3ee96a83c4a44bb51112e0ca4621c", "localId", "", ""] -["_:N8373dd8071e2429e95b3b0897bdab7de", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nca5f3f2dadbd4839a75e31645149c809", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18a257cc80b34d42949a3f99d880f84c", "localId", "", ""] -["_:N659a17727ec34fe487d556cc5ed935fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N3f6ce06e6ca2446781e41b064c3d1d58", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N9a4f2ea8112e48b18e9aaa109a1e02b3", "localId", "", ""] -["_:N97819d7a350747339be471fc904dd3e6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["_:Nd0989d19000249b7b6abdfee096c9f41", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N4dc5e2b6b5fa44d79acdc84229f675fe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60de5e93a2424ac08a6d0747c85f5699", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:Na34b98cc7abc4ac2bb5b1ba9777ec6a0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["_:N107aa4617cfc41499f0678d83f303c24", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N89f5ced0d2b44da98e135f5754616ccc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N1dc8357fca8043ee86196ff6f1400d3f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] -["_:Nc26fe6b1cfc54bc6811b7d4724089f96", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncdcdce99937a4256a16f3f88605197d9", "localId", "", ""] -["_:N3b17c87267444ae5aae5e12fc54addb6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N76180350f15e4fd0be60faa3412ed1fa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] -["_:N96ab198cab814dceb4dc205e80f644d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N1d5173c248f14304bd9adef81206e060", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N419137dca06848e2a161d5eaadc9992f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e048db4a4e747afb8dbf69ebcfef3c7", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Asbtract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Nea611e5c42f94004b40d78331b3f6977", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N21edc1b1c7c94a53a14c23900721c4b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e6f3584b185432c90902e8ec47e33fd", "localId", "", ""] -["_:Nf9cc156a3e084f8ab0ce054200c8fca7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd1e13d5c3983406c938eabee95860c0e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2fd6d6c96c7b46dabc958e2ddb32657c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["_:N74164e072d8147ca808c451ad6b5d980", "http://www.w3.org/ns/shacl#in", "_:N7cdb8eb1992246f785b58b577320b504", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a2b8b0073a54a3db4d6092f1c5043ed", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N186b972a57284ae1946b3f7d8e762830", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["_:N45b62edbd5f3406dba20232288ec19fd", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N66b43817d95d4468bf805207af159230", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4e4b35788e1b4064b856bcd8d2cc6670", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:Nc38c872821b548ee8f430a027b2d711f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N516b1b46dbb04f1c953906f0388bf8b4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N58021835a49a4b959f9428f8df7f7198", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1d4668e7f12244a7a9407b898c9b0534", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nff33e8337dc8421d9e74b338e35a75d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N07cb32d0626a45cfbea37a7dd2a8b854", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N250a4372ab014e66ba3eec07accb85dc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N137d0a75fd374daeb077f228da53897d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8e8fa340313748a7b459ba889204f2c1", "localId", "", ""] -["_:N7e6385c5f3414e35862d986501bfff61", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] -["_:N489ddf1400ed455cbb0fe6a27f318011", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N32c6410af083493aa3238362e1cbd67e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N3daf4b35020144689a44f0ff15ab9244", "localId", "", ""] -["_:N835351dfbca44416893704268470fac2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a26fc9e687f4bfda660730718e55700", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N22c1a3c4c4964b7f90a94e0af7e75d87", "localId", "", ""] -["_:Ncdeee899859040f3903c3212d22c1507", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N107aa4617cfc41499f0678d83f303c24", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N8373dd8071e2429e95b3b0897bdab7de", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] -["_:N80a219d388944c2c9272a65ce39a65d4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] -["_:N100bd4537cc64a3c9da777da1eb0ce8e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3b3c65b750eb401889ee9800adc1da9c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N70a01ce1edb94124ac3d6a3b187db793", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Nf4064e5c7fb84a899bffb14df5844894", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N69674ef0cb504722bc20bd3195026b39", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na108e2b1e33249d1a7c16ae86469a51b", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["_:Ne880e2c5878f4becba59cd843618c77a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Ne14b54567e794b13a34acf8718d2ccf6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N2895a64ec18c48e68dbf01572a5d0cc8", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N0eeb34b48dec4bf48dbba6ee4c6f829f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd43d5a2d7d1648598329bd2d9c226af3", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] -["_:N8e8fa340313748a7b459ba889204f2c1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Ncf36f0c937574a40957458e67ccab9cc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N57470b62e6a142f9928ab5bfe4606b0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9b52daafec44429186724a6d9a846793", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N52a5c2aa05cb4f3da33bc1a69bc054d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] -["_:Nf4064e5c7fb84a899bffb14df5844894", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N315a049473324a5d82678153bc504c4b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] -["_:N293889ce0f674698af83932fc5a7b302", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] -["_:N6a9c7fd96f82444aac9a3bae9894656b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] -["_:Nc5839c1a42cb4cbf8b8f389491a2b604", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N7091d1b764924e4db3551e0b422e61ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N963f7603cd844b03bd4631e0713b1635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nc8b9ea4213214eccb17ccccf3790161d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne21f363965114243b81ce67f76575de3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf6541e98d99947d9a7ccb49088b43ea0", "localId", "", ""] +["_:N3de741ac343042e6ac53564501076e44", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Ne778a773be4f408192f2ed37c6143a5d", "localId", "", ""] +["_:N0dc54ccc3f8d4afe897d7be97f9f6928", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc8b9ea4213214eccb17ccccf3790161d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:N8e672d95ff7d48e68c1ed7ecf019b269", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5bda6a3731444310990a06326743f6aa", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N942417ca6d844df0914d75b099a457f8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N4881d1614aa0403894d16c3ca276d790", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N8b5253826157456ba3297cf9f4f8db15", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nff9c0c2a18f24f76bfa32806ec48ce59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nadd5d6fa295c47ee82d49e5fde059110", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd45f3e248c84b27b2e1a0da67d47a71", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54d1f829ecc441b9b7d9248324cbea6b", "localId", "", ""] +["_:N7583808b54c947658126a7846ad7cc76", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nf71f6300b14a4726a20ffad899bed919", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N50c6944cf3544d0ab17d40d70d7715c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N00d83dee7aa44a7991821a46e83e5164", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne20cfbefa1424ba79abfc89287f1eef3", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["_:Nc2ac7680f26b40408ebfc2b4bb40def7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfd592b5830bc43009e433a4172fb036b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nff9c0c2a18f24f76bfa32806ec48ce59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64ae0543871444f6b7d2a497fcf55186", "localId", "", ""] +["_:N4e1bd25f594a483ab492b4c24a5748eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1314ef461724483f9bd5c56d939b17c4", "localId", "", ""] +["_:Ncedd59bf4f1a4436ac8325d34d020df5", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N618f8c59ed9345ca8692a68f777a0fb0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Neff5f08fa9fd4aaeb51026e2484443c7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["_:N63f963c2c8a4467bb803f9af7eaafd3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N931294357284457f9a6f643757b29e72", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N687efc23ea2c4c0b9a09c9ca45dc49b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N66b43817d95d4468bf805207af159230", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2061c93cd5774c61823bf76c952d5242", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nff33e8337dc8421d9e74b338e35a75d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ncae19f1586924a439b37e75eb5b57ed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N453a2981f56c4d3a943752e7740f87fd", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneElement", "https://spdx.org/rdf/3.0.1/terms/Core/created", "2024-11-22T03:00:01Z", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N3be22ea4244a43d6af104de9fed1b4fb", "localId", "", ""] -["_:Nd7c9818a72e64d35a203d1b243e90dd6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1c469cfa41644dd9f4cafc8ea99bad5", "localId", "", ""] -["_:N2bdf11c1b85e405a835c07e19f150556", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1685d66aa43c40318d7f1a9af5281dbf", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Ndf7085005814495cbc9689c68bb9683d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Naee034377c334f78a3af1a4d25c3d468", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] -["_:N04c144f227684ce48b50371ca423d8ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb134dbc7f13f499887fd10287bcaba2e", "localId", "", ""] -["_:Nf37cc853c16d47099115691bcb77f2e1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N6b93f4527c92420f97b4d4d8c27840f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42775851ecec45ee90ee1fe5c1071993", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] -["_:Nad1212fd5ed241c891f8afc9235f406c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] -["_:Necfb795205bb49a69ffa1a569c48717a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N8a37f4cffd6247e08ac9432f8447d89a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N1af3b716f6264641976ddd0da85d3b1a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe2a417f2d204fcb9bb60e5d58b0044f", "localId", "", ""] -["_:Nbed681e4050a4ed381ead86181284b9d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] -["_:N71c5c74023cf4a52a8b457b1547df6f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0ffbbdd15b364d55bc0212ba5c32739b", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Nf7e356ac5a1044be99fd42634fb81f7d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c0c4aa1f1ae4f7485a88627cfbc1631", "localId", "", ""] -["_:Nad1212fd5ed241c891f8afc9235f406c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] -["_:N9f5fcae561fb42dbaa23d4b2cbedef0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N1b970adab24f43699ff9033a7892334e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N41aee74b0dbe4609888f3e3488e75e26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N9c88962fdf0e47f99a0477fe51b4207d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1dc8357fca8043ee86196ff6f1400d3f", "localId", "", ""] -["_:Nd78d72bd38c34a3c804f97f9e6b927a3", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N60e06f4852a44b05b3dfdbd769a39b3a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nea5cd277bd75414183676bf891a32527", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N441c940eb087403188d7f17bd5a55a61", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N28c8fedea4324ffa8c41338d5fae0fe5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N18ed9985cff84e34807e6aa0a780a707", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Na4175476fbca48768ff989c226c9a147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:N3b3c65b750eb401889ee9800adc1da9c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:Nf3860ad4cc5d4d87be1f408701c9f435", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["_:N01b77c997a784a81856bfe55a59f0d26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] -["_:N124216cccbad47f486b33fd9dce70c06", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:Nf0d9d94b4d9a4523a1d863217249938a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:Ndf7085005814495cbc9689c68bb9683d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N56d611894502410481612d5cb6016003", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] -["_:Nfc73e3099ed6465bb089df33bbf469ff", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1b790cf0ad524fad8d4f129ccda94fa6", "localId", "", ""] -["_:Ne2b61099faaa4dfeb2a1dbb6cb39c943", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N9dfffc9a0d064fbbb99f222927600262", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Ncb7110c05f9f446f887398fa2d241dd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a2ece59dbaf463a9c858ceb00db829f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nedaa28cbd856413e95e7805cf2d255dd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f8145031850475ba01bc466221debed", "localId", "", ""] +["_:Nf7fd042770064703a84cd9039273e4f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N0e471571470240e5872be57bfd58fed9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndbf7c5384f2242b98dd62b6a8d6a503f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N377b547285074591a904911ef1fc1977", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd83655f2100e4025b2eefd465fc154ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["_:N73f9586a8a7d4b978afcb9cfe998050b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N904326509fc04cc4be66ea123ed9fdc4", "http://www.w3.org/ns/shacl#in", "_:N10002d3538094764a9c6d3893234cd04", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfb655ff9dcc6442baa6046d411f0624c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8711a8ae5ca942d1bbd795a0144ca9a7", "localId", "", ""] +["_:N72a328f4b7e14cb194d99b35236c3430", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Nf44042158d4d4c85a5bd6a0fcb538498", "localId", "", ""] +["_:N461fe7f9c28b4d81a4fb17726fc9adf6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["_:Ndb50eefe33ac4feda6cfb13073b5324e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b86dbc23a22407a9380fbd9376d3b83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb345ac20ec3244e480ec30eee26dc06e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nf9bf03371d92462f91a54baa946fd625", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nb4381a5cee3143a482af28cf9a364f3c", "localId", "", ""] +["_:N187a93895c7b43bea96131212a0ba3f5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N236307149ca247fcad8df1b0dd41fcfc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88ce0438020d4326924db53dec9bd6b5", "localId", "", ""] +["_:N82be0a238ea44c658a60ca20e0c8c6fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4b7945a329d940d7a4167237a4e60e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Ne03121e956234709bc0f8f288597ff50", "localId", "", ""] +["_:N50c6944cf3544d0ab17d40d70d7715c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1647e706f6764e7d9ec4e0aa8979d0c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N73e74213eec84d8daaa36a51dab963d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf0752cee7bef48efaa39267516a6b21a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8f1dd8dbe42e46fb934adf94515048b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nadd6173eaf8b4550a3ec8c90524cc599", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N4ac93d52ef544d5cb73aeaeb279b7567", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N07868b0098174c478ac47f3fbc946ff0", "localId", "", ""] +["_:Nd33af007bad14a4594f7039df1c5df75", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N74551d5c49b94ece99a5fdec0d58d233", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne94d7f462c66468a8c52086b6b54de89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb07efffce0ba43a2bcac0e3a90a48609", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N14d2ccc3ee7749088945c0ba96e7a88a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb850dda843534d3ab3ffbadf70766fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionLicense", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "3.0.1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf5531d9c16ff4f589dff19f480634c29", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Ne3b40c9739164b2eb0ae163374d9c4ac", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N187a93895c7b43bea96131212a0ba3f5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["_:N65301d1be04341678842dfc049e2a33c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N825f749765e348a0abfef75f63c1588a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0d09683a42354debacdd0b0625119609", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c49370c41124d50ac6081418cb2432d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd0cfba2a98544626a8566f29105598e9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:N16cb468a2dcd423bb3654b71a6f00062", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b5b4ad7f9a54d91a292ac0738539050", "localId", "", ""] +["_:Nc9ccffdec66347509395f75c9845128f", "http://www.w3.org/ns/shacl#not", "_:N8eab6125211e4549a03d744617823ad5", "localId", "", ""] +["_:Nf71f6300b14a4726a20ffad899bed919", "http://www.w3.org/ns/shacl#in", "_:N2aa73eafba6f4d55938fb60c96ff2379", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nfe1814d375d7456e843deb8cde1cf341", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb345ac20ec3244e480ec30eee26dc06e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["_:N511c01e1b6a146c3bf99fe3e88272f2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["_:Nbf6c9a626dad41fa8a0422cb3ddab7a3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na1ce1658c3be4bc0b082944caae9ddea", "http://www.w3.org/ns/shacl#not", "_:Nff8e6ed55f604249b913b2bbc6d8411d", "localId", "", ""] +["_:Nda791debefe5491aa84d61433873c630", "http://www.w3.org/ns/shacl#in", "_:N1a0279389d714631b1d12935e9f2b014", "localId", "", ""] +["_:N07cb32d0626a45cfbea37a7dd2a8b854", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd2a11bb8a1a14a82994d02e9dd610275", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0781395df11e44a6a3186f0fa8908958", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na267e7b88a344e4fbd0c59a6dc760e65", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N184c02d9c66a4e9d988d681d20c5ddc6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nb245e59ae52342bea2f1feb05bb80e79", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6aa0e623203745d7b1fb18b485918354", "localId", "", ""] +["_:Na3b27046864941989a486e5a70e0edb4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N90cb783276d74a2881e21a08abf01e2f", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na449b0b56e3540618b2a2698204edde9", "localId", "", ""] +["_:Nd05558aa816f416f8c26895bb8d1d9bb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N835351dfbca44416893704268470fac2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N9a2ece59dbaf463a9c858ceb00db829f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbb14891b173645c4a19f0f952441b988", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["_:N31d0b150d561413c9ecc2d72bfc66683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] -["_:N4cf191c2823c4f9ba2e3124c01643d11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N419137dca06848e2a161d5eaadc9992f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Ne4d0e63a8226430099ec09bd81396164", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne81afbff18a74c75ac853da24ab327a0", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ne0ff4ba19d0a41c18c6ccfc733f2193d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:Nf0752cee7bef48efaa39267516a6b21a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N6535885322084aa986c62f1ad80b3668", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] -["_:N20563c47790549c1a3121000a834c4cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Ne8b93e1651f84d5f8ff94e4b82012f07", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N62048f401c7a408d8e6074d8172edd5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21edc1b1c7c94a53a14c23900721c4b8", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:Ndfeaf41c217c4e0c8c442c54949d7e6a", "localId", "", ""] -["_:N5f35c1f648d4471ba9ad3e7fc90e56b7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Neecbcd12ce83469c90d8e79c41ce15e2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N52a5c2aa05cb4f3da33bc1a69bc054d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N30c0e029fe894fb8809a14d4f50d81cb", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Nf5e9739ded9643ef8a3fe72118c28135", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N866122f61ea34bdca92b963b42f6fae2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nf98babca843e446f8ddf5dee59296ef5", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N61bad2d32f474f829df8b09e757aec59", "localId", "", ""] -["_:Nb37183f337474d0d8058f31577954cf8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6197d862963b45bb806101e5df0a51a7", "localId", "", ""] -["_:Nf6aee0ab31d04453b5b92d210b1ad859", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c144f227684ce48b50371ca423d8ee", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N45b62edbd5f3406dba20232288ec19fd", "localId", "", ""] +["_:Nc51fb19223644705a84f646344b7e9d3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf284f365ba5c4e4da40d7d7900d82744", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["_:N7676f1bbd99e47659502f87b9936453e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["_:Nf26016059c3e414da185e30155b543f5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N105628f6c8b040edb9db617f35f30bec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncff880d9e9c24887adcf512cbce2a444", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3e1ac11e78640fab50085207414679f", "localId", "", ""] +["_:N4571ded3acc34f068931feecaa278a44", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N931242be4ac14a95b8ef51122ba2cf40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] -["_:N67a7c2de8c574fb991ccc64346e1de56", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N0f509a18a72e4662a7e7fc2fe485c3ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nda26387d9677485d8554cf33b606d465", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] -["_:N5c42defa8afb4ab59df899067c1e54af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N75a4a8a0dcc14090818fdc6eade781c2", "localId", "", ""] -["_:N556a43c641024cdb92f4ef30ad62ff89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd7c9818a72e64d35a203d1b243e90dd6", "localId", "", ""] -["_:Na9d7622cd7e94569b9540b0dc94308f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] -["_:N6717b73c37f1437da67113b68f12bf12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67a7c2de8c574fb991ccc64346e1de56", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N2305488d52f34ae3bd7f3de8a96329e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] -["_:N3b3c65b750eb401889ee9800adc1da9c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nada0379a8e6840aeab21269255f5c588", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:Necfb795205bb49a69ffa1a569c48717a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N3f6ce06e6ca2446781e41b064c3d1d58", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Ne4d0e63a8226430099ec09bd81396164", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N6197d862963b45bb806101e5df0a51a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:N7cdb8eb1992246f785b58b577320b504", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nd0d9b8cea40d40dc91877f32f673ef66", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N71251064642941d5a8323c552deea710", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N6a5bd79f035f4d7c9d036bc4a4d9990a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3851673c346e4c9cacc8cf50837d6cfb", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Nf98babca843e446f8ddf5dee59296ef5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["_:Nd1e13d5c3983406c938eabee95860c0e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ne5992967c6784ac0a64f460548c9c73c", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N69674ef0cb504722bc20bd3195026b39", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N6349b0f36b7f449faa1d73050fbde88f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0b9c1849e524f0e8b565e2bde495ce5", "localId", "", ""] -["_:Nbb925214ef4742999c6047ece09174ec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09770ecd1d644e4aa2b0faf704a96de", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N950494b11f9e43fd9ce4b21264e6a0a8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N0809050b78e64f1c8f5666cc9ffc92a6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Ndfeaf41c217c4e0c8c442c54949d7e6a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na34b98cc7abc4ac2bb5b1ba9777ec6a0", "localId", "", ""] -["_:Nf9cc156a3e084f8ab0ce054200c8fca7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nad1212fd5ed241c891f8afc9235f406c", "localId", "", ""] -["_:N7a1979daf894407dabf96d89e984ff05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N596d74921771447c9b35785007e34f1c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nce436d556d4e4606ba37d9ad32d22967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne5e123ab8f7d4aa4b35a7442690fe19d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na79e142094fb464da3de3ceb4108e4ff", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["_:Nc71de92f1cc649fcab4d77d974dac329", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["_:N47d32bc3b4e04c9ab083ec76d4f22585", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N30d1dbbf97fb456eb18d38b76c8004d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N9bd771ac02cc41519919a01d4deca105", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc51fb19223644705a84f646344b7e9d3", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:N0c3b30ca2bdf4cb1839bdc608bc41186", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0713bbcf2b1f4e23b912a81e12b5d270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3bf9008e5422473bb689602da04ccca1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne70b85feb564419597741ca637d61d03", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4a3178783c58491bb646a056a8dbb37a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N615be2b8b7174608b24884d12a2039ad", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N58c62d134f5e41d78440946685ecf0cc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:N516b1b46dbb04f1c953906f0388bf8b4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6d7eec7a63445c8a64113d0e59ce02c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["_:Nfd592b5830bc43009e433a4172fb036b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Ne93ae5d0cb664d7ab2554eaa72a23f25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne94d7f462c66468a8c52086b6b54de89", "localId", "", ""] +["_:N50c6944cf3544d0ab17d40d70d7715c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N3bf9008e5422473bb689602da04ccca1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na449b0b56e3540618b2a2698204edde9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N45b62edbd5f3406dba20232288ec19fd", "http://www.w3.org/ns/shacl#in", "_:N0eb0fa7732fb4a2db7455731d6a1ce53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7a66c734ced842b4913ff95c5f5cf452", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3c163fcab8684aa09c61e78b4cbb9b38", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["_:N4a56b875349e44729e9aca40972c86cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3de741ac343042e6ac53564501076e44", "localId", "", ""] +["_:Nc6bdb22311b243119db2aee3b54fabe4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na3b27046864941989a486e5a70e0edb4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_SpdxOrganization", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N91adaf3024344ddcbcbf3f943faaad6b", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne883dfda4a7445ceb1e70f39ddd03fea", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N4d92ede494e34e51ba6eca91292dc0dc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc8b91023a9e4e08ae989e08b6c0b9ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N931294357284457f9a6f643757b29e72", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#property", "_:Nbb0a3a63cdba4f078c6de6eef7ff6579", "localId", "", ""] +["_:Nc6d7eec7a63445c8a64113d0e59ce02c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N30a10bdc909f4c4bb84f02821147b416", "localId", "", ""] +["_:Nbd013d07f45a42d99931fe619ee4ca95", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Ndaecf52053104527964b081f8f6d4dfe", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["_:N7bd6e74fed5e42d29e8234d5933efd98", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Ne9376f7e610a4f378d34348bf09acb82", "http://www.w3.org/ns/shacl#in", "_:Nbed681e4050a4ed381ead86181284b9d", "localId", "", ""] -["_:Nf0d9d94b4d9a4523a1d863217249938a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Na4175476fbca48768ff989c226c9a147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N556a43c641024cdb92f4ef30ad62ff89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] -["_:Ndf7f8e578ea545babb3686ec4ccbd3ad", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] -["_:Ne92d6e989fde455e8e2dd493a67d27bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2d1a418cbe234eceb99e5900d573b9f0", "localId", "", ""] -["_:Nc034445fd507418d8439a09bb2e562dc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["_:N596d74921771447c9b35785007e34f1c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["_:N9f2f4966ca1442de8457e4f8329d0710", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nab78d95787b8439db6189f9699047620", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nb134dbc7f13f499887fd10287bcaba2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb55dc8c91e234dedbb3dbcc141a59bc9", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na9d0fc4b8c454d308184549fca9959b6", "localId", "", ""] -["_:Nea611e5c42f94004b40d78331b3f6977", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N3cd13df3eb014a37bb535428e0c037e6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] -["_:N8d911077b7fd4e4180299a09ca29ea53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N3e048db4a4e747afb8dbf69ebcfef3c7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a4847abbdd84dbb8e43386c5d710563", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0bf807da343b4645904db560abf69583", "http://www.w3.org/ns/shacl#in", "_:N1bd597d8851e43b79e3bde3fb6388627", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7091d1b764924e4db3551e0b422e61ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nd3d538fe1cb544b5808c51dffd844c81", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "This individual element was defined by the spec.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2056bd91659a4260a6eb99a0cbdd9f14", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nf21725c3245f4286b67bd679d3351c59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N916e8c3c85774fcd96b700a20240ca75", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfc8b91023a9e4e08ae989e08b6c0b9ec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N453a2981f56c4d3a943752e7740f87fd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N17c879855daa4fd7b7d7ef9da34e7ea6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8ff2b7ece321489a9ff262a2c697c89c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N73e74213eec84d8daaa36a51dab963d6", "http://www.w3.org/ns/shacl#in", "_:Ne93ae5d0cb664d7ab2554eaa72a23f25", "localId", "", ""] +["_:Nf284f365ba5c4e4da40d7d7900d82744", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N737b3d5b3c8f4cb7b5fb665b52f1dd96", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Ne41f054fce23460dba46863153e67567", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Na5ef7f1675b84ce99e4f4ca36d200a91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na2b089e6c69d4697ae4de61d18f020f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne883dfda4a7445ceb1e70f39ddd03fea", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N47d32bc3b4e04c9ab083ec76d4f22585", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N13acbf7806c648f19f147c9073a04385", "localId", "", ""] +["_:Ndb06ff981cef4e94bfdbec22badacd4d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nbbbec88245754e9d9390b9a11f0b67c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd77e569c4d2d4d2c9bb29ea462bc94cc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7d2dbee05b72455c995a675186de5fd1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne7777394524c4639973161dd3aff2db3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N33da303c78e142a2acc0db12f3ee6686", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc85a3a5deac54465a32d993ba5434b00", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:Ne3e1ac11e78640fab50085207414679f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4182e8c878544ebb842682b1ece2bd3a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nd6f4245b3ebe44e6b100782b191deb97", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N87131d5acc2b478ba16230f714aa0bb0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N80dac4ea19f44488ae2dc09ba1429116", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd951591fca6c47c2985dd159db6ad52c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4f7ca95fbfad4d20810e92ab09220394", "localId", "", ""] +["_:N1a0279389d714631b1d12935e9f2b014", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["_:N91adaf3024344ddcbcbf3f943faaad6b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ndc4add4edebe43f4821fb10dd712e481", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a37deb026864cdca312209746e2caaa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b695bebf32746039b555b8460ffe552", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf94717c65e4f4b86b4df261ecf26650d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["_:N825f749765e348a0abfef75f63c1588a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["_:N0b728d22a9674ecc87af12fde5aae61c", "http://www.w3.org/ns/shacl#in", "_:N3899f43be1b142148dc7af5c1cd6a1b9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N250a4372ab014e66ba3eec07accb85dc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:Na96bc2776ef4488595f136d0fbac26a6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0bf807da343b4645904db560abf69583", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N96ab198cab814dceb4dc205e80f644d6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nb1e48771e71b47e98ac6156affc3e067", "localId", "", ""] -["_:Neca5f29d67c84d0ba9ac05e9216798e8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N682a1c11ac5b4e2ea369c111bf3c01c7", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N48e045eccfb146548852b6d7274d180e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N6dd024b62af74fb5a94391f7343f1c79", "http://www.w3.org/ns/shacl#in", "_:N56b887d449ac42dcac573916474bbce1", "localId", "", ""] -["_:Nfd60dc4acf8f405b86d3ebb119d8edeb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N5c4503ba9d8a43719f83795d17b3c7a7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["_:N443dd85c241c4fe58205e0b7c7f18034", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9f5fcae561fb42dbaa23d4b2cbedef0a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N5ca015566baa49e1be7bab3e5ca1b85a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N835351dfbca44416893704268470fac2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N7a48123f699948b5867af1fec0d7b88e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N4477c4b31f20446998b8dff00cd309b3", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:Nf32238231fca45f1ac5221bd1ecd220c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nf9ea823dce8b4178968bb583746dda07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] -["_:Nb7591bd67efe44909d92824106c3b13d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N56d611894502410481612d5cb6016003", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne3abaf912f304b1bbda537f0c9866ce8", "localId", "", ""] -["_:N74164e072d8147ca808c451ad6b5d980", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N0f509a18a72e4662a7e7fc2fe485c3ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N46b3ee96a83c4a44bb51112e0ca4621c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf6a8366ab85b4074b187672b593f3e6e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N08242c50c463457c930eba2a9659cdf9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2be1468f91bc454082c8d0af333d205f", "localId", "", ""] -["_:Nb05234e65ed34c2e86c4abf63f02725c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a software manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N1288d377b72c44a58a576536a10d2030", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] -["_:Naa8dde945f86469da5292aed6e8c1634", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Ndfeaf41c217c4e0c8c442c54949d7e6a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ncb9989fa0c964e6f8d1f94c2ac8e2674", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a9816f437e481bb798da6e731d8252", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N7a477b2d627c40bfbee3b6eca010b404", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N28c546d9833444d7b7370a64f4274b1b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is an operating system", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["_:N784fd0e933c9417b9e11ea351159df76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a software library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] -["_:N150b1880a8e64af2af56beec5b8f629e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N2757a283e93b45ad88b85a593725d092", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N2279545cee4f47fb9986df1b11a68c0f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Naa8dde945f86469da5292aed6e8c1634", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Ndb06ff981cef4e94bfdbec22badacd4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1d4668e7f12244a7a9407b898c9b0534", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N0b3155ddb4cc46678a8dadb3eb9e5e43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nfcc30e48020d4dd2b3493a0cd55ea457", "localId", "", ""] +["_:N2aa73eafba6f4d55938fb60c96ff2379", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b5253826157456ba3297cf9f4f8db15", "localId", "", ""] +["_:N833dac5833c24d35a16d11f2e318aeef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N63f963c2c8a4467bb803f9af7eaafd3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:N7a48123f699948b5867af1fec0d7b88e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nebecc80c7e4045d1b3ad15ab0c1d04ec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["_:N33da303c78e142a2acc0db12f3ee6686", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N02fadd3757064be6a0b797d8675b611e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef3e82bf7eac41aa8dc101eabd0f1815", "localId", "", ""] +["_:N904326509fc04cc4be66ea123ed9fdc4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e4b35788e1b4064b856bcd8d2cc6670", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd2a11bb8a1a14a82994d02e9dd610275", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N615be2b8b7174608b24884d12a2039ad", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbc1332652da345c49ad3c948238f404b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba03adbea09d477299a596cac9fd8319", "http://www.w3.org/ns/shacl#not", "_:Ndbfe3b48ba714fb990a0e903863ea1ed", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N2847f93323fd468eab2b926c5715c994", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a56b875349e44729e9aca40972c86cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nadd5d6fa295c47ee82d49e5fde059110", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N80dac4ea19f44488ae2dc09ba1429116", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf507b9bee5ae4254bafe4ce3c72a9f18", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne03121e956234709bc0f8f288597ff50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7583808b54c947658126a7846ad7cc76", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4466be96ec5a4942b916c3f1fad2d3ee", "localId", "", ""] +["_:N10f5cc15b506459db381c02764d60e76", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8ae53aacf942ca88840a6c1d655d6c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N58021835a49a4b959f9428f8df7f7198", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N29cadfcf5dfa4e73b1b0f56fa6e4352f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb2747510507b404f9243bfd7225f629d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb916f2dfc1c640bd8e0dac9bb5956172", "http://www.w3.org/ns/shacl#in", "_:N57e86c05425144f4a08e64395a0d5e1d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N942417ca6d844df0914d75b099a457f8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2aa14aff363e4fc1ab2ed86f71eb8873", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3bf9008e5422473bb689602da04ccca1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N37829b662873490d9964f7bbbc300fce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nf71f6300b14a4726a20ffad899bed919", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Naf01116eff7c4759be95f8f97c257d9c", "localId", "", ""] +["_:Ndb31c53559be41e0b28e79b74da0b557", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nca9532c3dd0b421e95d0800b68e3442a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc7f12b88e8f5489dacbbfeb81192696a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:Nc22ee04d695b4582bd604f6206900620", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N78c7513398064da1a55c5df1b3c96444", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["_:N13396ee366a94de388e2aff47754e81f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53970517ea09401691d51549f8e0fd90", "http://www.w3.org/ns/shacl#in", "_:N77f1a43a35e5447c83116261ae574acc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7091d1b764924e4db3551e0b422e61ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nbc1332652da345c49ad3c948238f404b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Naf01116eff7c4759be95f8f97c257d9c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["_:N5a0ed5449f124c1e9ea7b05f0826cabd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne64dea82135241279d97934d928f2d35", "localId", "", ""] +["_:Na449b0b56e3540618b2a2698204edde9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N05edbc4959e844438800e546abaebaea", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N825f749765e348a0abfef75f63c1588a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N89d38dc48bd64f1d894f7f8c5494c264", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d2bee57931544d786ff3bc0afb223b0", "localId", "", ""] +["_:N98018fef19484e2fae944af82b21920e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nb345ac20ec3244e480ec30eee26dc06e", "localId", "", ""] +["_:N6aa0e623203745d7b1fb18b485918354", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N675847984777421d9fb9b171cdf0bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nc9ddcdf86e874968aa8f5ba821975eb4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N786a3eaa8fbe4cf0bb67c4e086fa8b5b", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nd91122440e7149a28656eb9394e082b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb2f2a5ddadbe4718954d50737f92e201", "localId", "", ""] +["_:N23a349d7f4a14351adf4c70293152926", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["_:Ndaeba75fb43b4db7b777e9b00ecd7064", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N187a93895c7b43bea96131212a0ba3f5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dcad64fd9cf4af2b8d6ea98d6c5450a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nf1326177a8f54cd38fb0d7aae60d69bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5c307bac3b90460f8b755b5d46827013", "localId", "", ""] -["_:N04c56aaa0702449d89c679a6ae2d509e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] -["_:Nb1e48771e71b47e98ac6156affc3e067", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nd3eb5f22c3be4e02942314bbb3d6fc3e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N6b8369d5442f4e3c902c0fd4c6ad7f11", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] -["_:N6a4847abbdd84dbb8e43386c5d710563", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nfa5229038d564307aa21cdf1f0981a70", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] -["_:N7e6385c5f3414e35862d986501bfff61", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Ncdeee899859040f3903c3212d22c1507", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349d882683524e14ae98f62402cadf06", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Ne202363026264077a74d779bbd16e04c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] -["_:Na108e2b1e33249d1a7c16ae86469a51b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Nf9cc156a3e084f8ab0ce054200c8fca7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N5a18c93b836b4c75887455a2be533616", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N6a9c7fd96f82444aac9a3bae9894656b", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Na8a357017cea4aaf8263bb41e69ff340", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne06f01bddfb24f69a9e1c0ba9694b11d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6d18260ddfa478b84c2dc19c2059aa2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7eb015d497fc4c09bb8530f59c65624d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd0d551be201428eb241c70d0e315cfa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95b6da49b56e4298924cd2f153f00905", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N7c7a260c778e4d4491ba75a0fe083ebe", "localId", "", ""] +["_:N87131d5acc2b478ba16230f714aa0bb0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionLicense", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "globalId", "", ""] +["_:N10002d3538094764a9c6d3893234cd04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nbdc672a90df4480da8648bd31507d48e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N951ec4cbce414b3bab847840bf18d59f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N220b4463e39147e99e8eeeb9974c5370", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N75f6c4472b7b45349200afcce0dbacef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87131d5acc2b478ba16230f714aa0bb0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N163b018b3d984833a5523252ed920c58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N626b5ad29167479dabae9a9177315404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N00d83dee7aa44a7991821a46e83e5164", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nce6e2333750a40619f2e93e40be35d7e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N786a3eaa8fbe4cf0bb67c4e086fa8b5b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0713bbcf2b1f4e23b912a81e12b5d270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd013d07f45a42d99931fe619ee4ca95", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N0781395df11e44a6a3186f0fa8908958", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff5f08fa9fd4aaeb51026e2484443c7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N16cb468a2dcd423bb3654b71a6f00062", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2aa14aff363e4fc1ab2ed86f71eb8873", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ac0694afb0c40c1bb0988b0569f0cb4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#property", "_:Nd6f4245b3ebe44e6b100782b191deb97", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a0ed5449f124c1e9ea7b05f0826cabd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:Nbffaba2351c747ef8e380b89888a5f14", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na3925605d49b4db382603ae946c37f51", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N683c5b7b252949bda929dd4befe8bb50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a2b8b0073a54a3db4d6092f1c5043ed", "http://www.w3.org/ns/shacl#in", "_:Nc1bb7a1b7d034342906511e27e066abc", "localId", "", ""] +["_:N95c7a63c89e94f8d9ceb0dd0c34ac9e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4278c3d777ea4ebd81cd23af80459c2d", "localId", "", ""] +["_:N8711a8ae5ca942d1bbd795a0144ca9a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4f9424fdcb0643a6b8dbd2c83de164a1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["_:N1a0a0b40de254f55a8372bba19b60496", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N6369a0cffc0445e888c1e30a54a5be5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc35596b6f164968b0bd35143cbc52ea", "localId", "", ""] +["_:N10ab85203a394bd3ba6ef86074d64233", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0b353053b3cd41e89351acf39abb719c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N315dc3dd043c41a49ffaaba74d10eeb0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e6142c3e2dd4f3f9e2aed1df9452bc7", "localId", "", ""] +["_:Naa7e95f812804669b3e89daed8d27b21", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N03140b327b9d4620b37b847528c7140b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N1a0a0b40de254f55a8372bba19b60496", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5011f0cdb4544a70b796520ecd436a25", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf4e0c03b381d4fb584571d8fdd2ca0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc15495aea74e4883afce40f042a057d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nf9bf03371d92462f91a54baa946fd625", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N80dac4ea19f44488ae2dc09ba1429116", "localId", "", ""] +["_:Na2b089e6c69d4697ae4de61d18f020f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N731241b6024d4e109893eb1354404ec5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N184c02d9c66a4e9d988d681d20c5ddc6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N32f50a51e84f4a2499a5d17f54bbed6b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9eda1b52fa264730ab0b383d300e1726", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0242fde5c314aa599a3a00cfb01634c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N694e3d4238ff4006b46b450b91f4179a", "localId", "", ""] +["_:N68e2aefd82ab40c59cc6c2bfeab0adc4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N897df0f6e23b488988a2d2db8aad5bc4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["_:N2dbc8b0a30da433a94050a3ab1190bb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf10e65ca64f84003827c23ef339743e5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4382805b6a5947d38ffcfd8b182bddbf", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:N5b2e4dda703849e4933338ff0970e968", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:N037a9f94d4da4593a56a6804fca57483", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:Nda791debefe5491aa84d61433873c630", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N89d641eef49d4a5f9ef42bfe5c4221bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N230a41f8c8d549b8844a37595ce56867", "localId", "", ""] +["_:N8f24e4128c124ec08b9e80f45a43dd1e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbac401e4be1249dd86dd149952baf59b", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N036299b1f2af44eeb966da8a1217ac9e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncc35596b6f164968b0bd35143cbc52ea", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nd77657e0b19d459c931f64f48ed7e1a6", "localId", "", ""] +["_:Nf58f6bed32c5414ca98526a5d6a7b6dc", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf593d6da70614e2581430bd37d9cd4ef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:Ne64dea82135241279d97934d928f2d35", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbf6c9a626dad41fa8a0422cb3ddab7a3", "localId", "", ""] +["_:Ncf68ed04ac534a92808a38217fa55530", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Na2b089e6c69d4697ae4de61d18f020f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_SpdxOrganization", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "3.0.1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfbb5f5e996be44989d31d47d46540443", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N73e74213eec84d8daaa36a51dab963d6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nf593d6da70614e2581430bd37d9cd4ef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N132cde65c9b14a1694d400388aecf0cc", "localId", "", ""] +["_:N0e31c4b45c4b442e9f1d32ab917a76ae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e471571470240e5872be57bfd58fed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Nbac401e4be1249dd86dd149952baf59b", "localId", "", ""] +["_:Ndb06ff981cef4e94bfdbec22badacd4d", "http://www.w3.org/ns/shacl#in", "_:N0e4d30a5dd60459dbbb5efc7333deb37", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02daaf1ea3874989948c16e26274de9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06a4b77ca26e4742a10723dc3349c395", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N59f692071bb64860ab9f02cfb4670088", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N5a2b8b0073a54a3db4d6092f1c5043ed", "localId", "", ""] +["_:N54d1f829ecc441b9b7d9248324cbea6b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N96120491adc84204822952240ddadf13", "localId", "", ""] +["_:N70cbc4a60eda4e648df0df882fab278d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c8c5257e6c144099de859c3f43b1961", "localId", "", ""] +["_:Nf21725c3245f4286b67bd679d3351c59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Ne778a773be4f408192f2ed37c6143a5d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N904326509fc04cc4be66ea123ed9fdc4", "localId", "", ""] +["_:N261545ecf40d4f65bf47dc050598e90f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Ncba4137ebcf84a728acd12bde91130e9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8ec4229c1a674693bde766506ca93e87", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nccde3ac271484f91b83ed5fb2e1d70c9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["_:N4278c3d777ea4ebd81cd23af80459c2d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["_:Nac0a6f045e7e4efd9dbaf01201286a14", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["_:N38e1279dca3f4e53be4eb3245a0e4ec2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc9ccffdec66347509395f75c9845128f", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4382805b6a5947d38ffcfd8b182bddbf", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nae8e63939c7c4cf4aa4ba555362d775c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfd592b5830bc43009e433a4172fb036b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9dc778bc5c415fad7f82cf4f6047d2", "localId", "", ""] +["_:N3899f43be1b142148dc7af5c1cd6a1b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0274510beacf46b0b7cd7048ff3cbb4d", "localId", "", ""] +["_:N9b9dc778bc5c415fad7f82cf4f6047d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Nce6e2333750a40619f2e93e40be35d7e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8679c5e3311467ca097a4151ac8fa54", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2b7fa052bf664f2a9e1923831d282602", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd0d48abef81b4c44a952c0925a6e30a9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0b3155ddb4cc46678a8dadb3eb9e5e43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1dd7c94072d1478ca91bee2c7af967a8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3ba51db196c04386ae47cb64aab6c95c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd8679c5e3311467ca097a4151ac8fa54", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0e31c4b45c4b442e9f1d32ab917a76ae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc9235a4485e64fff9b1298095061a58e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["_:N73f9586a8a7d4b978afcb9cfe998050b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N7d2dbee05b72455c995a675186de5fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nece0b4f721a847f98727202b50f4a753", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N210fbcf85b384009a2cee68e4a7e6b78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nda71586c3c6541b4a6a907d316dca405", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:N1647e706f6764e7d9ec4e0aa8979d0c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdc672a90df4480da8648bd31507d48e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4a3178783c58491bb646a056a8dbb37a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N034bf868068348fb92f2f33976cad5ae", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N47d32bc3b4e04c9ab083ec76d4f22585", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na92e8ceda7e548bb9a144c2e9c857639", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N8ff2b7ece321489a9ff262a2c697c89c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N542022ab56194a2184bd872572ca204b", "localId", "", ""] +["_:N1aac3c1c2ffb45d79910e133d9ec02f9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nca9532c3dd0b421e95d0800b68e3442a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N986501d57648498ea8ed156092baf32c", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne70b85feb564419597741ca637d61d03", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N13acbf7806c648f19f147c9073a04385", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30d5cdb21c144005b1d74c81aa0e129e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9eda1b52fa264730ab0b383d300e1726", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N542022ab56194a2184bd872572ca204b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N036299b1f2af44eeb966da8a1217ac9e", "localId", "", ""] +["_:Nf5531d9c16ff4f589dff19f480634c29", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N48b3e9d109d34fdeaa6cbef58c05c171", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["_:N0eb0fa7732fb4a2db7455731d6a1ce53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N91d11db27b28462b8545b78734a27503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N8bdb3da6da754d98843024e1dcbe3e43", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N02daaf1ea3874989948c16e26274de9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["_:Na92e8ceda7e548bb9a144c2e9c857639", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1bd597d8851e43b79e3bde3fb6388627", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neff5f08fa9fd4aaeb51026e2484443c7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd11df36dd5014f759eab790e847b9857", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d2bee57931544d786ff3bc0afb223b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N942417ca6d844df0914d75b099a457f8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88ce0438020d4326924db53dec9bd6b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N722c45f262084ffa9b063b852952397b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf6f1751e3ea84341bdeec66f7c44a8ce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N744e6bd4bf054480b6e284543bb79b87", "http://www.w3.org/ns/shacl#in", "_:Nc14cc862b5494776966375d4711f1f8d", "localId", "", ""] -["_:N32c6410af083493aa3238362e1cbd67e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] -["_:N5c307bac3b90460f8b755b5d46827013", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nda9579bf8aeb475c986dfda97af9e414", "localId", "", ""] +["_:N91fee785616543dd9952683d70d387bf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N95b6da49b56e4298924cd2f153f00905", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dda90621fe746a2972ace6f1e26f9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nb916f2dfc1c640bd8e0dac9bb5956172", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8692a82c280845c3a6fa37c02ddae229", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N58c62d134f5e41d78440946685ecf0cc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N894cee407d8747ec8adc2f05ce722a86", "localId", "", ""] +["_:Nd2a11bb8a1a14a82994d02e9dd610275", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndde9f898797c42b989ef522557debf64", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nd6ca1bcbdc494e39a9c1a4da0c52a0b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nad909dcc4fad4339a9eb809fabd6a871", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf4e0c03b381d4fb584571d8fdd2ca0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["_:N57e86c05425144f4a08e64395a0d5e1d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N833dac5833c24d35a16d11f2e318aeef", "localId", "", ""] +["_:N7f2c8d25f5df4c27b35c70d38090eab3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8186b6d9dc534ac1b7a906d040a88d6a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "https://spdx.org/rdf/3.0.1/creationInfo_NoneElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne70b85feb564419597741ca637d61d03", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N737b3d5b3c8f4cb7b5fb665b52f1dd96", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N06a4b77ca26e4742a10723dc3349c395", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N03140b327b9d4620b37b847528c7140b", "localId", "", ""] +["_:Nf6f1751e3ea84341bdeec66f7c44a8ce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c49370c41124d50ac6081418cb2432d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc0c94fed0eb041ef8c4fe70f4b1fd7c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N5f694c64068844ca80652791ca7749d9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4dda90621fe746a2972ace6f1e26f9c9", "localId", "", ""] +["_:Nf5531d9c16ff4f589dff19f480634c29", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N377b547285074591a904911ef1fc1977", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N4aa1ea2c440f4aecb7a6656a599fbf22", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N82be0a238ea44c658a60ca20e0c8c6fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:N85ad449141be453592e9e80c2bc379f4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N9a582f09d0b7426d81ae74b09a5ed252", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["_:N1a0a0b40de254f55a8372bba19b60496", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nb3e77cdb9a14442eafb0659c7081c110", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N57e86c05425144f4a08e64395a0d5e1d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3bf9008e5422473bb689602da04ccca1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc3f4dc279d7471b83aa1a9df09f8d3f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64a80dfe5e954cf59753ab8a96e4eff3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na3743aad0c334d06a729f81988609c9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["_:N8e672d95ff7d48e68c1ed7ecf019b269", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N0f7bf6e1b6a84c71b96db0ed65f445fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0a4093971cc4c949d28cdad8bdcb48d", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Ne4c7d5c25b2f46f3b980935a3b7858e2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] -["_:Nf0b9c1849e524f0e8b565e2bde495ce5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N27a589ebe1bb40c483985fcde9a2d5f2", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Nc5bf40e3b2584e2eaa4becc473bed079", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Ne9376f7e610a4f378d34348bf09acb82", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] -["_:N3df9880d78624ddba1dd8e35a428b9c9", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N553eab502b9344dfa8c5091d3acb923d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N024478cff6eb4ef48dc45dabdb7b0a35", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N29e8eb1e03be45ae92093e6937585f14", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N786a3eaa8fbe4cf0bb67c4e086fa8b5b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["_:N037a9f94d4da4593a56a6804fca57483", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N163b018b3d984833a5523252ed920c58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nd33af007bad14a4594f7039df1c5df75", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nce6e2333750a40619f2e93e40be35d7e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N30d5cdb21c144005b1d74c81aa0e129e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N91d11db27b28462b8545b78734a27503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N61b9a25cae674e199ce6572456d8e72f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb3e77cdb9a14442eafb0659c7081c110", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N72dd028519c2443b94229cfc4a2639bc", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N44928392b4d8458f847c7fd69533d2ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0b3155ddb4cc46678a8dadb3eb9e5e43", "localId", "", ""] +["_:N4f925ef656b840928e22aa51252c2976", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb50eefe33ac4feda6cfb13073b5324e", "localId", "", ""] +["_:N4ad4011b5f8c44cbb3e76f5da0885cfd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:Ndcdb30d7deca45a8bc3e563144933f0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47d32bc3b4e04c9ab083ec76d4f22585", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:N261c61aa119e4f4e9ce3c9387fb29c9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N507c6135f8424e8db67fe59ae93eb464", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6d7eec7a63445c8a64113d0e59ce02c", "localId", "", ""] +["_:N2a72f2e0c3d44dd5ac4c0633f336d556", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nf6541e98d99947d9a7ccb49088b43ea0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N931294357284457f9a6f643757b29e72", "localId", "", ""] +["_:N220b4463e39147e99e8eeeb9974c5370", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Na1cdda0a73e94e598b769cac4a5a5cb8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nba03adbea09d477299a596cac9fd8319", "localId", "", ""] +["_:Ne70b85feb564419597741ca637d61d03", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nff9c0c2a18f24f76bfa32806ec48ce59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nd385c846dfa14371a0a3697f7168b4c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N72a328f4b7e14cb194d99b35236c3430", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N763c69315ee040a88ca27b5205984626", "localId", "", ""] +["_:Nd11df36dd5014f759eab790e847b9857", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionLicense", "https://spdx.org/rdf/3.0.1/terms/Core/created", "2024-11-22T03:00:01Z", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N5011f0cdb4544a70b796520ecd436a25", "localId", "", ""] +["_:N288949a61054447689377b531414e0b7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41fda4edc0294fce84cdb5688d8ef9ef", "localId", "", ""] +["_:Nca9532c3dd0b421e95d0800b68e3442a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb8a14d0c45314542aa2d6a98232399be", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb0ab9a298e9845b1b1b770398def929d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N2c7697a923534e9988689746f1d03e41", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e0c03b381d4fb584571d8fdd2ca0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N70cbc4a60eda4e648df0df882fab278d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6e913b09266e498887238fae6898e289", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:N4aa1ea2c440f4aecb7a6656a599fbf22", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N269b628c85f04f5d8a10fa3c500745a4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nce6e2333750a40619f2e93e40be35d7e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N3b50e4323e8b4d388d8d522e18a49070", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nac0a6f045e7e4efd9dbaf01201286a14", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionElement", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N348ad67a2abe4f9d929b1e20acc594b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N52399fdf517c416ebb2e470463b71b5d", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N9a4f2ea8112e48b18e9aaa109a1e02b3", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["_:Nbc63e97d65ef4f38936c3be4f51c6827", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N556a43c641024cdb92f4ef30ad62ff89", "localId", "", ""] -["_:Ne3abaf912f304b1bbda537f0c9866ce8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N9fc754cd17fe403b9e6567ff39e96ef5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N065968ff4b1d468f80d208a94f728820", "localId", "", ""] -["_:Ne9376f7e610a4f378d34348bf09acb82", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N49a4e0f670334d2cbe90cca23083d0ad", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N97777d3f00c44071a9af1cf1e9b8d4bd", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N2b4ba84d3c35422383f41faeffab544e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nff83286adad842f19d79a36e90df97d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] -["_:N76180350f15e4fd0be60faa3412ed1fa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3cd13df3eb014a37bb535428e0c037e6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a container image which can be used by a container runtime application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N15fc27df69c64453aa991097a3de803a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] -["_:N1fcc6df939fe4ff6b57639467f64eff7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncdeee899859040f3903c3212d22c1507", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N2757a283e93b45ad88b85a593725d092", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] -["_:Nd677bc1745684cf98fb92f17a75ebd52", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] -["_:N16549d2169e94a4d8d291368d2d9f71b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] -["_:N1288d377b72c44a58a576536a10d2030", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is a single or a collection of source files", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nf32238231fca45f1ac5221bd1ecd220c", "http://www.w3.org/ns/shacl#in", "_:Nbb925214ef4742999c6047ece09174ec", "localId", "", ""] -["_:N229d11f8176c4bb7acd631c6b7187287", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N87ef2338681b493982fdd6660c334933", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Ndaecf52053104527964b081f8f6d4dfe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["_:N01b77c997a784a81856bfe55a59f0d26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N6a9c7fd96f82444aac9a3bae9894656b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N56d611894502410481612d5cb6016003", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:Nf0d9d94b4d9a4523a1d863217249938a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N8411f84580e2497da97dab50dc3b4df3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] -["_:Nf7805d1c06ba43eaa22c6043949bd567", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N37e9effec5ca4011a388b871588a9bfc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N558588160dbd42e28c5618ebcbb6e00a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1b970adab24f43699ff9033a7892334e", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N7177e8b281d74917a500d212b7382b6b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ne4619e36e32c4fdc886ba17b636520a3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:Naee034377c334f78a3af1a4d25c3d468", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "Element is data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Na62fed341d814dc8ac95b17410dd06e9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Neca5f29d67c84d0ba9ac05e9216798e8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N8692a82c280845c3a6fa37c02ddae229", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N80dc66a1ccec469392596c5291fa2864", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N2a72f2e0c3d44dd5ac4c0633f336d556", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N3b695bebf32746039b555b8460ffe552", "http://www.w3.org/ns/shacl#not", "_:Nb8a14d0c45314542aa2d6a98232399be", "localId", "", ""] +["_:N4d2df683a0ea4c39be288b78f9e61ca4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N66b43817d95d4468bf805207af159230", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nd33af007bad14a4594f7039df1c5df75", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N8bdb3da6da754d98843024e1dcbe3e43", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2aa73eafba6f4d55938fb60c96ff2379", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nfe1814d375d7456e843deb8cde1cf341", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Ne68051bb209048da9a57bc5dbaf28bf0", "localId", "", ""] +["_:Nc38c872821b548ee8f430a027b2d711f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd3d538fe1cb544b5808c51dffd844c81", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N98018fef19484e2fae944af82b21920e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:N39638ea4b52f4236b7a808cb979d2f4b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nbd47cac50394462f9015e00ec4b449a6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8ff2b7ece321489a9ff262a2c697c89c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["_:N9eda1b52fa264730ab0b383d300e1726", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ne820a8ec67114d53b03a71f5f7be31f5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne11c75cafdb0438299216847b06716cf", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneLicense", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "3.0.1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd8679c5e3311467ca097a4151ac8fa54", "localId", "", ""] +["_:N951ec4cbce414b3bab847840bf18d59f", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N9eda1b52fa264730ab0b383d300e1726", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nebecc80c7e4045d1b3ad15ab0c1d04ec", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N163fe4499b2a454a9641b23118bf53ae", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Ne70b85feb564419597741ca637d61d03", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nfbd3df443088485abe551fc6374a3c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1256cfafa26e453a9d5f8b08cc5920d7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N00d83dee7aa44a7991821a46e83e5164", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nedaa28cbd856413e95e7805cf2d255dd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N329ecc1447f349cc968623ddffe6a2f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N0eb0fa7732fb4a2db7455731d6a1ce53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd73c69088f734dffb4cc9539c637aecf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfb655ff9dcc6442baa6046d411f0624c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N687efc23ea2c4c0b9a09c9ca45dc49b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc91762ec925048e0a85d224bd2bd6d32", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N377b547285074591a904911ef1fc1977", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dcad64fd9cf4af2b8d6ea98d6c5450a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N264b55b33a4549a6a131d79763879896", "localId", "", ""] +["_:N0a961d271f304c8cbb2e0a1307a9d8ad", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf284f365ba5c4e4da40d7d7900d82744", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf41c7f62f52f4c10b14344ec13dfe1e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd11df36dd5014f759eab790e847b9857", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N5d195bb929fc404584503e9c9b17a526", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N675847984777421d9fb9b171cdf0bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2847f93323fd468eab2b926c5715c994", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["_:Nd385c846dfa14371a0a3697f7168b4c1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N4466be96ec5a4942b916c3f1fad2d3ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N14d2ccc3ee7749088945c0ba96e7a88a", "localId", "", ""] +["_:N1bd597d8851e43b79e3bde3fb6388627", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4d86b5ad122d431bbf443326643a51df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbd3df443088485abe551fc6374a3c4c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N14d7232930234cad917631e1993d7ccd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Na42e3794f624483e818646ed683c5ba2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfe1814d375d7456e843deb8cde1cf341", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc38c872821b548ee8f430a027b2d711f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nbd47cac50394462f9015e00ec4b449a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c34004e669a4f809790739b55299420", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nc7f12b88e8f5489dacbbfeb81192696a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N82be0a238ea44c658a60ca20e0c8c6fa", "localId", "", ""] +["_:N1dd7c94072d1478ca91bee2c7af967a8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N34cf4751490f48f9852ff2fa143a6321", "localId", "", ""] +["_:Nc6d18260ddfa478b84c2dc19c2059aa2", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3899f43be1b142148dc7af5c1cd6a1b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ndbfe3b48ba714fb990a0e903863ea1ed", "http://www.w3.org/ns/shacl#hasValue", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N3851673c346e4c9cacc8cf50837d6cfb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N3daabc6c6db94e5596afc49544cf4f73", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:Ndb8f89749acf4352b1d62c554af7fde6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1fb6b0088d4c43e7b3c2fc9342ceaa64", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N64ddee7ac73d4ece8829e73183990c09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["_:N137d0a75fd374daeb077f228da53897d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc2c6dbe5330f4b17ae33727e45f3e9d4", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N4d126f9477f941e8bd279a13b5a8f5bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfa5229038d564307aa21cdf1f0981a70", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] -["_:Nad60293878ba46b5b12652a41f9e5b9e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N86117ed461e44611b359453a2e0ddc6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nb3c96ed9edf047408c12db5df1daaf43", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nbb8a5798239c4e919f8766e4ec36f99c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3bf9008e5422473bb689602da04ccca1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N91adaf3024344ddcbcbf3f943faaad6b", "http://www.w3.org/ns/shacl#in", "_:N2aa14aff363e4fc1ab2ed86f71eb8873", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbbbec88245754e9d9390b9a11f0b67c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N68767751c5f64fc1afe82f2dcbae6636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1358bfc70dc14db6aa3a799228bc2fdd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd14f0a1267744e89f6930e710689414", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["_:Na449b0b56e3540618b2a2698204edde9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N328adb4bb1ec422084a2169890188a03", "localId", "", ""] +["_:Nf71f6300b14a4726a20ffad899bed919", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbac401e4be1249dd86dd149952baf59b", "http://www.w3.org/ns/shacl#path", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8e672d95ff7d48e68c1ed7ecf019b269", "localId", "", ""] +["_:N5ab248e680454bbcb3ed254de24ac49f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N163fe4499b2a454a9641b23118bf53ae", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N453a2981f56c4d3a943752e7740f87fd", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N1fb6b0088d4c43e7b3c2fc9342ceaa64", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] -["_:N2757a283e93b45ad88b85a593725d092", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] -["_:N3daf4b35020144689a44f0ff15ab9244", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ncf36f0c937574a40957458e67ccab9cc", "localId", "", ""] -["_:Nf854d2bed3524a08aa85d987a15ae3b4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60be8975df7d4f659d6589e10d3c8e19", "localId", "", ""] -["_:N75afbc0eb6e646f28396b52ee0131582", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N2bdf11c1b85e405a835c07e19f150556", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N998d2725c2574c8f8344620b839e2d6f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b52daafec44429186724a6d9a846793", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Ne84bb159066e48a1a884cceaa3854438", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:N77693c7bc7954401a66962a8958fac0c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:Nbfec05fc44f6435dbdeeb9f608a28e4c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N74164e072d8147ca808c451ad6b5d980", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N5e376019b0684f24bf032cb891f1c491", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6349b0f36b7f449faa1d73050fbde88f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N7e6385c5f3414e35862d986501bfff61", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] -["_:Nc0df3f2041aa425183862b62f02dd829", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N8551607a3f804986877c0affaed0b752", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc73e3099ed6465bb089df33bbf469ff", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Ne4619e36e32c4fdc886ba17b636520a3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N28c8fedea4324ffa8c41338d5fae0fe5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N00e5d1a9fc9f4e8ea643c5dec21372c9", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:Ne14b54567e794b13a34acf8718d2ccf6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nf39729cdf1294ea88879ccd16e468339", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:N312b811b38e3467eb37fbf91bc0dd93b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:Ne8307a3d6a8a433fad20e9cf2bd69327", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c96394ef494f739f0ba15682e92ea3", "localId", "", ""] -["_:N49d9ce37bbb44f77a01b48e5f2009c3f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N61bad2d32f474f829df8b09e757aec59", "http://www.w3.org/ns/shacl#in", "_:N86dbcc278d2a463da15bda1f007010e6", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N7d3cea31b9db4418ad60cbbcd3f14b75", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:N30a7d396784a431ba0eb686ae5b7e645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N36ba7d6688234724ae43de9320a88887", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N3cb5c5f5df694e3aaf52da4c410b011e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N2b4ba84d3c35422383f41faeffab544e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ca015566baa49e1be7bab3e5ca1b85a", "localId", "", ""] -["_:N01e0073f9d2a49f49037b8e666018bbd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] -["_:Nf05790d65f4b451781271dd86a5b4005", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na341e2127b1c4da9b7a2c521b48ba61d", "localId", "", ""] -["_:Nc7ccb8d419ad49ab9f18f22daf82266f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N5a18c93b836b4c75887455a2be533616", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb953247c1d474ff9b1190938b713a604", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N6e7150c4286149b7aa27ddf655625b5e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nd698c35793ab47df8eaa1d9f6fe9f131", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nea5cd277bd75414183676bf891a32527", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nc5839c1a42cb4cbf8b8f389491a2b604", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N456086b235914b4f9bd89adfd54de37c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99069f06ac76429c9f76e68132e89664", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] -["_:Nfafa3bfbbc7b4ea7bd042cec31c4660f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1de3ae74ec4d1d9b6be8a05eea2f76", "localId", "", ""] -["_:N99069f06ac76429c9f76e68132e89664", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N835bfbd04e26414fa4e0357251d9e6c7", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] -["_:N8e3eb89dc9a84ae0ae77a3bbc07580c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N626b5ad29167479dabae9a9177315404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["_:N243ef6907efb40d38e00f4430d63fc19", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ed65925a89e40e8b7faaa925d739c72", "localId", "", ""] +["_:Nda71586c3c6541b4a6a907d316dca405", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ndc659c8552d54ab684aadbdacdbd7a8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:Ne5e123ab8f7d4aa4b35a7442690fe19d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:N0274510beacf46b0b7cd7048ff3cbb4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N5ab248e680454bbcb3ed254de24ac49f", "localId", "", ""] +["_:N68e2aefd82ab40c59cc6c2bfeab0adc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4e6142c3e2dd4f3f9e2aed1df9452bc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N66595c518c6248f69bdca82dccebf454", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na82fb3a822a04f6180f1ca7808276d8f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd0cfba2a98544626a8566f29105598e9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na79e142094fb464da3de3ceb4108e4ff", "localId", "", ""] +["_:N5f694c64068844ca80652791ca7749d9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0781395df11e44a6a3186f0fa8908958", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd77657e0b19d459c931f64f48ed7e1a6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nc5485992ed4e4cbea07fa6d87ee716ac", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nf41c7f62f52f4c10b14344ec13dfe1e5", "localId", "", ""] +["_:Nfcc30e48020d4dd2b3493a0cd55ea457", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Ndaeba75fb43b4db7b777e9b00ecd7064", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "This individual element was defined by the spec.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf7fd042770064703a84cd9039273e4f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N65301d1be04341678842dfc049e2a33c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nff33e8337dc8421d9e74b338e35a75d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N1d4668e7f12244a7a9407b898c9b0534", "localId", "", ""] +["_:N13f4d81403034faaa93ea1abc3bd3d91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["_:Ndb31c53559be41e0b28e79b74da0b557", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N73e74213eec84d8daaa36a51dab963d6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N954579de61d84bef909737ad4568a536", "localId", "", ""] +["_:N68e2aefd82ab40c59cc6c2bfeab0adc4", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc6d18260ddfa478b84c2dc19c2059aa2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne7777394524c4639973161dd3aff2db3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbb0a3a63cdba4f078c6de6eef7ff6579", "http://www.w3.org/ns/shacl#not", "_:Ncedd59bf4f1a4436ac8325d34d020df5", "localId", "", ""] +["_:N58b8de667bb54771976a5e86a8a8139a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9bb1cced9aa14e08b36ebf9f952b1d01", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "This individual element was defined by the spec.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne883dfda4a7445ceb1e70f39ddd03fea", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf284f365ba5c4e4da40d7d7900d82744", "localId", "", ""] +["_:Nd0ec388aab40469ab0a4297c30e0c906", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9c1ccbc2b86f454395a450f736b67eec", "localId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nb40056258a0d4d96a453b1af72d463fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6946aaeee89545da9d91b8527c54139a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:Nc0df3f2041aa425183862b62f02dd829", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N27a589ebe1bb40c483985fcde9a2d5f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3daabc6c6db94e5596afc49544cf4f73", "localId", "", ""] -["_:N4a639a72aca4429f900632616a34bef4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Naae3483836e249d3a4cdd827af0f8631", "localId", "", ""] -["_:Ncf36f0c937574a40957458e67ccab9cc", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nc642cb7cb5d441eaaa4a1fc86368d998", "http://www.w3.org/ns/shacl#in", "_:Nd0989d19000249b7b6abdfee096c9f41", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N208b27c07ce6469e9114d5b80dfc4f8f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] -["_:N393d2d53bef34fe0846e87c7df91588d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N58021835a49a4b959f9428f8df7f7198", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd77e569c4d2d4d2c9bb29ea462bc94cc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6be5db9035a14b779b13bfa0a5a51c3e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd83655f2100e4025b2eefd465fc154ab", "localId", "", ""] +["_:Nb3e77cdb9a14442eafb0659c7081c110", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N683c5b7b252949bda929dd4befe8bb50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N991d42b910e64656b45d7c4ce9e7f5e3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b94274553ab4bc2bbc78307f39b3327", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba03adbea09d477299a596cac9fd8319", "http://www.w3.org/ns/shacl#message", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N0f568f8825144082a14a0e000b8ff13f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:Nae8e63939c7c4cf4aa4ba555362d775c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N8e672d95ff7d48e68c1ed7ecf019b269", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N0d09683a42354debacdd0b0625119609", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc3c21678fc9a459784f054a6954a9aa8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na267e7b88a344e4fbd0c59a6dc760e65", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2056bd91659a4260a6eb99a0cbdd9f14", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["_:N0753f471dae945e885cde15702c705bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c163fcab8684aa09c61e78b4cbb9b38", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N7a48123f699948b5867af1fec0d7b88e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nc9ddcdf86e874968aa8f5ba821975eb4", "localId", "", ""] +["_:N07868b0098174c478ac47f3fbc946ff0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2061c93cd5774c61823bf76c952d5242", "localId", "", ""] +["_:N95b6da49b56e4298924cd2f153f00905", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf7fd042770064703a84cd9039273e4f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf41c7f62f52f4c10b14344ec13dfe1e5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8bdb3da6da754d98843024e1dcbe3e43", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne778a773be4f408192f2ed37c6143a5d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Na5ef7f1675b84ce99e4f4ca36d200a91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N14d7232930234cad917631e1993d7ccd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb31c53559be41e0b28e79b74da0b557", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Na1f3d174a6d64488a8ff34be710850c5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1fcc6df939fe4ff6b57639467f64eff7", "localId", "", ""] -["_:N941027defe6c4c49915b8fb72263813e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N6f822a7a1a0748eaa9f4fe3e881d6726", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] -["_:N55072cbd77a64b16b152c20236d786f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N64ddee7ac73d4ece8829e73183990c09", "localId", "", ""] -["_:N761b1b05ac5746c3b86d599c46526598", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:Ne2f51219aefd476d89347b0e1c485369", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["_:Nf32238231fca45f1ac5221bd1ecd220c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Nc416283f46f74c5ca28e42eede357fc1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:Nc709c441c5e04513bcf2e73d3670fca8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] -["_:N2c65a23cf781468598b84d1456d825fb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nf39729cdf1294ea88879ccd16e468339", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N45b62edbd5f3406dba20232288ec19fd", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne64dea82135241279d97934d928f2d35", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N0b728d22a9674ecc87af12fde5aae61c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:Nda71586c3c6541b4a6a907d316dca405", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N9bb1cced9aa14e08b36ebf9f952b1d01", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na3743aad0c334d06a729f81988609c9f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nc9ccffdec66347509395f75c9845128f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N44928392b4d8458f847c7fd69533d2ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["_:N6eb9ec15081f404a99935ff4e2aaa14b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N62b8677868664944abc9f19745aed957", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4baf3becb8740a79f8bceb49f40679f", "localId", "", ""] +["_:Nf3dfbb7f98e84c61b58f5b17e3ae9f19", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N82be0a238ea44c658a60ca20e0c8c6fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf44042158d4d4c85a5bd6a0fcb538498", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nb3e77cdb9a14442eafb0659c7081c110", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4278c3d777ea4ebd81cd23af80459c2d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:Nf7e1508801cf4398b830fad84fe53388", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62b8677868664944abc9f19745aed957", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N8b959a4ad4834d5a96d17ac52b3571cf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Ndee65321b0f14da3a2a5675702243602", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] -["_:Nffd32d595d024069b6df3a1ef8da642a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nf2495df384ef4dfe9e42259508a5f433", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N6b8369d5442f4e3c902c0fd4c6ad7f11", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N8551607a3f804986877c0affaed0b752", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N2fd6d6c96c7b46dabc958e2ddb32657c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Na168e6a25ca4415aa927f2d16152226c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N56b887d449ac42dcac573916474bbce1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N1f248bb10ce740cc9124e394b35259ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] -["_:Na1ab85fdd72146cfb0eb275a20aed6fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N68dfb19b51934b85a897e13ae36b552a", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:Nc5bf40e3b2584e2eaa4becc473bed079", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N3d67d474d6584406964ab34eebc78a17", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] -["_:Nfc8707d6d8b944508b09d8d3125e53f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] -["_:N64ddee7ac73d4ece8829e73183990c09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N2d8b30121bba468383f1a52208a233a0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Nd73c665e4d964b40be2d12cdc7ab7fa2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] -["_:N28c546d9833444d7b7370a64f4274b1b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nc642cb7cb5d441eaaa4a1fc86368d998", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N67a7c2de8c574fb991ccc64346e1de56", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N9dfffc9a0d064fbbb99f222927600262", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:Nfc79218ef172418cad1d73977bceaf78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Na40768ed7c6a40fcb01c9e8f1793b8a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N01e0073f9d2a49f49037b8e666018bbd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] -["_:N87ef2338681b493982fdd6660c334933", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:N8e8fa340313748a7b459ba889204f2c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Na34b98cc7abc4ac2bb5b1ba9777ec6a0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] -["_:N2751f527dac048b29b31dea36517c56a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a639a72aca4429f900632616a34bef4", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] -["_:N341003cfbb2341dc85b4e126aedddb6f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] -["_:Neb11974d792545bab359067d0609d8ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N20563c47790549c1a3121000a834c4cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N870a0a4f2a794e2aae2a22975ec6fa49", "localId", "", ""] -["_:N556257d7798d418ea42ac047b24405ec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7bd6e74fed5e42d29e8234d5933efd98", "localId", "", ""] -["_:N42dac2d2cbe6407596e2fb585812097d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nb95a1dba72b847409cd9eab4ed5e0033", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] -["_:N6e7150c4286149b7aa27ddf655625b5e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N36ba7d6688234724ae43de9320a88887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] -["_:N64ddee7ac73d4ece8829e73183990c09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:Ne3895908b9eb4cf68888a0b70d8088ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] -["_:Ne8b93e1651f84d5f8ff94e4b82012f07", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] -["_:N9f5fcae561fb42dbaa23d4b2cbedef0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb37183f337474d0d8058f31577954cf8", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["_:N229d11f8176c4bb7acd631c6b7187287", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6fa5c5fdf614c2f88c2b4fc315663fb", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc0df3f2041aa425183862b62f02dd829", "localId", "", ""] -["_:Nefe7cf242fd84f90a4f3cc6062e671c8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nd78d72bd38c34a3c804f97f9e6b927a3", "localId", "", ""] -["_:Nf4064e5c7fb84a899bffb14df5844894", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N0ac53be222cb49b7af09086cfaaed1db", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N107aa4617cfc41499f0678d83f303c24", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N4379f82c1b44400197a0281504402fc5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Nc5839c1a42cb4cbf8b8f389491a2b604", "localId", "", ""] -["_:Nd73c665e4d964b40be2d12cdc7ab7fa2", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] -["_:Nbf51d2fce0c449ca8df0fa964ec48e89", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N15fc27df69c64453aa991097a3de803a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N659a17727ec34fe487d556cc5ed935fa", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] -["_:N42775851ecec45ee90ee1fe5c1071993", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4fd4703e2c5d4687bed9b05563fc9cda", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] -["_:N1d5173c248f14304bd9adef81206e060", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a3cf2ffe9b9430390c5ce23bd48fce4", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N2305488d52f34ae3bd7f3de8a96329e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nc5bf40e3b2584e2eaa4becc473bed079", "localId", "", ""] -["_:N9832a681241a4a91bd95ecdfaa05670d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] -["_:N5e77c3af3932465a99431b715d09d12e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] -["_:N6761e7f2e133401fa1a4d1f8bed0202e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nc7ccb8d419ad49ab9f18f22daf82266f", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N950494b11f9e43fd9ce4b21264e6a0a8", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "Element is configuration data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] -["_:N9832a681241a4a91bd95ecdfaa05670d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:Ne0cb74aabc9c4794b4d9319b9a1fe42b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Ndb56a4a0aad9490faaa05462a9fcc5b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefe7cf242fd84f90a4f3cc6062e671c8", "localId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:Nb387237d7787460e8f7e72786252a39f", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element provides a requirement needed as input for another Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] -["_:N069fdf6673d440b8ab54670ad7906662", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["_:N069fdf6673d440b8ab54670ad7906662", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] -["_:N9177e2ee3c054acba6cd2b8f4d78e4f3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N78f0595c63a44f9ea394e506cdf868e9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] -["_:N833899f5b4b1487b8858f9aebd17a95c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] -["_:N558588160dbd42e28c5618ebcbb6e00a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] -["_:N069fdf6673d440b8ab54670ad7906662", "http://www.w3.org/ns/shacl#in", "_:N62354c6ede0641c2a17958df1fce06bf", "localId", "", ""] -["_:N950494b11f9e43fd9ce4b21264e6a0a8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N74164e072d8147ca808c451ad6b5d980", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] -["_:Nbe19063f503a46969af5f11469f71a33", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] -["_:N4c5910b87a7e4fc69577e8ccd52c8ab3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "the Element is an archived collection of one or more files (.tar, .zip, etc)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N193f441ef82a4c6f872a77fdc536a646", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] -["_:N2757a283e93b45ad88b85a593725d092", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb245e59ae52342bea2f1feb05bb80e79", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N96ab198cab814dceb4dc205e80f644d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] -["_:Nfd60dc4acf8f405b86d3ebb119d8edeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N5c4503ba9d8a43719f83795d17b3c7a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["_:N3051e5f9bfdf45b19c416045118502ef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] -["_:N107aa4617cfc41499f0678d83f303c24", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] -["_:N67fc6e9fc5d24eabb8543cdc669b1145", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] -["_:N64ddee7ac73d4ece8829e73183990c09", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] -["_:N6e7150c4286149b7aa27ddf655625b5e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nfe1303da564e44c3ab64d0e8f83a0713", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ncb9989fa0c964e6f8d1f94c2ac8e2674", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Nb7591bd67efe44909d92824106c3b13d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] -["_:Ne7755fef413944e6a5bd969d379e8410", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] -["_:N0f509a18a72e4662a7e7fc2fe485c3ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:N208b27c07ce6469e9114d5b80dfc4f8f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] -["_:Ncdcdce99937a4256a16f3f88605197d9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["_:Nff33e8337dc8421d9e74b338e35a75d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncae19f1586924a439b37e75eb5b57ed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N30d5cdb21c144005b1d74c81aa0e129e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc91762ec925048e0a85d224bd2bd6d32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N95b6da49b56e4298924cd2f153f00905", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ndb06ff981cef4e94bfdbec22badacd4d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na5a538a0052340c0ba01747cca3d3da8", "http://www.w3.org/ns/shacl#not", "_:N8115c0678af046f9bb8fe56f1541b92b", "localId", "", ""] +["_:Nf41c7f62f52f4c10b14344ec13dfe1e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nfcc30e48020d4dd2b3493a0cd55ea457", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc38c872821b548ee8f430a027b2d711f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndc4f18efad334d78a498ea9df84fbd02", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0b728d22a9674ecc87af12fde5aae61c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd11df36dd5014f759eab790e847b9857", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N105628f6c8b040edb9db617f35f30bec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ned1f0afb78d3460c9478383abf3da36b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8cf54eee3ac40cca0ed6cfdaef6a576", "localId", "", ""] +["_:N734a831b529349fb969fd328dc6dcb1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N25b71b41baf8408a91b66336f376a5b6", "localId", "", ""] +["_:Nb850dda843534d3ab3ffbadf70766fef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndc4f18efad334d78a498ea9df84fbd02", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] ["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] -["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nda791debefe5491aa84d61433873c630", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6be5db9035a14b779b13bfa0a5a51c3e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd14f0a1267744e89f6930e710689414", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf44042158d4d4c85a5bd6a0fcb538498", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6eb9ec15081f404a99935ff4e2aaa14b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N06a4b77ca26e4742a10723dc3349c395", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["_:Nccde3ac271484f91b83ed5fb2e1d70c9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N36b7d391e5cf402199bf454d82f5735c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf3dfbb7f98e84c61b58f5b17e3ae9f19", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N565a78360e28494ea80897aadf944c0c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N79e0fdc8a753446e8e1931aab90b02ae", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N5011f0cdb4544a70b796520ecd436a25", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1358bfc70dc14db6aa3a799228bc2fdd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf507b9bee5ae4254bafe4ce3c72a9f18", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0f568f8825144082a14a0e000b8ff13f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89d641eef49d4a5f9ef42bfe5c4221bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc91762ec925048e0a85d224bd2bd6d32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf028d12b2d0f4f6cb20747b6b39a8b5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc85a3a5deac54465a32d993ba5434b00", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne7777394524c4639973161dd3aff2db3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionElement", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "3.0.1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N163fe4499b2a454a9641b23118bf53ae", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N29e8eb1e03be45ae92093e6937585f14", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N88e97455b377466daa24bff58cde8f0d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N328adb4bb1ec422084a2169890188a03", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nadc18a90b6ca4cc3af0fb2aa7418dda8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N66b43817d95d4468bf805207af159230", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N06465237afe4406eb4803558f7a57c08", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N6f8ca85700744b0e9f7a8672675d1dca", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7676f1bbd99e47659502f87b9936453e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8692a82c280845c3a6fa37c02ddae229", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06465237afe4406eb4803558f7a57c08", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30d5cdb21c144005b1d74c81aa0e129e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:Nb81407b76fc94f228f1f5ad011d931a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["_:N4091b2fb3d5c417fad7305927740d1d5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N683c5b7b252949bda929dd4befe8bb50", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N73833299f42a4f78b3a3379f9d2302d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N034bf868068348fb92f2f33976cad5ae", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N6946aaeee89545da9d91b8527c54139a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4382805b6a5947d38ffcfd8b182bddbf", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c34004e669a4f809790739b55299420", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5a0ed5449f124c1e9ea7b05f0826cabd", "localId", "", ""] +["_:Nbd14f0a1267744e89f6930e710689414", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc37985fef6884679b49d387a2ef08d3f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["_:Nb850dda843534d3ab3ffbadf70766fef", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd0ec388aab40469ab0a4297c30e0c906", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N737b3d5b3c8f4cb7b5fb665b52f1dd96", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N8186b6d9dc534ac1b7a906d040a88d6a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nfbb5f5e996be44989d31d47d46540443", "localId", "", ""] diff --git a/rdf/spdx-model.json-ld b/rdf/spdx-model.json-ld index 9ee26857a8..df4b0456ed 100644 --- a/rdf/spdx-model.json-ld +++ b/rdf/spdx-model.json-ld @@ -1,171 +1,217 @@ [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "kev" + "@value": "registration" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A string in the license expression format." + "@value": "A license addition that is not listed on the SPDX Exceptions List." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + "@value": "The third-highest level of risk posed by an AI system." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "sha3_224" + "@value": "medium" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nebecc80c7e4045d1b3ad15ab0c1d04ec" + }, + { + "@id": "_:Nb345ac20ec3244e480ec30eee26dc06e" + }, + { + "@id": "_:N894cee407d8747ec8adc2f05ce722a86" + }, + { + "@id": "_:Nd2a11bb8a1a14a82994d02e9dd610275" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:Nebecc80c7e4045d1b3ad15ab0c1d04ec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:Nb345ac20ec3244e480ec30eee26dc06e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Provides information about the primary purpose of the software artifact." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + "@id": "_:N894cee407d8747ec8adc2f05ce722a86", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "the element follows the Build profile specification" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "build" + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "@id": "_:Nd2a11bb8a1a14a82994d02e9dd610275", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "hasDataFile" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "npm" + "@value": "swid" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides relevant information about the AI software, not including the model\ndescription." + "@value": "Uniquely identifies an external element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ @@ -175,55 +221,72 @@ ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes what the given dataset should be used for." + "@value": "A software agent." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies an Extension characterization of some aspect of an Element." + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + "@value": "blake2b256" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A distinct article or unit related to Software." + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -233,422 +296,293 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N744e6bd4bf054480b6e284543bb79b87" + "@id": "_:Na2b089e6c69d4697ae4de61d18f020f7" }, { - "@id": "_:Nf7805d1c06ba43eaa22c6043949bd567" - }, + "@id": "_:Nb850dda843534d3ab3ffbadf70766fef" + } + ] + }, + { + "@id": "_:Na2b089e6c69d4697ae4de61d18f020f7", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "_:N64ddee7ac73d4ece8829e73183990c09" - }, + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "_:N0809050b78e64f1c8f5666cc9ffc92a6" - }, + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:Nb95a1dba72b847409cd9eab4ed5e0033" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" } ] }, { - "@id": "_:N744e6bd4bf054480b6e284543bb79b87", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Nb850dda843534d3ab3ffbadf70766fef", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" - } - ] + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" } ] }, { - "@id": "_:Nf7805d1c06ba43eaa22c6043949bd567", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" - } - ], - "http://www.w3.org/ns/shacl#in": [ - { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" - } - ] - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + "@value": "model" } ] }, { - "@id": "_:N64ddee7ac73d4ece8829e73183990c09", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "ancestorOf" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + "@value": "availableFrom" } ] }, { - "@id": "_:N0809050b78e64f1c8f5666cc9ffc92a6", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + "@value": "runtimeAnalysisReport" } ] }, { - "@id": "_:Nb95a1dba72b847409cd9eab4ed5e0033", - "http://www.w3.org/ns/shacl#class": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2002/07/owl#sameAs": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" } ], - "http://www.w3.org/ns/shacl#path": [ + "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionLicense" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Information about the relationship between two Elements." + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174)." + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "sha1" + "@value": "hasAssessmentFor" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "When a CVSS score is between 9.0 - 10.0" + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "critical" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + "@value": "fixedIn" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element has been copied to each `to` Element." + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "copiedTo" + "@value": "securityPenTestReport" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" @@ -656,474 +590,539 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element doesn't fit into any of the other categories" + "@value": "The Element is a container image which can be used by a container runtime application." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "other" + "@value": "container" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@id": "https://spdx.org/rdf/3.0.1/terms/", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "http://www.w3.org/2002/07/owl#Ontology" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://purl.org/dc/terms/abstract": [ { "@language": "en", - "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4." + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://purl.org/dc/terms/created": [ { - "@value": "blake2b256" + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://purl.org/dc/terms/creator": [ { "@language": "en", - "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + "@value": "SPDX Project" } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://purl.org/dc/terms/license": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://purl.org/dc/terms/references": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the type of the external reference." + "@value": "The percentile of the current probability score." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Element is data" + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "data" + "@value": "hasDeclaredLicense" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + "@value": "An Organization representing the SPDX Project." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2002/07/owl#sameAs": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "https://spdx.org/" } ], - "http://www.w3.org/ns/shacl#property": [ + "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo": [ { - "@id": "_:Nf3860ad4cc5d4d87be1f408701c9f435" + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_SpdxOrganization" } ] }, { - "@id": "_:Nf3860ad4cc5d4d87be1f408701c9f435", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2002/07/owl#sameAs": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" } ], - "http://www.w3.org/ns/shacl#path": [ + "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_NoneLicense" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to additional product metadata such as reference within organization's product catalog." + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "productMetadata" + "@value": "runtime" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the type of a content identifier." + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Used when the type does not match any of the other options." + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "other" + "@value": "query" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a detailed description of the Element." + "@value": "Used when someone reviews the Element." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "review" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A license exception that is listed on the SPDX Exceptions list." + "@value": "The Element provides a requirement needed as input for another Element." } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + "@value": "requirement" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "When a CVSS score is 0.0" } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N56d611894502410481612d5cb6016003" - }, + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "_:Ne880e2c5878f4becba59cd843618c77a" + "@value": "none" } ] }, { - "@id": "_:N56d611894502410481612d5cb6016003", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "Specifies the unit of energy consumption." } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + "@value": "support" } ] }, { - "@id": "_:Ne880e2c5878f4becba59cd843618c77a", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The third-highest level of risk posed by an AI system." + "@value": "Specifies the unit in which energy is measured." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "medium" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "hasAssociatedVulnerability" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + "@value": "the element follows the ExpandedLicensing profile specification" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + "@value": "expandedLicensing" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "data type is not known." + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "noAssertion" + "@value": "dependsOn" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + "@value": "The Element is a software framework." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "underInvestigationFor" + "@value": "framework" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes the type of annotation." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is a machine learning or artificial intelligence model" + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "model" + "@value": "inlineMitigationsAlreadyExist" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Captures the size of the dataset." + "@value": "A collection of SPDX Elements that could potentially be serialized." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N4aa1ea2c440f4aecb7a6656a599fbf22" + }, + { + "@id": "_:Ndc4f18efad334d78a498ea9df84fbd02" + }, + { + "@id": "_:Nc22ee04d695b4582bd604f6206900620" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "@id": "_:N4aa1ea2c440f4aecb7a6656a599fbf22", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc)" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "file" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:Ndc4f18efad334d78a498ea9df84fbd02", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:Nc22ee04d695b4582bd604f6206900620", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -1131,70 +1130,86 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + "@value": "A canonical, unique, immutable identifier" } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N7d98dd34e2e442ec8f9dd87a82897c1a" + "@id": "_:N45b62edbd5f3406dba20232288ec19fd" }, { - "@id": "_:N950494b11f9e43fd9ce4b21264e6a0a8" + "@id": "_:N453a2981f56c4d3a943752e7740f87fd" } ] }, { - "@id": "_:N7d98dd34e2e442ec8f9dd87a82897c1a", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N45b62edbd5f3406dba20232288ec19fd", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" } ] }, { - "@id": "_:N950494b11f9e43fd9ce4b21264e6a0a8", + "@id": "_:N453a2981f56c4d3a943752e7740f87fd", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -1205,341 +1220,185 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3." + "@value": "Describes relevant information about different steps of the training process." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "email" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides information about the creation of the Element." - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@value": "Defines the line range in the original host file that the snippet information\napplies to." } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Nc0df3f2041aa425183862b62f02dd829" - }, - { - "@id": "_:N4379f82c1b44400197a0281504402fc5" - }, - { - "@id": "_:N107aa4617cfc41499f0678d83f303c24" - }, - { - "@id": "_:N9a4f2ea8112e48b18e9aaa109a1e02b3" - }, + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "_:N70a01ce1edb94124ac3d6a3b187db793" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" } ] }, { - "@id": "_:Nc0df3f2041aa425183862b62f02dd829", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "Provides the location of an exploit catalog." } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" - } - ], - "http://www.w3.org/ns/shacl#pattern": [ - { - "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" - } - ] - }, - { - "@id": "_:N4379f82c1b44400197a0281504402fc5", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" - } - ] - }, - { - "@id": "_:N107aa4617cfc41499f0678d83f303c24", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" - } - ], - "http://www.w3.org/ns/shacl#pattern": [ - { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" - } - ] - }, - { - "@id": "_:N9a4f2ea8112e48b18e9aaa109a1e02b3", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" - } - ] - }, - { - "@id": "_:N70a01ce1edb94124ac3d6a3b187db793", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "mavenCentral" + "@value": "noSupport" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Abstract class representing a license combination consisting of one or more licenses." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@value": "Records the results of general safety risk assessment of the AI system." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + "@value": "Provides information about the completeness of relationships." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "sha3_384" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is an operating system" + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "operatingSystem" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "The result of applying a hash algorithm to an Element." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@value": "red" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Refers to one or more Elements that are part of an ElementCollection." + "@value": "The field describes the availability of a dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The software is not affected because the vulnerable component is not in the product." + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "componentNotPresent" + "@value": "hasAssociatedVulnerability" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" @@ -1547,17 +1406,17 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to the issue tracker for a package." + "@value": "A reference to an artifact containing the sources for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "issueTracker" + "@value": "sourceArtifact" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -1565,53 +1424,78 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A property name with an associated value." + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Neecbcd12ce83469c90d8e79c41ce15e2" + "@id": "_:N91adaf3024344ddcbcbf3f943faaad6b" + }, + { + "@id": "_:N07cb32d0626a45cfbea37a7dd2a8b854" + }, + { + "@id": "_:N8f24e4128c124ec08b9e80f45a43dd1e" }, { - "@id": "_:N0f509a18a72e4662a7e7fc2fe485c3ac" + "@id": "_:N3bf9008e5422473bb689602da04ccca1" } ] }, { - "@id": "_:Neecbcd12ce83469c90d8e79c41ce15e2", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N91adaf3024344ddcbcbf3f943faaad6b", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" } ] }, { - "@id": "_:N0f509a18a72e4662a7e7fc2fe485c3ac", + "@id": "_:N07cb32d0626a45cfbea37a7dd2a8b854", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -1619,6 +1503,7 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -1629,209 +1514,177 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "@id": "_:N8f24e4128c124ec08b9e80f45a43dd1e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Element is documentation" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "documentation" + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "An SPDX Element containing an SPDX license expression string." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N5665c63b6756409c9cdaed2974ba4360" - }, - { - "@id": "_:Nc5839c1a42cb4cbf8b8f389491a2b604" - }, - { - "@id": "_:N0ac53be222cb49b7af09086cfaaed1db" - } - ] - }, - { - "@id": "_:N5665c63b6756409c9cdaed2974ba4360", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N3bf9008e5422473bb689602da04ccca1", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" } ] }, { - "@id": "_:Nc5839c1a42cb4cbf8b8f389491a2b604", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + "@value": "hasAddedFile" } ] }, { - "@id": "_:N0ac53be222cb49b7af09086cfaaed1db", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "hasOptionalDependency" + "@value": "sha3_384" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Capture the scope of information about a specific relationship between elements." + "@value": "A reference to a certification report for a package from an accredited/independent body." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + "@value": "certificationReport" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)." + "@value": "A reference to funding information related to a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "sha512" + "@value": "funding" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "urlScheme" + "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -1839,129 +1692,60 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Ne9376f7e610a4f378d34348bf09acb82" + "@id": "_:Na5a538a0052340c0ba01747cca3d3da8" }, { - "@id": "_:Ncf36f0c937574a40957458e67ccab9cc" + "@id": "_:N1d4668e7f12244a7a9407b898c9b0534" }, { - "@id": "_:N5a18c93b836b4c75887455a2be533616" - }, - { - "@id": "_:Nb953247c1d474ff9b1190938b713a604" - }, - { - "@id": "_:Ne3abaf912f304b1bbda537f0c9866ce8" + "@id": "_:N0781395df11e44a6a3186f0fa8908958" } ] }, { - "@id": "_:Ne9376f7e610a4f378d34348bf09acb82", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" - } - ], - "http://www.w3.org/ns/shacl#in": [ - { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" - } - ] - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ + "@id": "_:Na5a538a0052340c0ba01747cca3d3da8", + "http://www.w3.org/ns/shacl#message": [ { - "@value": 1 + "@language": "en", + "@value": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/ns/shacl#not": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "_:N8115c0678af046f9bb8fe56f1541b92b" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" } ] }, { - "@id": "_:Ncf36f0c937574a40957458e67ccab9cc", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ + "@id": "_:N8115c0678af046f9bb8fe56f1541b92b", + "http://www.w3.org/ns/shacl#hasValue": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" } ] }, { - "@id": "_:N5a18c93b836b4c75887455a2be533616", + "@id": "_:N1d4668e7f12244a7a9407b898c9b0534", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -1969,6 +1753,7 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -1979,30 +1764,12 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" - } - ] - }, - { - "@id": "_:Nb953247c1d474ff9b1190938b713a604", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" } ] }, { - "@id": "_:Ne3abaf912f304b1bbda537f0c9866ce8", + "@id": "_:N0781395df11e44a6a3186f0fa8908958", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -2010,6 +1777,7 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -2020,263 +1788,254 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "track" + "@value": "build" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "hasConcludedLicense" + "@value": "sha224" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes the confidentiality level of the data points contained in the dataset." + "@value": "Provides information about the creation of the Element." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf7fd042770064703a84cd9039273e4f7" + }, + { + "@id": "_:Nca9532c3dd0b421e95d0800b68e3442a" + }, + { + "@id": "_:N68e2aefd82ab40c59cc6c2bfeab0adc4" + }, + { + "@id": "_:N98018fef19484e2fae944af82b21920e" + }, + { + "@id": "_:N61753ca6fa484199b143356d20b0476e" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Nf7fd042770064703a84cd9039273e4f7", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Commentary on an assertion that an annotator has made." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@language": "en", - "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "syntactic" + "@id": "http://www.w3.org/ns/shacl#Literal" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#path": [ { - "@language": "en", - "@value": "The name of a relevant standard that may apply to an artifact." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#pattern": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Nca9532c3dd0b421e95d0800b68e3442a", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "the element follows the Lite profile specification" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "lite" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "@id": "_:N68e2aefd82ab40c59cc6c2bfeab0adc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "A collection of SPDX Elements that could potentially be serialized." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Nd0d9b8cea40d40dc91877f32f673ef66" - }, + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:Nb1e48771e71b47e98ac6156affc3e067" - }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ { - "@id": "_:N97819d7a350747339be471fc904dd3e6" + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "_:Nd0d9b8cea40d40dc91877f32f673ef66", + "@id": "_:N98018fef19484e2fae944af82b21920e", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" } ] }, { - "@id": "_:Nb1e48771e71b47e98ac6156affc3e067", + "@id": "_:N61753ca6fa484199b143356d20b0476e", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" } ] }, { - "@id": "_:N97819d7a350747339be471fc904dd3e6", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + "@value": "exploitCreatedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Element represents software that controls hardware devices" + "@value": "A short description of an Element." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "deviceDriver" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -2284,140 +2043,140 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "packagedBy" + "@value": "hasConcludedLicense" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the element follows the Security profile specification" + "@value": "Specifies the type of the external identifier." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "security" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to additional license information related to an artifact." + "@value": "Dataset may be distributed freely, without restriction." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "license" + "@value": "clear" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + "@value": "Describes a sensor used for collecting the data." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "build" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A LicenseAddition participating in a 'with addition' model." + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + "@value": "patchedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "An entity that is authorized to issue identification credentials." + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to binary artifacts related to a package." + "@value": "A relationship has specific context implications during development phase of an element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "binaryArtifact" + "@value": "development" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The field describes the availability of a dataset." + "@value": "A reference to the security adversary model for a package." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + "@value": "securityAdversaryModel" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -2425,12 +2184,12 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Class that describes a build instance of software/artifacts." + "@value": "Provides an EPSS assessment for a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -2440,48 +2199,29 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Nd3eb5f22c3be4e02942314bbb3d6fc3e" - }, - { - "@id": "_:N761b1b05ac5746c3b86d599c46526598" - }, - { - "@id": "_:Nec3642cffbce44abbfb1f66ffa74d5c1" - }, - { - "@id": "_:N931242be4ac14a95b8ef51122ba2cf40" - }, - { - "@id": "_:Nada0379a8e6840aeab21269255f5c588" - }, - { - "@id": "_:N15fc27df69c64453aa991097a3de803a" - }, - { - "@id": "_:Nd78d72bd38c34a3c804f97f9e6b927a3" - }, - { - "@id": "_:N2c65a23cf781468598b84d1456d825fb" + "@id": "_:Nf284f365ba5c4e4da40d7d7900d82744" }, { - "@id": "_:N441c940eb087403188d7f17bd5a55a61" + "@id": "_:Nc9ddcdf86e874968aa8f5ba821975eb4" } ] }, { - "@id": "_:Nd3eb5f22c3be4e02942314bbb3d6fc3e", + "@id": "_:Nf284f365ba5c4e4da40d7d7900d82744", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -2492,19 +2232,26 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" } ] }, { - "@id": "_:N761b1b05ac5746c3b86d599c46526598", + "@id": "_:Nc9ddcdf86e874968aa8f5ba821975eb4", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -2515,175 +2262,222 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" } ] }, { - "@id": "_:Nec3642cffbce44abbfb1f66ffa74d5c1", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ] }, { - "@id": "_:N931242be4ac14a95b8ef51122ba2cf40", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "The Element is a single or a collection of source files." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + "@value": "source" } ] }, { - "@id": "_:Nada0379a8e6840aeab21269255f5c588", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + "@value": "foundBy" } ] }, { - "@id": "_:N15fc27df69c64453aa991097a3de803a", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "_:Nd78d72bd38c34a3c804f97f9e6b927a3", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@value": "critical" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + "@language": "en", + "@value": "Specifies the type of the content identifier." } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" } ] }, { - "@id": "_:N2c65a23cf781468598b84d1456d825fb", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@language": "en", + "@value": "The `from` Element contains each `to` Element." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@value": "test" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@value": "other" } ] }, { - "@id": "_:N441c940eb087403188d7f17bd5a55a61", - "http://www.w3.org/ns/shacl#class": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a map of a property names to a values." + "@value": "Property describing the start time of a build." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" @@ -2691,17 +2485,17 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + "@value": "A reference to a static analysis report for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "vulnerabilityDisclosureReport" + "@value": "staticAnalysisReport" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -2709,12 +2503,12 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies a data package and its associated information." + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -2724,133 +2518,95 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N150b1880a8e64af2af56beec5b8f629e" - }, - { - "@id": "_:Na9d0fc4b8c454d308184549fca9959b6" - }, - { - "@id": "_:Necfb795205bb49a69ffa1a569c48717a" - }, - { - "@id": "_:Na4175476fbca48768ff989c226c9a147" - }, - { - "@id": "_:Nbfec05fc44f6435dbdeeb9f608a28e4c" - }, - { - "@id": "_:Ne1476e00df5f4847a5f13d26ed774a56" - }, - { - "@id": "_:Nfdf2a70978294bcebad4f299b134dc99" - }, - { - "@id": "_:N61bad2d32f474f829df8b09e757aec59" - }, - { - "@id": "_:Na108e2b1e33249d1a7c16ae86469a51b" - }, - { - "@id": "_:N28c8fedea4324ffa8c41338d5fae0fe5" - }, - { - "@id": "_:N1f599cc99ec04100bcd965c2ec4fdbfe" - }, - { - "@id": "_:Nfd60dc4acf8f405b86d3ebb119d8edeb" - }, - { - "@id": "_:Nd73c665e4d964b40be2d12cdc7ab7fa2" + "@id": "_:N963f7603cd844b03bd4631e0713b1635" } ] }, { - "@id": "_:N150b1880a8e64af2af56beec5b8f629e", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N963f7603cd844b03bd4631e0713b1635", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" } ] }, { - "@id": "_:Na9d0fc4b8c454d308184549fca9959b6", - "http://www.w3.org/ns/shacl#class": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." } ], - "http://www.w3.org/ns/shacl#in": [ + "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" - } - ] + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionElement" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "A tuple of two positive integers that define a range." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#property": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + "@id": "_:N80dac4ea19f44488ae2dc09ba1429116" + }, + { + "@id": "_:Nf44042158d4d4c85a5bd6a0fcb538498" } ] }, { - "@id": "_:Necfb795205bb49a69ffa1a569c48717a", + "@id": "_:N80dac4ea19f44488ae2dc09ba1429116", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" - } - ] - }, - { - "@id": "_:Na4175476fbca48768ff989c226c9a147", - "http://www.w3.org/ns/shacl#datatype": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -2860,86 +2616,82 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" } ] }, { - "@id": "_:Nbfec05fc44f6435dbdeeb9f608a28e4c", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Nf44042158d4d4c85a5bd6a0fcb538498", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" } ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" - } - ] + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" } ] }, { - "@id": "_:Ne1476e00df5f4847a5f13d26ed774a56", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#property": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + "@id": "_:N763c69315ee040a88ca27b5205984626" + }, + { + "@id": "_:Na96bc2776ef4488595f136d0fbac26a6" } ] }, { - "@id": "_:Nfdf2a70978294bcebad4f299b134dc99", + "@id": "_:N763c69315ee040a88ca27b5205984626", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -2950,360 +2702,249 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" } ] }, { - "@id": "_:N61bad2d32f474f829df8b09e757aec59", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Na96bc2776ef4488595f136d0fbac26a6", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" - } - ] + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" } ] }, { - "@id": "_:Na108e2b1e33249d1a7c16ae86469a51b", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "http://www.w3.org/2001/XMLSchema#string" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + "@value": "republishedBy" } ] }, { - "@id": "_:N28c8fedea4324ffa8c41338d5fae0fe5", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" - } - ] + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "other" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "A reference to an alternative download location." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + "@value": "altDownloadLocation" } ] }, { - "@id": "_:N1f599cc99ec04100bcd965c2ec4fdbfe", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" - } - ] - }, - { - "@id": "_:Nfd60dc4acf8f405b86d3ebb119d8edeb", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" - } - ] - }, - { - "@id": "_:Nd73c665e4d964b40be2d12cdc7ab7fa2", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + "@value": "cwe" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + "@value": "An individual human being." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N293889ce0f674698af83932fc5a7b302" - } - ] - }, - { - "@id": "_:N293889ce0f674698af83932fc5a7b302", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 2 + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" - } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes if any sensitive personal information is present in the dataset." + "@value": "Specifies the exploit catalog type." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the type of an annotation." + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "md6" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element contains each `to` Element." + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "contains" + "@value": "securityThreatModel" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + "@value": "The file represents a single file (default)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "gitoid" + "@value": "file" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + "@value": "Captures the domain in which the AI package can be used." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ @@ -3313,136 +2954,108 @@ ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "noSupport" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Specifies the type of an external identifier." + "@value": "scrapingScript" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the value of the content identifier." + "@value": "The `from` Element has been trained on the `to` Element(s)." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@value": "trainedOn" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the time when a vulnerability was published." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@value": "Categories of presence or absence." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Timestamp of impact statement." + "@value": "A License participating in a 'with addition' model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "usesTool" + "@value": "deployed" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + "@value": "Any other units of energy measurement." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "swhid" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Specifies the type of an external reference." + "@value": "other" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -3450,130 +3063,126 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A mathematically calculated representation of a grouping of data." + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Nb7591bd67efe44909d92824106c3b13d" + "@id": "_:N7c9974a53d5443c5831f3e7dc56073d0" + }, + { + "@id": "_:N4881d1614aa0403894d16c3ca276d790" }, { - "@id": "_:Nb3c96ed9edf047408c12db5df1daaf43" + "@id": "_:Nfe1814d375d7456e843deb8cde1cf341" + }, + { + "@id": "_:Nd33af007bad14a4594f7039df1c5df75" + }, + { + "@id": "_:Nbbbec88245754e9d9390b9a11f0b67c2" + }, + { + "@id": "_:Nd77657e0b19d459c931f64f48ed7e1a6" + }, + { + "@id": "_:N73f9586a8a7d4b978afcb9cfe998050b" } ] }, { - "@id": "_:Nb7591bd67efe44909d92824106c3b13d", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:N7c9974a53d5443c5831f3e7dc56073d0", + "http://www.w3.org/ns/shacl#message": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "@language": "en", + "@value": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition is an abstract class and should not be instantiated directly. Instantiate a subclass instead." } ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/ns/shacl#not": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" - } - ] + "@id": "_:N8358def5fd2b4668b759d786315e799f" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" + } + ] + }, + { + "@id": "_:N8358def5fd2b4668b759d786315e799f", + "http://www.w3.org/ns/shacl#hasValue": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "_:N4881d1614aa0403894d16c3ca276d790", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:Nfe1814d375d7456e843deb8cde1cf341", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" } ] }, { - "@id": "_:Nb3c96ed9edf047408c12db5df1daaf43", + "@id": "_:Nd33af007bad14a4594f7039df1c5df75", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -3581,11 +3190,31 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nbbbec88245754e9d9390b9a11f0b67c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -3596,53 +3225,107 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@id": "_:Nd77657e0b19d459c931f64f48ed7e1a6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N73f9586a8a7d4b978afcb9cfe998050b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is a software framework" + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "framework" + "@value": "categorical" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + "@value": "Provides information about the type of an SBOM." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], - "http://www.w3.org/2002/07/owl#sameAs": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement" + "@value": "graph" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" @@ -3650,87 +3333,105 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Used when the type does not match any of the other options." + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "other" + "@value": "gitoid" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "scrapingScript" + "@value": "hasEvidence" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + "@value": "The second-highest level of risk posed by an AI system." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "hasInput" + "@value": "high" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides the location of an external reference." + "@value": "data type is not known." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "noAssertion" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -3738,130 +3439,111 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Nc034445fd507418d8439a09bb2e562dc" + "@id": "_:N825f749765e348a0abfef75f63c1588a" }, { - "@id": "_:N069fdf6673d440b8ab54670ad7906662" + "@id": "_:Nf9bf03371d92462f91a54baa946fd625" + }, + { + "@id": "_:Nc6d18260ddfa478b84c2dc19c2059aa2" } ] }, { - "@id": "_:Nc034445fd507418d8439a09bb2e562dc", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N825f749765e348a0abfef75f63c1588a", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" } ] }, { - "@id": "_:N069fdf6673d440b8ab54670ad7906662", + "@id": "_:Nf9bf03371d92462f91a54baa946fd625", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" - } - ], - "http://www.w3.org/ns/shacl#in": [ - { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" - } - ] + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" } ], "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:Nc6d18260ddfa478b84c2dc19c2059aa2", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Specifies the time an artifact was released." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "A value used in a generic key-value pair." + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -3869,118 +3551,36 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "An SPDX version 2.X compatible verification method for software packages." + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Ne0cb74aabc9c4794b4d9319b9a1fe42b" - }, - { - "@id": "_:N80091d0c87724fbf9c10267c2549575d" - }, - { - "@id": "_:N6a9c7fd96f82444aac9a3bae9894656b" + "@id": "_:Ne81afbff18a74c75ac853da24ab327a0" } ] }, { - "@id": "_:Ne0cb74aabc9c4794b4d9319b9a1fe42b", + "@id": "_:Ne81afbff18a74c75ac853da24ab327a0", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" - } - ], - "http://www.w3.org/ns/shacl#in": [ - { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" - } - ] - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#minCount": [ { - "@value": 1 + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -3990,86 +3590,89 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" } ] }, { - "@id": "_:N80091d0c87724fbf9c10267c2549575d", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#property": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" - } - ] - }, - { - "@id": "_:N6a9c7fd96f82444aac9a3bae9894656b", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:Nbac401e4be1249dd86dd149952baf59b" + }, { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "@id": "_:Nff33e8337dc8421d9e74b338e35a75d5" + }, { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ + "@id": "_:N61b9a25cae674e199ce6572456d8e72f" + }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + "@id": "_:N00fcf1f501a749fc9cbbdbdf23a7aaa8" + }, + { + "@id": "_:N7a66c734ced842b4913ff95c5f5cf452" + }, + { + "@id": "_:Nc3c21678fc9a459784f054a6954a9aa8" + }, + { + "@id": "_:N269b628c85f04f5d8a10fa3c500745a4" + }, + { + "@id": "_:N675847984777421d9fb9b171cdf0bb53" + }, + { + "@id": "_:N951ec4cbce414b3bab847840bf18d59f" + }, + { + "@id": "_:Nf26016059c3e414da185e30155b543f5" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Nbac401e4be1249dd86dd149952baf59b", + "http://www.w3.org/ns/shacl#message": [ { "@language": "en", - "@value": "A collection of Elements that have a shared context." + "@value": "https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead." } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#not": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + "@id": "_:N5bda6a3731444310990a06326743f6aa" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" } - ], - "http://www.w3.org/ns/shacl#property": [ + ] + }, + { + "@id": "_:N5bda6a3731444310990a06326743f6aa", + "http://www.w3.org/ns/shacl#hasValue": [ { - "@id": "_:N18ed9985cff84e34807e6aa0a780a707" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { - "@id": "_:N18ed9985cff84e34807e6aa0a780a707", + "@id": "_:Nff33e8337dc8421d9e74b338e35a75d5", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -4077,6 +3680,7 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -4087,44 +3691,36 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass", - "http://www.w3.org/ns/shacl#NodeShape" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N61b9a25cae674e199ce6572456d8e72f", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Asbtract ancestor class for all VEX relationships" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Neb11974d792545bab359067d0609d8ef" - }, + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:N097b38569ab54334ba50aa2055c21bf9" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" } ] }, { - "@id": "_:Neb11974d792545bab359067d0609d8ef", + "@id": "_:N00fcf1f501a749fc9cbbdbdf23a7aaa8", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -4132,6 +3728,7 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -4142,12 +3739,12 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" } ] }, { - "@id": "_:N097b38569ab54334ba50aa2055c21bf9", + "@id": "_:N7a66c734ced842b4913ff95c5f5cf452", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -4155,6 +3752,7 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -4165,416 +3763,380 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:Nc3c21678fc9a459784f054a6954a9aa8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "A name used in a CdxExtension name-value pair." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Specifies the version of a VEX statement." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "@id": "_:N269b628c85f04f5d8a10fa3c500745a4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "the Element provides a requirement needed as input for another Element" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "requirement" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:N675847984777421d9fb9b171cdf0bb53", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Describes methods that can be used to explain the results from the AI model." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:N951ec4cbce414b3bab847840bf18d59f", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Represents the energy quantity." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:Nf26016059c3e414da185e30155b543f5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "graph" + "@value": "md4" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provide context for a relationship that occurs in the lifecycle." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@value": "the element follows the Core profile specification" } ], - "http://www.w3.org/ns/shacl#property": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "_:Nf32238231fca45f1ac5221bd1ecd220c" + "@value": "core" } ] }, { - "@id": "_:Nf32238231fca45f1ac5221bd1ecd220c", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" - } - ] + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "crystalsDilithium" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "diskImage" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + "@value": "Describes methods that can be used to explain the results from the AI model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Used when someone reviews the Element." + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "review" + "@value": "amber" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + "@value": "A reference to a version control system related to a software artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "affects" + "@value": "vcs" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides additional purpose information of the software artifact." + "@value": "A reference to the instant messaging system used by the maintainer for a package." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "@value": "chat" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A relationship has specific context implications during the execution phase of an element." + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "runtime" + "@value": "securityPolicy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + "@value": "securityAdvisory" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A license addition that is not listed on the SPDX Exceptions List." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes a sensor used for collecting the data." + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A software agent." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@value": "Specifies the exploit catalog type." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes potentially noisy elements of the dataset." + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "timeseries" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + "@value": "Specifies the version of a VEX statement." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ @@ -4584,112 +4146,59 @@ ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides an EPSS assessment for a vulnerability." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N9d46caf53cc94a77812c6af4cd5653dd" - }, - { - "@id": "_:N8e8fa340313748a7b459ba889204f2c1" - } - ] - }, - { - "@id": "_:N9d46caf53cc94a77812c6af4cd5653dd", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "_:N8e8fa340313748a7b459ba889204f2c1", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + "@value": "low" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3." + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "swid" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" @@ -4697,34 +4206,35 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is an archived collection of one or more files (.tar, .zip, etc)" + "@value": "The Element is a software library." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "archive" + "@value": "library" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Defines the original host file that the snippet information applies to." + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + "@value": "diskImage" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -4732,12 +4242,12 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + "@value": "Specifies a data package and its associated information." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -4747,25 +4257,53 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Nff63d22b8dc54a40a1754583641b37f3" + "@id": "_:N78c7513398064da1a55c5df1b3c96444" + }, + { + "@id": "_:N00d83dee7aa44a7991821a46e83e5164" + }, + { + "@id": "_:Nb4381a5cee3143a482af28cf9a364f3c" + }, + { + "@id": "_:Na42e3794f624483e818646ed683c5ba2" + }, + { + "@id": "_:Na267e7b88a344e4fbd0c59a6dc760e65" + }, + { + "@id": "_:N66b43817d95d4468bf805207af159230" + }, + { + "@id": "_:N034bf868068348fb92f2f33976cad5ae" + }, + { + "@id": "_:N8adbab8e05cf4258a0b7e9eedbd03e5f" + }, + { + "@id": "_:N95b6da49b56e4298924cd2f153f00905" + }, + { + "@id": "_:Ndb06ff981cef4e94bfdbec22badacd4d" + }, + { + "@id": "_:N6eb9ec15081f404a99935ff4e2aaa14b" + }, + { + "@id": "_:Nf0752cee7bef48efaa39267516a6b21a" }, { - "@id": "_:N2fa63ba2278342bb9c50f3eea6a8c45f" + "@id": "_:N2a72f2e0c3d44dd5ac4c0633f336d556" } ] }, { - "@id": "_:Nff63d22b8dc54a40a1754583641b37f3", + "@id": "_:N78c7513398064da1a55c5df1b3c96444", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" @@ -4773,923 +4311,913 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" } ] }, { - "@id": "_:N2fa63ba2278342bb9c50f3eea6a8c45f", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N00d83dee7aa44a7991821a46e83e5164", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/ns/shacl#in": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Nb4381a5cee3143a482af28cf9a364f3c", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": "hasOutput" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:Na42e3794f624483e818646ed683c5ba2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Specifies the exploit catalog type." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Na267e7b88a344e4fbd0c59a6dc760e65", + "http://www.w3.org/ns/shacl#class": [ { - "@language": "en", - "@value": "Defines the beginning of a range." + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#in": [ { - "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "A reference to the mailing list used by the maintainer for a package." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "mailingList" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N66b43817d95d4468bf805207af159230", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": "limitedSupport" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "The percentile of the current probability score." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N034bf868068348fb92f2f33976cad5ae", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": "sensor" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "nuget" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:N8adbab8e05cf4258a0b7e9eedbd03e5f", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#in": [ { - "@language": "en", - "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "A reference to funding information related to a package." + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "funding" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N95b6da49b56e4298924cd2f153f00905", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": "availableFrom" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "The `from` Element is modified by each `to` Element." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "modifiedBy" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "@id": "_:Ndb06ff981cef4e94bfdbec22badacd4d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#in": [ { - "@language": "en", - "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3." + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": "adler32" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Provides information about the completeness of relationships." + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/", - "@type": [ - "http://www.w3.org/2002/07/owl#Ontology" - ], - "http://purl.org/dc/terms/abstract": [ + "@id": "_:N6eb9ec15081f404a99935ff4e2aaa14b", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://purl.org/dc/terms/created": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@type": "http://www.w3.org/2001/XMLSchema#date", - "@value": "2024-04-05" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://purl.org/dc/terms/creator": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "SPDX Project" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://purl.org/dc/terms/license": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" } - ], - "http://purl.org/dc/terms/references": [ + ] + }, + { + "@id": "_:Nf0752cee7bef48efaa39267516a6b21a", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.dev/specifications/" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://purl.org/dc/terms/title": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "System Package Data Exchange (SPDX) Ontology" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@language": "en", - "@value": "System Package Data Exchange (SPDX) Ontology" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N2a72f2e0c3d44dd5ac4c0633f336d556", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], - "http://www.w3.org/2002/07/owl#versionIRI": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + "http://www.w3.org/ns/shacl#path": [ { - "@language": "en", - "@value": "Copyright (C) 2024 SPDX Project" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + "@value": "A License participating in an 'or later' model." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "hasSpecification" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to the security adversary model for a package." + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "securityAdversaryModel" + "@value": "act" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "hasOptionalComponent" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + "@value": "A license that is listed on the SPDX License List." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": "securityThreatModel" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Indicates the type of support that is associated with an artifact." + "@id": "http://www.w3.org/ns/shacl#IRI" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#property": [ { - "@language": "en", - "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "@id": "_:Ndaeba75fb43b4db7b777e9b00ecd7064" + }, { - "@value": "vulnerableCodeNotInExecutePath" + "@id": "_:Nadd5d6fa295c47ee82d49e5fde059110" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Ndaeba75fb43b4db7b777e9b00ecd7064", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "hasDistributionArtifact" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Nadd5d6fa295c47ee82d49e5fde059110", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Describes relevant information about different steps of the training process." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "hasVariant" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A substitute for a URI." + "@value": "Captures the size of the dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element generates each `to` Element." + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "generates" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + "@value": "Other exploit catalogs" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "other" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Element represents a runtime environment" + "@value": "Used when the type does not match any of the other options." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "platform" + "@value": "other" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + "@value": "the element follows the Software profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "support" + "@value": "software" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is a module of a piece of software" + "@value": "The `from` archive expands out as an artifact described by each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "module" + "@value": "expandsTo" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + "@value": "A license exception that is listed on the SPDX Exceptions list." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": "deployed" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#property": [ { - "@value": "deployed" + "@id": "_:N7c7a260c778e4d4491ba75a0fe083ebe" + }, + { + "@id": "_:N5011f0cdb4544a70b796520ecd436a25" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N7c7a260c778e4d4491ba75a0fe083ebe", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:N5011f0cdb4544a70b796520ecd436a25", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference build metadata related to a published package." + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "buildMeta" + "@value": "affects" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the type of the external identifier." + "@value": "Records the measurement of prediction quality of the AI model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A key with an associated value." - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@value": "The Element refers to a chipset, processor, or electronic board." } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Ne7755fef413944e6a5bd969d379e8410" - }, + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "_:Nea611e5c42f94004b40d78331b3f6977" + "@value": "device" } ] }, { - "@id": "_:Ne7755fef413944e6a5bd969d379e8410", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "hasDistributionArtifact" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + "@value": "limitedSupport" } ] }, { - "@id": "_:Nea611e5c42f94004b40d78331b3f6977", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + "@value": "securityOther" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "invokedBy" + "@value": "trackStar" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + "@value": "Describes the type of the given dataset." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "cwe" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + "@value": "data is of a type not included in this list." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "registration" + "@value": "other" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "No assertion can be made about the completeness of the relationship." + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "noAssertion" + "@value": "hasSpecification" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Makes no assertion about the field." + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "noAssertion" + "@value": "hasOptionalComponent" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" @@ -5697,82 +5225,72 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/)." + "@value": "[Kyber](https://pq-crystals.org/kyber/)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "md2" + "@value": "crystalsKyber" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@value": "Specifies the safety risk level." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the dataset is publicly available and can be downloaded directly." + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "directDownload" + "@value": "hasTestCase" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to an artifact containing the sources for a package." + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo": [ { - "@value": "sourceArtifact" + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_NoneElement" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The version of the SPDX License List used in the license expression." + "@value": "Captures a standard that is being complied with." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ @@ -5782,31 +5300,32 @@ ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "eolNotice" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Property describes the invocation entrypoint of a build." + "@value": "Provides a detailed description of the Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ @@ -5816,220 +5335,204 @@ ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to an alternative web page." + "@value": "The Element is an operating system." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "altWebPage" + "@value": "operatingSystem" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to metrics related to package such as OpenSSF scorecards." + "@value": "The software is not affected because the vulnerable component is not in the product." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "metrics" + "@value": "componentNotPresent" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies whether an additional text identifier has been marked as deprecated." + "@value": "Describes the anonymization methods used." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Enumeration of dataset types." - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "A reference to a quality assessment for a package." + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "qualityAssessmentReport" + "@value": "other" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Dataset may be distributed freely, without restriction." + "@value": "the element follows the Security profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "clear" + "@value": "security" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + "@value": "The `from` Element is a descendant of each `to` Element." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "descendantOf" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + "@value": "The Element represents a runtime environment." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "describes" + "@value": "platform" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "References the Element on the left-hand side of a relationship." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@value": "Categories of confidentiality level." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + "@value": "Indicates presence of the field." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "bower" + "@value": "yes" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + "@value": "the element follows the SimpleLicensing profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "attend" + "@value": "simpleLicensing" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Records the biases that the dataset is known to encompass." + "@value": "Identifies the full text of a License, in SPDX templating format." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ @@ -6039,207 +5542,190 @@ ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Identifies from where or whom the Element originally came." + "@value": "the element follows the Lite profile specification" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + "@value": "lite" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "When a CVSS score is between 4.0 - 6.9" + "@value": "Refers to one or more Elements that are part of an ElementCollection." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "medium" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The file represents a directory and all content stored in that directory." + "@value": "No assertion can be made about the completeness of the relationship." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "directory" + "@value": "noAssertion" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A group of people who work together in an organized way for a shared purpose." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@value": "Specifies the type of an external identifier." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "data is stored in tabular format or retrieved from a relational database." + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "structured" + "@value": "analyzed" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + "@value": "Provides a CVSS version 4 assessment for a vulnerability." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": "hasExample" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "The `from` Element is documented by each `to` Element." + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#property": [ { - "@value": "hasDocumentation" + "@id": "_:N4382805b6a5947d38ffcfd8b182bddbf" + }, + { + "@id": "_:N4278c3d777ea4ebd81cd23af80459c2d" + }, + { + "@id": "_:N58c62d134f5e41d78440946685ecf0cc" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "@id": "_:N4382805b6a5947d38ffcfd8b182bddbf", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@value": "text" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "the element follows the Dataset profile specification" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "dataset" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "@id": "_:N4278c3d777ea4ebd81cd23af80459c2d", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/ns/shacl#in": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -6247,195 +5733,207 @@ "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/ns/shacl#property": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:Ndfeaf41c217c4e0c8c442c54949d7e6a" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" } ] }, { - "@id": "_:Ndfeaf41c217c4e0c8c442c54949d7e6a", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:N58c62d134f5e41d78440946685ecf0cc", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "inlineMitigationsAlreadyExist" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Records the type of the model used in the AI software." + "@value": "A collection of Elements that have a shared context." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Identifies the full text of a License or Addition." + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#property": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "_:N63f963c2c8a4467bb803f9af7eaafd3d" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Identifies the name of an Element as designated by the creator." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "@id": "_:N63f963c2c8a4467bb803f9af7eaafd3d", + "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "hasAddedFile" + "@id": "http://www.w3.org/ns/shacl#Literal" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#path": [ { - "@language": "en", - "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "@type": [ "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass" + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Abstract class representing a License or an OrLaterOperator." + "@value": "Specifies an AI package and its associated information." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#property": [ { - "@language": "en", - "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "@id": "_:N8bdb3da6da754d98843024e1dcbe3e43" + }, { - "@value": "query" + "@id": "_:N329ecc1447f349cc968623ddffe6a2f7" + }, + { + "@id": "_:Nd385c846dfa14371a0a3697f7168b4c1" + }, + { + "@id": "_:N786a3eaa8fbe4cf0bb67c4e086fa8b5b" + }, + { + "@id": "_:Nf41c7f62f52f4c10b14344ec13dfe1e5" + }, + { + "@id": "_:N024478cff6eb4ef48dc45dabdb7b0a35" + }, + { + "@id": "_:Nad909dcc4fad4339a9eb809fabd6a871" + }, + { + "@id": "_:N13acbf7806c648f19f147c9073a04385" + }, + { + "@id": "_:Nc63741a7112e471ba97ce37e05f2dac1" + }, + { + "@id": "_:N626b5ad29167479dabae9a9177315404" + }, + { + "@id": "_:Ncae19f1586924a439b37e75eb5b57ed4" + }, + { + "@id": "_:N9bd771ac02cc41519919a01d4deca105" + }, + { + "@id": "_:N576b7fbe3ba74572a6eb065c67761847" + }, + { + "@id": "_:N80dc66a1ccec469392596c5291fa2864" + }, + { + "@id": "_:Nccde3ac271484f91b83ed5fb2e1d70c9" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "@id": "_:N8bdb3da6da754d98843024e1dcbe3e43", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#in": [ { - "@language": "en", - "@value": "Provides a CVSS version 4 assessment for a vulnerability." + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -6443,97 +5941,98 @@ "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Ne4d0e63a8226430099ec09bd81396164" - }, - { - "@id": "_:N4d420b10df2e48ec90b7a163f5e7774c" - }, + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:N9dfffc9a0d064fbbb99f222927600262" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" } ] }, { - "@id": "_:Ne4d0e63a8226430099ec09bd81396164", + "@id": "_:N329ecc1447f349cc968623ddffe6a2f7", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": 1 + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:Nd385c846dfa14371a0a3697f7168b4c1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" } ] }, { - "@id": "_:N4d420b10df2e48ec90b7a163f5e7774c", + "@id": "_:N786a3eaa8fbe4cf0bb67c4e086fa8b5b", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" - } - ] + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:Nf41c7f62f52f4c10b14344ec13dfe1e5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" } ] }, { - "@id": "_:N9dfffc9a0d064fbbb99f222927600262", + "@id": "_:N024478cff6eb4ef48dc45dabdb7b0a35", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -6541,11 +6040,7 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -6556,175 +6051,93 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Nad909dcc4fad4339a9eb809fabd6a871", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Describes how the dataset was collected." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "When a CVSS score is between 0.1 - 3.9" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "low" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ - { - "@value": "timeseries" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "A reference to a version control system related to a software artifact." - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "@id": "_:N13acbf7806c648f19f147c9073a04385", + "http://www.w3.org/ns/shacl#class": [ { - "@value": "vcs" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "crystalsDilithium" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Element contains a set of changes to update, fix, or improve another Element" - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "@id": "_:Nc63741a7112e471ba97ce37e05f2dac1", + "http://www.w3.org/ns/shacl#class": [ { - "@value": "patch" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Provides information about the type of an SBOM." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N626b5ad29167479dabae9a9177315404", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "A tuple of two positive integers that define a range." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N659a17727ec34fe487d556cc5ed935fa" - }, + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:Na168e6a25ca4415aa927f2d16152226c" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" } ] }, { - "@id": "_:N659a17727ec34fe487d556cc5ed935fa", + "@id": "_:Ncae19f1586924a439b37e75eb5b57ed4", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -6734,94 +6147,114 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" } ] }, { - "@id": "_:Na168e6a25ca4415aa927f2d16152226c", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N9bd771ac02cc41519919a01d4deca105", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#in": [ { - "@value": 1 + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + "@id": "_:N576b7fbe3ba74572a6eb065c67761847", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "runtime" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "@id": "_:N80dc66a1ccec469392596c5291fa2864", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/ns/shacl#property": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:Nf98babca843e446f8ddf5dee59296ef5" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" } ] }, { - "@id": "_:Nf98babca843e446f8ddf5dee59296ef5", + "@id": "_:Nccde3ac271484f91b83ed5fb2e1d70c9", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#in": [ { - "@value": 2 + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -6831,82 +6264,77 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + "@value": "The Element is a bill of materials." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + "@value": "bom" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A relationship has specific context implications during development phase of an element." + "@value": "A reference to additional product metadata such as reference within organization's product catalog." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "development" + "@value": "productMetadata" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + "@value": "A LicenseAddition participating in a 'with addition' model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ - { - "@value": "gitoid" + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -6914,83 +6342,51 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + "@value": "The `from` Element has been tested on the `to` Element(s)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "delegatedTo" + "@value": "testedOn" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "hasEvidence" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + "@value": "Specifies the type of the external reference." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "blake3" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "The highest level of risk posed by an AI system." - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ - { - "@value": "serious" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Categories of presence or absence." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -6998,237 +6394,227 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + "@value": "A type of extension consisting of a list of name value pairs." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N35cc536a7b8e4401b4f4e6b8982306e1" - }, - { - "@id": "_:Naee034377c334f78a3af1a4d25c3d468" - }, - { - "@id": "_:Nf2495df384ef4dfe9e42259508a5f433" + "@id": "_:N516b1b46dbb04f1c953906f0388bf8b4" } ] }, { - "@id": "_:N35cc536a7b8e4401b4f4e6b8982306e1", + "@id": "_:N516b1b46dbb04f1c953906f0388bf8b4", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" - } - ], - "http://www.w3.org/ns/shacl#in": [ - { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" - } - ] + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" } ] }, { - "@id": "_:Naee034377c334f78a3af1a4d25c3d468", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + "@language": "en", + "@value": "Specifies the type of an external reference." } ] }, { - "@id": "_:Nf2495df384ef4dfe9e42259508a5f433", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@value": "endOfSupport" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides an SSVC assessment for a vulnerability." + "@value": "Agent represents anything with the potential to act on a system." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], - "http://www.w3.org/ns/shacl#property": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "_:N8d911077b7fd4e4180299a09ca29ea53" + "@value": "documentation" } ] }, { - "@id": "_:N8d911077b7fd4e4180299a09ca29ea53", - "http://www.w3.org/ns/shacl#class": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." } ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" - } - ] + "@value": "mailingList" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "cpe22" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + "@value": "serializedInArtifact" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "data consists only of numeric entries." + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "numeric" + "@value": "hasDependencyManifest" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -7236,283 +6622,344 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A type of extension consisting of a list of name value pairs." + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N3b3c65b750eb401889ee9800adc1da9c" + "@id": "_:N47d32bc3b4e04c9ab083ec76d4f22585" } ] }, { - "@id": "_:N3b3c65b750eb401889ee9800adc1da9c", + "@id": "_:N47d32bc3b4e04c9ab083ec76d4f22585", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + "@value": "Property describes the invocation entrypoint of a build." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "cpe22" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes the anonymization methods used." + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "sensor" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element provides low level control over a device's hardware" + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "firmware" + "@value": "hasMetadata" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + "@value": "Identifies who or what created the Element." } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "The Element is a software manifest." } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N6cddf83b203740bbb3558b7474a07821" - }, - { - "@id": "_:N2305488d52f34ae3bd7f3de8a96329e4" - }, - { - "@id": "_:N62c446ad08764db680206dcd96bc8476" - }, - { - "@id": "_:N7476374ddf7c4c82a95e5a63b60e4e0e" - }, - { - "@id": "_:N6535885322084aa986c62f1ad80b3668" - }, - { - "@id": "_:N2895a64ec18c48e68dbf01572a5d0cc8" - }, - { - "@id": "_:N9832a681241a4a91bd95ecdfaa05670d" - }, - { - "@id": "_:N01b77c997a784a81856bfe55a59f0d26" - }, + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "_:N26117aef00804f4b9d67298a6fd9c1de" + "@value": "manifest" } ] }, { - "@id": "_:N6cddf83b203740bbb3558b7474a07821", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "configures" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + "@value": "cpe23" } ] }, { - "@id": "_:N2305488d52f34ae3bd7f3de8a96329e4", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "urlScheme" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + "@value": "evidence" } ] }, { - "@id": "_:N62c446ad08764db680206dcd96bc8476", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "track" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { - "@id": "_:N7476374ddf7c4c82a95e5a63b60e4e0e", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" + "@language": "en", + "@value": "A reference to an alternative web page." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "altWebPage" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" } ] }, { - "@id": "_:N6535885322084aa986c62f1ad80b3668", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "Property that describes the time at which a build stops." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#property": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + "@id": "_:Na1cdda0a73e94e598b769cac4a5a5cb8" + }, + { + "@id": "_:N904326509fc04cc4be66ea123ed9fdc4" } ] }, { - "@id": "_:N2895a64ec18c48e68dbf01572a5d0cc8", + "@id": "_:Na1cdda0a73e94e598b769cac4a5a5cb8", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -7523,281 +6970,259 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" } ] }, { - "@id": "_:N9832a681241a4a91bd95ecdfaa05670d", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N904326509fc04cc4be66ea123ed9fdc4", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/ns/shacl#in": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] } ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" - } - ] - }, - { - "@id": "_:N01b77c997a784a81856bfe55a59f0d26", - "http://www.w3.org/ns/shacl#datatype": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" } ] }, { - "@id": "_:N26117aef00804f4b9d67298a6fd9c1de", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to the software support channel or other support information for a package." + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "support" + "@value": "hasRequirement" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A key used in a generic key-value pair." + "@value": "References the Element on the left-hand side of a relationship." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the SSVC decision type." + "@value": "Enumeration of dataset types." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Identifies an external Element used within a Document but defined external to\nthat Document." + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@value": "deployed" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "data is a collection of images such as pictures of animals." + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "image" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The relationship is known to be exhaustive." + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "complete" + "@value": "archive" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element is an ancestor of each `to` Element." + "@value": "Provides a CVSS version 3 assessment for a vulnerability." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": "ancestorOf" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#property": [ { - "@value": "falcon" + "@id": "_:Nfcc30e48020d4dd2b3493a0cd55ea457" + }, + { + "@id": "_:Na449b0b56e3540618b2a2698204edde9" + }, + { + "@id": "_:N328adb4bb1ec422084a2169890188a03" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Nfcc30e48020d4dd2b3493a0cd55ea457", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + "@id": "http://www.w3.org/2001/XMLSchema#decimal" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "A collection of SPDX Elements describing a single package." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/ns/shacl#property": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:N74164e072d8147ca808c451ad6b5d980" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" } ] }, { - "@id": "_:N74164e072d8147ca808c451ad6b5d980", + "@id": "_:Na449b0b56e3540618b2a2698204edde9", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" } ] } ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" @@ -7805,352 +7230,291 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "@id": "_:N328adb4bb1ec422084a2169890188a03", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "The Element is a test used to verify functionality on an software element" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@value": "test" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + "@value": "Defines the original host file that the snippet information applies to." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_NoneElement", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element is amended by each `to` Element." + "@value": "This individual element was defined by the spec." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "https://spdx.org/rdf/3.0.1/terms/Core/created": [ { - "@value": "amendedBy" + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp", + "@value": "2024-11-22T03:00:01Z" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "https://spdx.org/rdf/3.0.1/terms/Core/createdBy": [ { - "@language": "en", - "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "https://spdx.org/rdf/3.0.1/terms/Core/specVersion": [ { - "@value": "publishedBy" + "@value": "3.0.1" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a social media channel for a package." + "@value": "The highest level of risk posed by an AI system." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "socialMedia" + "@value": "serious" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + "@value": "Defines the end of a range." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a CVSS version 3 assessment for a vulnerability." + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + "@value": "sha384" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Ne3895908b9eb4cf68888a0b70d8088ff" - }, - { - "@id": "_:Nad1212fd5ed241c891f8afc9235f406c" - }, + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "_:N67a7c2de8c574fb991ccc64346e1de56" + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" } ] }, { - "@id": "_:Ne3895908b9eb4cf68888a0b70d8088ff", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "_:Nad1212fd5ed241c891f8afc9235f406c", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" - } - ], - "http://www.w3.org/ns/shacl#in": [ - { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" - } - ] - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + "@value": "noAssertion" } ] }, { - "@id": "_:N67a7c2de8c574fb991ccc64346e1de56", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_SpdxOrganization", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + "@value": "This individual element was defined by the spec." } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "https://spdx.org/rdf/3.0.1/terms/Core/created": [ { - "@language": "en", - "@value": "Indicates presence of the field." + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp", + "@value": "2024-11-22T03:00:01Z" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "https://spdx.org/rdf/3.0.1/terms/Core/createdBy": [ { - "@value": "yes" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization" + } + ], + "https://spdx.org/rdf/3.0.1/terms/Core/specVersion": [ + { + "@value": "3.0.1" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "An element of hardware and/or software utilized to carry out a particular function." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@value": "Enumeration of the valid profiles." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321)." + "@value": "The result of applying a hash algorithm to an Element." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "md5" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The file represents a single file (default)." + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "file" + "@value": "swhid" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Conveys information about how VEX status was determined." + "@value": "A value used in a generic key-value pair." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ @@ -8160,42 +7524,41 @@ ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + "@value": "Specifies whether an additional text identifier has been marked as deprecated." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "sha3_256" + "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the type of the content identifier." + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -8203,207 +7566,189 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "hasDeclaredLicense" + "@value": "usesTool" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + "@value": "Provides an exploit assessment of a vulnerability." } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@language": "en", - "@value": "Provides the location for more information regarding an external identifier." + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N91d11db27b28462b8545b78734a27503" + }, + { + "@id": "_:N8e672d95ff7d48e68c1ed7ecf019b269" + }, + { + "@id": "_:Ne820a8ec67114d53b03a71f5f7be31f5" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N91d11db27b28462b8545b78734a27503", + "http://www.w3.org/ns/shacl#class": [ { - "@language": "en", - "@value": "A reference to related security information of unspecified type." + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#in": [ { - "@value": "securityOther" + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "the element follows the AI profile specification" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@value": "ai" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "foundBy" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + "@id": "_:N8e672d95ff7d48e68c1ed7ecf019b269", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "A relationship has specific context implications during an element's design." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@value": "design" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "the Element is a software application" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "application" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:Ne820a8ec67114d53b03a71f5f7be31f5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "hasProvidedDependency" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)." + "@value": "Low/no risk is posed by an AI system." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "sha256" + "@value": "low" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is a file system image that can be written to a disk (or virtual) partition" + "@value": "A reference to a social media channel for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "filesystemImage" + "@value": "socialMedia" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -8411,53 +7756,103 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A license that is listed on the SPDX License List." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N6e7150c4286149b7aa27ddf655625b5e" + "@id": "_:Nf71f6300b14a4726a20ffad899bed919" + }, + { + "@id": "_:Nbd14f0a1267744e89f6930e710689414" + }, + { + "@id": "_:Ne883dfda4a7445ceb1e70f39ddd03fea" + }, + { + "@id": "_:N0d09683a42354debacdd0b0625119609" }, { - "@id": "_:Ne14b54567e794b13a34acf8718d2ccf6" + "@id": "_:N13396ee366a94de388e2aff47754e81f" } ] }, { - "@id": "_:N6e7150c4286149b7aa27ddf655625b5e", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:Nf71f6300b14a4726a20ffad899bed919", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" } ] }, { - "@id": "_:Ne14b54567e794b13a34acf8718d2ccf6", + "@id": "_:Nbd14f0a1267744e89f6930e710689414", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -8465,6 +7860,13 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -8475,364 +7877,390 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Ne883dfda4a7445ceb1e70f39ddd03fea", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Identify the version of a package." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Specifies the algorithm used for calculating the hash value." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass", - "http://www.w3.org/ns/shacl#NodeShape" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Abstract ancestor class for all vulnerability assessments" - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "@id": "_:N0d09683a42354debacdd0b0625119609", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Ndaecf52053104527964b081f8f6d4dfe" - }, - { - "@id": "_:N9fc754cd17fe403b9e6567ff39e96ef5" - }, - { - "@id": "_:N28c546d9833444d7b7370a64f4274b1b" - }, - { - "@id": "_:Nf37cc853c16d47099115691bcb77f2e1" - }, + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:N5c307bac3b90460f8b755b5d46827013" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" } ] }, { - "@id": "_:Ndaecf52053104527964b081f8f6d4dfe", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:N13396ee366a94de388e2aff47754e81f", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" } ] }, { - "@id": "_:N9fc754cd17fe403b9e6567ff39e96ef5", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "The relationship is known not to be exhaustive." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@value": "incomplete" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@value": "md5" } ] }, { - "@id": "_:N28c546d9833444d7b7370a64f4274b1b", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + "@value": "sha3_256" } ] }, { - "@id": "_:Nf37cc853c16d47099115691bcb77f2e1", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@value": "syntactic" } ] }, { - "@id": "_:N5c307bac3b90460f8b755b5d46827013", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + "@language": "en", + "@value": "Describes how the dataset was collected." } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Availability of dataset." + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element has been tested on the `to` Element(s)." + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "testedOn" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the element follows the Core profile specification" + "@value": "The Element represents software that controls hardware devices." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "core" + "@value": "deviceDriver" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Captures the domain in which the AI package can be used." + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "hasTest" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10f5cc15b506459db381c02764d60e76" + }, + { + "@id": "_:N7a48123f699948b5867af1fec0d7b88e" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N10f5cc15b506459db381c02764d60e76", + "http://www.w3.org/ns/shacl#message": [ { "@language": "en", - "@value": "the Element is a software library" + "@value": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod is an abstract class and should not be instantiated directly. Instantiate a subclass instead." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#not": [ { - "@value": "library" + "@id": "_:Ne41f054fce23460dba46863153e67567" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:Ne41f054fce23460dba46863153e67567", + "http://www.w3.org/ns/shacl#hasValue": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "_:N7a48123f699948b5867af1fec0d7b88e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Identifies the tooling that was used during the creation of the Element." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the exploit catalog type." + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7676f1bbd99e47659502f87b9936453e" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:N7676f1bbd99e47659502f87b9936453e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#in": [ { - "@language": "en", - "@value": "Identifies who or what created the Element." + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -8840,17 +8268,17 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless)." + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "other" + "@value": "describes" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -8858,29 +8286,34 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "hasPrerequisite" + "@value": "packagedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the unit of energy consumption." + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -8888,67 +8321,95 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Nd677bc1745684cf98fb92f17a75ebd52" + "@id": "_:Ne70b85feb564419597741ca637d61d03" }, { - "@id": "_:N67fc6e9fc5d24eabb8543cdc669b1145" + "@id": "_:Nf5531d9c16ff4f589dff19f480634c29" }, { - "@id": "_:Nffd32d595d024069b6df3a1ef8da642a" + "@id": "_:N1647e706f6764e7d9ec4e0aa8979d0c6" } ] }, { - "@id": "_:Nd677bc1745684cf98fb92f17a75ebd52", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Ne70b85feb564419597741ca637d61d03", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" } ] }, { - "@id": "_:N67fc6e9fc5d24eabb8543cdc669b1145", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Nf5531d9c16ff4f589dff19f480634c29", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" } ] }, { - "@id": "_:Nffd32d595d024069b6df3a1ef8da642a", + "@id": "_:N1647e706f6764e7d9ec4e0aa8979d0c6", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -8958,47 +8419,48 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@value": "falcon" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a export control assessment for a package." + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "exportControlAssessment" + "@value": "other" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" @@ -9006,76 +8468,173 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to an alternative download location." + "@value": "A reference to additional license information related to an artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "altDownloadLocation" + "@value": "license" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionElement", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides an exploit assessment of a vulnerability." + "@value": "This individual element was defined by the spec." } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "https://spdx.org/rdf/3.0.1/terms/Core/created": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp", + "@value": "2024-11-22T03:00:01Z" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "https://spdx.org/rdf/3.0.1/terms/Core/createdBy": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization" } ], - "http://www.w3.org/ns/shacl#property": [ + "https://spdx.org/rdf/3.0.1/terms/Core/specVersion": [ { - "@id": "_:Nc642cb7cb5d441eaaa4a1fc86368d998" - }, + "@value": "3.0.1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "_:N3df9880d78624ddba1dd8e35a428b9c9" - }, + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "_:N8373dd8071e2429e95b3b0897bdab7de" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" } ] }, { - "@id": "_:Nc642cb7cb5d441eaaa4a1fc86368d998", - "http://www.w3.org/ns/shacl#class": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." } ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" - } - ] + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -9083,141 +8642,147 @@ "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#property": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + "@id": "_:Nc51fb19223644705a84f646344b7e9d3" + }, + { + "@id": "_:N163fe4499b2a454a9641b23118bf53ae" } ] }, { - "@id": "_:N3df9880d78624ddba1dd8e35a428b9c9", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:Nc51fb19223644705a84f646344b7e9d3", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" } ] }, { - "@id": "_:N8373dd8071e2429e95b3b0897bdab7de", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N163fe4499b2a454a9641b23118bf53ae", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + "@value": "Identifies the name of an Element as designated by the creator." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "endOfSupport" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Any other units of energy measurement." + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "other" + "@value": "hasHost" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is a software manifest" + "@value": "References an Element on the right-hand side of a relationship." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "manifest" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the time from which an element is no longer applicable / valid." + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@value": "sha512" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -9225,107 +8790,180 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "hasHost" + "@value": "hasPrerequisite" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + "@value": "A mathematically calculated representation of a grouping of data." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": "hasDynamicLink" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "A relationship has specific context implications during an element's testing phase, during development." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#property": [ { - "@value": "test" + "@id": "_:N4e4b35788e1b4064b856bcd8d2cc6670" + }, + { + "@id": "_:Naf01116eff7c4759be95f8f97c257d9c" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "@id": "_:N4e4b35788e1b4064b856bcd8d2cc6670", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#in": [ { - "@language": "en", - "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": "hasRequirement" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@language": "en", - "@value": "A reference to a certification report for a package from an accredited/independent body." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "certificationReport" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "@id": "_:Naf01116eff7c4759be95f8f97c257d9c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@value": "timestamp" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -9333,12 +8971,12 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes a relationship between one or more elements." + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -9348,334 +8986,176 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Ne8b93e1651f84d5f8ff94e4b82012f07" + "@id": "_:N72dd028519c2443b94229cfc4a2639bc" + }, + { + "@id": "_:Ne778a773be4f408192f2ed37c6143a5d" }, { - "@id": "_:Na62fed341d814dc8ac95b17410dd06e9" + "@id": "_:Nc7f12b88e8f5489dacbbfeb81192696a" }, { - "@id": "_:N6dd024b62af74fb5a94391f7343f1c79" + "@id": "_:Nc37985fef6884679b49d387a2ef08d3f" }, { - "@id": "_:Nf39729cdf1294ea88879ccd16e468339" + "@id": "_:N4b7945a329d940d7a4167237a4e60e53" }, { - "@id": "_:Nf4064e5c7fb84a899bffb14df5844894" + "@id": "_:N79e0fdc8a753446e8e1931aab90b02ae" }, { - "@id": "_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd" + "@id": "_:Na3b27046864941989a486e5a70e0edb4" + }, + { + "@id": "_:Ndde9f898797c42b989ef522557debf64" + }, + { + "@id": "_:N5e678b3ba38745b58c0103b8e085d5c8" + }, + { + "@id": "_:Nd3d538fe1cb544b5808c51dffd844c81" } ] }, { - "@id": "_:Ne8b93e1651f84d5f8ff94e4b82012f07", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:N72dd028519c2443b94229cfc4a2639bc", + "http://www.w3.org/ns/shacl#message": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@language": "en", + "@value": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License is an abstract class and should not be instantiated directly. Instantiate a subclass instead." + } + ], + "http://www.w3.org/ns/shacl#not": [ + { + "@id": "_:N0a961d271f304c8cbb2e0a1307a9d8ad" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" + } + ] + }, + { + "@id": "_:N0a961d271f304c8cbb2e0a1307a9d8ad", + "http://www.w3.org/ns/shacl#hasValue": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "_:Ne778a773be4f408192f2ed37c6143a5d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" } ] }, { - "@id": "_:Na62fed341d814dc8ac95b17410dd06e9", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Nc7f12b88e8f5489dacbbfeb81192696a", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" } ] }, { - "@id": "_:N6dd024b62af74fb5a94391f7343f1c79", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Nc37985fef6884679b49d387a2ef08d3f", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ], - "http://www.w3.org/ns/shacl#in": [ - { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" - } - ] - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" } ] }, { - "@id": "_:Nf39729cdf1294ea88879ccd16e468339", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" - } - ], - "http://www.w3.org/ns/shacl#in": [ + "@id": "_:N4b7945a329d940d7a4167237a4e60e53", + "http://www.w3.org/ns/shacl#datatype": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" - } - ] + "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" } ] }, { - "@id": "_:Nf4064e5c7fb84a899bffb14df5844894", + "@id": "_:N79e0fdc8a753446e8e1931aab90b02ae", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -9686,24 +9166,20 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" - } - ], - "http://www.w3.org/ns/shacl#pattern": [ - { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" } ] }, { - "@id": "_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd", + "@id": "_:Na3b27046864941989a486e5a70e0edb4", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -9714,241 +9190,243 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" - } - ], - "http://www.w3.org/ns/shacl#pattern": [ - { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "@id": "_:Ndde9f898797c42b989ef522557debf64", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "packageUrl" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:N5e678b3ba38745b58c0103b8e085d5c8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Provides an ExternalMap of Element identifiers." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Nd3d538fe1cb544b5808c51dffd844c81", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "The `from` Element has been trained on the `to` Element(s)." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": "trainedOn" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Captures a standard that is being complied with." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + "@value": "A reference to a published list of releases for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "source" + "@value": "releaseHistory" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + "@value": "An element of hardware and/or software utilized to carry out a particular function." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": "securityPenTestReport" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "cpe23" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3b695bebf32746039b555b8460ffe552" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N3b695bebf32746039b555b8460ffe552", + "http://www.w3.org/ns/shacl#message": [ { "@language": "en", - "@value": "the Element is a plan, guideline or strategy how to create, perform or analyse an application" + "@value": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension is an abstract class and should not be instantiated directly. Instantiate a subclass instead." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#not": [ { - "@value": "specification" + "@id": "_:Nb8a14d0c45314542aa2d6a98232399be" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@id": "_:Nb8a14d0c45314542aa2d6a98232399be", + "http://www.w3.org/ns/shacl#hasValue": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies a time when a vulnerability assessment was modified" + "@value": "Specifies an Extension characterization of some aspect of an Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes if a given file is a directory or non-directory kind of file." + "@value": "The `from` Element is amended by each `to` Element." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + "@value": "amendedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" - } - ], - "http://www.w3.org/2002/07/owl#sameAs": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a purchase order for a package." + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "purchaseOrder" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the CVSS vector string for a vulnerability." + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ @@ -9958,25 +9436,24 @@ ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element is a descendant of each `to` Element." + "@value": "Describes if any sensitive personal information is present in the dataset." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "descendantOf" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -9984,29 +9461,30 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "patchedBy" + "@value": "hasDeletedFile" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes the type of the given dataset." + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "@value": "vulnerableCodeCannotBeControlledByAdversary" } ] }, @@ -10029,531 +9507,387 @@ ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + "@value": "A property name with an associated value." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "secureSoftwareAttestation" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na92e8ceda7e548bb9a144c2e9c857639" + }, + { + "@id": "_:N2056bd91659a4260a6eb99a0cbdd9f14" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + "@id": "_:Na92e8ceda7e548bb9a144c2e9c857639", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "the element follows the Extension profile specification" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@value": "extension" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "The relationship is known not to be exhaustive." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "incomplete" + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:N2056bd91659a4260a6eb99a0cbdd9f14", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides information about the creation of the Element." + "@value": "The Element is a module of a piece of software." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + "@value": "module" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Megajoule." + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "megajoule" + "@value": "vulnerabilityExploitabilityAssessment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + "@value": "Describes a mechanism to update the dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "vulnerableCodeNotPresent" + "@value": "underInvestigationFor" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Enumeration of the different kinds of SPDX file." + "@value": "Provides information about the primary purpose of an Element." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is used to install software on disk" + "@value": "the element follows the Build profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "install" + "@value": "build" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a static analysis report for a package." + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "staticAnalysisReport" + "@value": "attend" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + "@value": "A relationship has specific context implications during an element's build phase, during development." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "trackStar" + "@value": "build" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N4477c4b31f20446998b8dff00cd309b3" - }, - { - "@id": "_:N065968ff4b1d468f80d208a94f728820" - }, - { - "@id": "_:N7f27ce1812214cf08ea19bcb018764e2" - }, + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "_:Nfc79218ef172418cad1d73977bceaf78" + "@value": "sha1" } ] }, { - "@id": "_:N4477c4b31f20446998b8dff00cd309b3", - "http://www.w3.org/ns/shacl#class": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "@language": "en", + "@value": "Conveys information about how VEX status was determined." } ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" - } - ] + "@id": "http://www.w3.org/2001/XMLSchema#string" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + "@value": "kev" } ] }, { - "@id": "_:N065968ff4b1d468f80d208a94f728820", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "_:N7f27ce1812214cf08ea19bcb018764e2", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": "^[^\\/]+\\/[^\\/]+$" + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." } ] }, { - "@id": "_:Nfc79218ef172418cad1d73977bceaf78", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + "@value": "A value used in a CdxPropertyEntry name-value pair." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "categorical" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A distinct article or unit within the digital domain." + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -10563,78 +9897,29 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Nd1e13d5c3983406c938eabee95860c0e" - }, - { - "@id": "_:N8a37f4cffd6247e08ac9432f8447d89a" - }, - { - "@id": "_:N0da978c5d15a4e0ca2abb1d9a336eba1" + "@id": "_:N8692a82c280845c3a6fa37c02ddae229" }, { - "@id": "_:Nc7ccb8d419ad49ab9f18f22daf82266f" - }, - { - "@id": "_:N2fd6d6c96c7b46dabc958e2ddb32657c" - }, - { - "@id": "_:N41aee74b0dbe4609888f3e3488e75e26" - }, - { - "@id": "_:N9177e2ee3c054acba6cd2b8f4d78e4f3" - } - ] - }, - { - "@id": "_:Nd1e13d5c3983406c938eabee95860c0e", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + "@id": "_:N105628f6c8b040edb9db617f35f30bec" } ] }, { - "@id": "_:N8a37f4cffd6247e08ac9432f8447d89a", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:N8692a82c280845c3a6fa37c02ddae229", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" - } - ] - }, - { - "@id": "_:N0da978c5d15a4e0ca2abb1d9a336eba1", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -10645,17 +9930,12 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" - } - ], - "http://www.w3.org/ns/shacl#pattern": [ - { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" } ] }, { - "@id": "_:Nc7ccb8d419ad49ab9f18f22daf82266f", + "@id": "_:N105628f6c8b040edb9db617f35f30bec", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" @@ -10663,6 +9943,7 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -10673,7 +9954,7 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" } ], "http://www.w3.org/ns/shacl#pattern": [ @@ -10683,312 +9964,316 @@ ] }, { - "@id": "_:N2fd6d6c96c7b46dabc958e2ddb32657c", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { - "@id": "_:N41aee74b0dbe4609888f3e3488e75e26", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Represents the energy quantity." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ] }, { - "@id": "_:N9177e2ee3c054acba6cd2b8f4d78e4f3", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" - } - ], - "http://www.w3.org/ns/shacl#in": [ - { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" - } - ] - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Agent represents anything with the potential to act on a system." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@value": "hasInput" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + "@value": "delegatedTo" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a Software Composition Analysis (SCA) report." + "@value": "The `from` Element is modified by each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "componentAnalysisReport" + "@value": "modifiedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Property describing the start time of a build." + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@value": "file" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "[Kyber](https://pq-crystals.org/kyber/)" + "@value": "A reference to the patch or source code that fixes a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "crystalsKyber" + "@value": "securityFix" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specified the time and date when a vulnerability was withdrawn." + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@value": "hasProvidedDependency" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + "@value": "Identifies the full text of a LicenseAddition." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "serializedInArtifact" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "development" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + "@value": "A key with an associated value." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "fixedIn" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbd47cac50394462f9015e00ec4b449a6" + }, + { + "@id": "_:N187a93895c7b43bea96131212a0ba3f5" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:Nbd47cac50394462f9015e00ec4b449a6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Describes a mechanism to update the dataset." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:N187a93895c7b43bea96131212a0ba3f5", + "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Indicates absence of the field." + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "no" + "@value": "design" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" @@ -10996,116 +10281,163 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + "@value": "A reference to a export control assessment for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "vulnerabilityExploitabilityAssessment" + "@value": "exportControlAssessment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + "@value": "Provides an SSVC assessment for a vulnerability." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": "hasMetadata" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N30d5cdb21c144005b1d74c81aa0e129e" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:N30d5cdb21c144005b1d74c81aa0e129e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#in": [ { - "@language": "en", - "@value": "Specifies the time from which an element is applicable / valid." + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@value": "vulnerableCodeNotInExecutePath" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the safety risk level." + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + "@value": "Captures a limitation of the AI software." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "fixedBy" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A short description of an Element." + "@value": "A reference to the issue tracker for a package." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "issueTracker" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -11113,84 +10445,125 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A map of Element identifiers that are used within a Document but defined\nexternal to that Document." + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N999ce6cccf4c43f493041f0c109b3166" + "@id": "_:Nba03adbea09d477299a596cac9fd8319" }, { - "@id": "_:Na34b98cc7abc4ac2bb5b1ba9777ec6a0" + "@id": "_:Nc704d39d408f41caa9805e140ff0016a" }, { - "@id": "_:Ndf7085005814495cbc9689c68bb9683d" + "@id": "_:N5d195bb929fc404584503e9c9b17a526" }, { - "@id": "_:Na40768ed7c6a40fcb01c9e8f1793b8a7" - } - ] - }, - { - "@id": "_:N999ce6cccf4c43f493041f0c109b3166", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N06465237afe4406eb4803558f7a57c08" + }, { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "_:Ndb31c53559be41e0b28e79b74da0b557" + }, + { + "@id": "_:Nd8679c5e3311467ca097a4151ac8fa54" + }, + { + "@id": "_:N737b3d5b3c8f4cb7b5fb665b52f1dd96" + }, + { + "@id": "_:Nda791debefe5491aa84d61433873c630" + } + ] + }, + { + "@id": "_:Nba03adbea09d477299a596cac9fd8319", + "http://www.w3.org/ns/shacl#message": [ + { + "@language": "en", + "@value": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#not": [ { - "@value": 1 + "@id": "_:Ndbfe3b48ba714fb990a0e903863ea1ed" } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": 1 + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" + } + ] + }, + { + "@id": "_:Ndbfe3b48ba714fb990a0e903863ea1ed", + "http://www.w3.org/ns/shacl#hasValue": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "_:Nc704d39d408f41caa9805e140ff0016a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" } ] }, { - "@id": "_:Na34b98cc7abc4ac2bb5b1ba9777ec6a0", + "@id": "_:N5d195bb929fc404584503e9c9b17a526", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" } ] }, { - "@id": "_:Ndf7085005814495cbc9689c68bb9683d", + "@id": "_:N06465237afe4406eb4803558f7a57c08", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -11201,264 +10574,433 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "_:Na40768ed7c6a40fcb01c9e8f1793b8a7", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Ndb31c53559be41e0b28e79b74da0b557", + "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:Nd8679c5e3311467ca097a4151ac8fa54", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Records the results of general safety risk assessment of the AI system." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@id": "_:N737b3d5b3c8f4cb7b5fb665b52f1dd96", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:Nda791debefe5491aa84d61433873c630", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + "@value": "The Element doesn't fit into any of the other categories." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "hasTestCase" + "@value": "other" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides information about the primary purpose of an Element." + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "When a CVSS score is between 7.0 - 8.9" + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "high" + "@value": "gitoid" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Other exploit catalogs" + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "other" + "@value": "email" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4." + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "blake2b384" + "@value": "publishedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "@type": [ "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N75afbc0eb6e646f28396b52ee0131582" + "@id": "_:N0b728d22a9674ecc87af12fde5aae61c" }, { - "@id": "_:N5e77c3af3932465a99431b715d09d12e" + "@id": "_:Nddcc9ac569c4442b894f208d7722b4f8" }, { - "@id": "_:N55072cbd77a64b16b152c20236d786f7" + "@id": "_:N5ab248e680454bbcb3ed254de24ac49f" }, { - "@id": "_:N3daf4b35020144689a44f0ff15ab9244" - }, - { - "@id": "_:N14c84f27ec214a8aa7744493af4f1b05" - }, - { - "@id": "_:N00f0f016bff441178fb3b14b0f1ba310" - } - ] - }, - { - "@id": "_:N75afbc0eb6e646f28396b52ee0131582", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + "@id": "_:N72a328f4b7e14cb194d99b35236c3430" } ] }, { - "@id": "_:N5e77c3af3932465a99431b715d09d12e", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "@id": "_:N0b728d22a9674ecc87af12fde5aae61c", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#in": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" - } - ] - }, - { - "@id": "_:N55072cbd77a64b16b152c20236d786f7", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" } ] }, { - "@id": "_:N3daf4b35020144689a44f0ff15ab9244", + "@id": "_:Nddcc9ac569c4442b894f208d7722b4f8", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" @@ -11466,15 +11008,21 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" } ] }, { - "@id": "_:N14c84f27ec214a8aa7744493af4f1b05", + "@id": "_:N5ab248e680454bbcb3ed254de24ac49f", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -11484,12 +11032,17 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" } ] }, { - "@id": "_:N00f0f016bff441178fb3b14b0f1ba310", + "@id": "_:N72a328f4b7e14cb194d99b35236c3430", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -11497,6 +11050,7 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -11507,403 +11061,355 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + "@value": "Specifies the type of an annotation." } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": "hasDeletedFile" + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + "@value": "A reference to the documentation for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "development" + "@value": "documentation" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Property describing the session in which a build is invoked." + "@value": "A reference to a quality assessment for a package." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + "@value": "qualityAssessmentReport" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Element is configuration data" + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "configuration" + "@value": "hasTest" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Defines the end of a range." + "@value": "A reference to the release notes for a package." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + "@value": "releaseNotes" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Describes a certain part of a file." + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N89f5ced0d2b44da98e135f5754616ccc" - }, - { - "@id": "_:N71251064642941d5a8323c552deea710" - }, - { - "@id": "_:N37e9effec5ca4011a388b871588a9bfc" + "@value": "vulnerableCodeNotPresent" } ] }, { - "@id": "_:N89f5ced0d2b44da98e135f5754616ccc", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + "@value": "vulnerabilityDisclosureReport" } ] }, { - "@id": "_:N71251064642941d5a8323c552deea710", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "_:N37e9effec5ca4011a388b871588a9bfc", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + "@value": "hasExample" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + "@value": "hasOutput" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Refers to any object that stores content on a computer." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@value": "Makes no assertion about the field." } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N2757a283e93b45ad88b85a593725d092" - }, + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "_:N69674ef0cb504722bc20bd3195026b39" + "@value": "noAssertion" } ] }, { - "@id": "_:N2757a283e93b45ad88b85a593725d092", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "^[^\\/]+\\/[^\\/]+$" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { - "@id": "_:N69674ef0cb504722bc20bd3195026b39", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" - } - ] + "@language": "en", + "@value": "Used when the type does not match any of the other options." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "other" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "A reference build metadata related to a published package." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + "@value": "buildMeta" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is a container image which can be used by a container runtime application" + "@value": "A reference to a privacy assessment for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "container" + "@value": "privacyAssessment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to the release notes for a package." + "@value": "Identifies from where or whom the Element originally came." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "releaseNotes" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the element follows the expanded Licensing profile specification" + "@value": "The relationship is known to be exhaustive." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "expandedLicensing" + "@value": "complete" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A license or addition that is not listed on the SPDX License List." + "@value": "Abstract class representing a License or an OrLaterOperator." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -11913,40 +11419,39 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N87ef2338681b493982fdd6660c334933" + "@id": "_:Nbb0a3a63cdba4f078c6de6eef7ff6579" } ] }, { - "@id": "_:N87ef2338681b493982fdd6660c334933", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:Nbb0a3a63cdba4f078c6de6eef7ff6579", + "http://www.w3.org/ns/shacl#message": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 + "@language": "en", + "@value": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense is an abstract class and should not be instantiated directly. Instantiate a subclass instead." } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#not": [ { - "@value": 1 + "@id": "_:Ncedd59bf4f1a4436ac8325d34d020df5" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" } - ], - "http://www.w3.org/ns/shacl#path": [ + ] + }, + { + "@id": "_:Ncedd59bf4f1a4436ac8325d34d020df5", + "http://www.w3.org/ns/shacl#hasValue": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" @@ -11954,135 +11459,193 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a published list of releases for a package." + "@value": "A reference to a Software Composition Analysis (SCA) report." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "releaseHistory" + "@value": "componentAnalysisReport" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + "@value": "data consists only of numeric entries." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "analyzed" + "@value": "numeric" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "other" + "@value": "riskAssessment" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186)." + "@value": "the element follows the AI profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "md4" + "@value": "ai" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the VEX justification type." + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the unit in which energy is measured." + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is a single or a collection of source files" + "@value": "When a CVSS score is between 4.0 - 6.9" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "source" + "@value": "medium" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -12090,12 +11653,12 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + "@value": "A collection of Elements, not necessarily with unifying context." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -12105,28 +11668,51 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N8049abc6ee7f449ebf27e3e8357bdf75" + "@id": "_:Nc9ccffdec66347509395f75c9845128f" + }, + { + "@id": "_:Nc4156282a9c34b6190b0869cdc1793db" }, { - "@id": "_:Nc5bf40e3b2584e2eaa4becc473bed079" + "@id": "_:Ne3b40c9739164b2eb0ae163374d9c4ac" + }, + { + "@id": "_:N0bf807da343b4645904db560abf69583" } ] }, { - "@id": "_:N8049abc6ee7f449ebf27e3e8357bdf75", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Nc9ccffdec66347509395f75c9845128f", + "http://www.w3.org/ns/shacl#message": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + "@language": "en", + "@value": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#not": [ { - "@value": 1 + "@id": "_:N8eab6125211e4549a03d744617823ad5" } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": 1 + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" + } + ] + }, + { + "@id": "_:N8eab6125211e4549a03d744617823ad5", + "http://www.w3.org/ns/shacl#hasValue": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ] + }, + { + "@id": "_:Nc4156282a9c34b6190b0869cdc1793db", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -12136,25 +11722,69 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" } ] }, { - "@id": "_:Nc5bf40e3b2584e2eaa4becc473bed079", + "@id": "_:Ne3b40c9739164b2eb0ae163374d9c4ac", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": 1 + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N0bf807da343b4645904db560abf69583", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -12164,233 +11794,312 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the time an artifact was built." + "@value": "Identifies the full text of a License or Addition." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Enumeration of the valid profiles." + "@value": "Information about the relationship between two Elements." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to the patch or source code that fixes a vulnerability." + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "securityFix" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + "@value": "Specifies the value of the content identifier." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "sha3_512" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "References an Element on the right-hand side of a relationship." + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@value": "hasStaticLink" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + "@value": "Availability of dataset." } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + "@language": "en", + "@value": "the element follows the Dataset profile specification" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@value": "dataset" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Nc6df8997e25c4618ad64b329bea18fa4" - }, + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "_:N1288d377b72c44a58a576536a10d2030" - }, - { - "@id": "_:N7e6385c5f3414e35862d986501bfff61" - }, - { - "@id": "_:N69fe400001ad47cbb9e616ed9d727696" - }, + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "_:N5c4503ba9d8a43719f83795d17b3c7a7" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "_:Nc6df8997e25c4618ad64b329bea18fa4", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@language": "en", + "@value": "Provides a map of a property names to a values." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + "@value": "npm" } ] }, { - "@id": "_:N1288d377b72c44a58a576536a10d2030", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + "@value": "md2" } ] }, { - "@id": "_:N7e6385c5f3414e35862d986501bfff61", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N90cb783276d74a2881e21a08abf01e2f" + }, + { + "@id": "_:Nf507b9bee5ae4254bafe4ce3c72a9f18" + }, + { + "@id": "_:Naa7e95f812804669b3e89daed8d27b21" + }, + { + "@id": "_:N1a0a0b40de254f55a8372bba19b60496" + }, + { + "@id": "_:N74551d5c49b94ece99a5fdec0d58d233" + }, + { + "@id": "_:Nce6e2333750a40619f2e93e40be35d7e" + } + ] + }, + { + "@id": "_:N90cb783276d74a2881e21a08abf01e2f", + "http://www.w3.org/ns/shacl#message": [ + { + "@language": "en", + "@value": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead." + } + ], + "http://www.w3.org/ns/shacl#not": [ + { + "@id": "_:N986501d57648498ea8ed156092baf32c" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" } ] }, { - "@id": "_:N69fe400001ad47cbb9e616ed9d727696", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N986501d57648498ea8ed156092baf32c", + "http://www.w3.org/ns/shacl#hasValue": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ] + }, + { + "@id": "_:Nf507b9bee5ae4254bafe4ce3c72a9f18", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" } ] }, { - "@id": "_:N5c4503ba9d8a43719f83795d17b3c7a7", + "@id": "_:Naa7e95f812804669b3e89daed8d27b21", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -12401,137 +12110,134 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "@id": "_:N1a0a0b40de254f55a8372bba19b60496", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "blake2b512" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass" + "@id": "_:N74551d5c49b94ece99a5fdec0d58d233", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#Literal" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#path": [ { - "@language": "en", - "@value": "A reference to a risk assessment for a package." + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#pattern": [ { - "@value": "riskAssessment" + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "@id": "_:Nce6e2333750a40619f2e93e40be35d7e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "securityAdvisory" + "@id": "http://www.w3.org/ns/shacl#Literal" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#path": [ { - "@language": "en", - "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#pattern": [ { - "@value": "clickthrough" + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Property that describes the time at which a build stops." + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "noAssertion" + "@value": "text" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -12539,196 +12245,132 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + "@value": "The `from` Element is documented by each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "coordinatedBy" + "@value": "hasDocumentation" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a runtime analysis report for a package." + "@value": "The Element provides low level control over a device's hardware." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "runtimeAnalysisReport" + "@value": "firmware" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A License participating in an 'or later' model." + "@value": "Defines the beginning of a range." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides information about the content type of an Element or a Property." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "Refers to any object that stores content on a computer." } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@language": "en", - "@value": "Defines the line range in the original host file that the snippet information\napplies to." + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + "@id": "http://www.w3.org/ns/shacl#IRI" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#property": [ { - "@language": "en", - "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "@id": "_:N87131d5acc2b478ba16230f714aa0bb0" + }, { - "@value": "doesNotAffect" + "@id": "_:N2b7fa052bf664f2a9e1923831d282602" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N87131d5acc2b478ba16230f714aa0bb0", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Specifies an AI package and its associated information." + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Ne2b61099faaa4dfeb2a1dbb6cb39c943" - }, - { - "@id": "_:N7a1979daf894407dabf96d89e984ff05" - }, - { - "@id": "_:N29943647d0a54ed3bbf4236b7f26fed8" - }, - { - "@id": "_:N75a4a8a0dcc14090818fdc6eade781c2" - }, - { - "@id": "_:Nbf51d2fce0c449ca8df0fa964ec48e89" - }, - { - "@id": "_:Nf0d9d94b4d9a4523a1d863217249938a" - }, - { - "@id": "_:Ncdb4a970c7f542688b373a1da217c447" - }, - { - "@id": "_:N442fd7eee89f41b2a0f43bb6b2a05372" - }, - { - "@id": "_:N5cc19e587a4f464a9572d61b4352c919" - }, - { - "@id": "_:N320baf3ea5274f3393919c1999ded96d" - }, - { - "@id": "_:N896ec867378949ebbc26581fe9cf864c" - }, - { - "@id": "_:N4c5910b87a7e4fc69577e8ccd52c8ab3" - }, - { - "@id": "_:N2d8b30121bba468383f1a52208a233a0" - }, + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:N5f799594600d45d0b83461261182f275" - }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ { - "@id": "_:N1cfe20f0d2a049b7b751bd3aa0b4a09d" + "@value": "^[^\\/]+\\/[^\\/]+$" } ] }, { - "@id": "_:Ne2b61099faaa4dfeb2a1dbb6cb39c943", + "@id": "_:N2b7fa052bf664f2a9e1923831d282602", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -12739,94 +12381,92 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" } ] }, { - "@id": "_:N7a1979daf894407dabf96d89e984ff05", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + "@value": "structured" } ] }, { - "@id": "_:N29943647d0a54ed3bbf4236b7f26fed8", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { - "@id": "_:N75a4a8a0dcc14090818fdc6eade781c2", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "A license expression participating in a license set." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ] }, { - "@id": "_:Nbf51d2fce0c449ca8df0fa964ec48e89", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#property": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + "@id": "_:Nda71586c3c6541b4a6a907d316dca405" } ] }, { - "@id": "_:Nf0d9d94b4d9a4523a1d863217249938a", + "@id": "_:Nda71586c3c6541b4a6a907d316dca405", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" @@ -12834,6 +12474,13 @@ ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -12844,94 +12491,154 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" } ] }, { - "@id": "_:Ncdb4a970c7f542688b373a1da217c447", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" } ] }, { - "@id": "_:N442fd7eee89f41b2a0f43bb6b2a05372", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + "@value": "secureSoftwareAttestation" } ] }, { - "@id": "_:N5cc19e587a4f464a9572d61b4352c919", - "http://www.w3.org/ns/shacl#class": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#property": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + "@id": "_:Nb916f2dfc1c640bd8e0dac9bb5956172" + }, + { + "@id": "_:N377b547285074591a904911ef1fc1977" + }, + { + "@id": "_:N6f8ca85700744b0e9f7a8672675d1dca" } ] }, { - "@id": "_:N320baf3ea5274f3393919c1999ded96d", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:Nb916f2dfc1c640bd8e0dac9bb5956172", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/ns/shacl#in": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" - } + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" } ] }, { - "@id": "_:N896ec867378949ebbc26581fe9cf864c", + "@id": "_:N377b547285074591a904911ef1fc1977", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" @@ -12939,74 +12646,102 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" } ] }, { - "@id": "_:N4c5910b87a7e4fc69577e8ccd52c8ab3", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" - } - ], - "http://www.w3.org/ns/shacl#in": [ + "@id": "_:N6f8ca85700744b0e9f7a8672675d1dca", + "http://www.w3.org/ns/shacl#datatype": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" - } - ] + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "_:N2d8b30121bba468383f1a52208a233a0", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#property": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + "@id": "_:Ne11c75cafdb0438299216847b06716cf" + }, + { + "@id": "_:N942417ca6d844df0914d75b099a457f8" + }, + { + "@id": "_:Ne68051bb209048da9a57bc5dbaf28bf0" } ] }, { - "@id": "_:N5f799594600d45d0b83461261182f275", + "@id": "_:Ne11c75cafdb0438299216847b06716cf", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -13016,489 +12751,444 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "_:N1cfe20f0d2a049b7b751bd3aa0b4a09d", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" - } - ], - "http://www.w3.org/ns/shacl#in": [ + "@id": "_:N942417ca6d844df0914d75b099a457f8", + "http://www.w3.org/ns/shacl#datatype": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" - } - ] + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "@id": "_:Ne68051bb209048da9a57bc5dbaf28bf0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "securityPolicy" + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Dataset can be shared within a community of peers and partners." + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "green" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the element follows the Software profile specification" + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "software" + "@value": "blake2b512" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + "@value": "A relationship has specific context implications during an element's design." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "design" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A value used in a CdxExtension name-value pair." + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@value": "hasOptionalDependency" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to the documentation for a package." + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "documentation" + "@value": "packageUrl" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + "@value": "A reference to metrics related to package such as OpenSSF scorecards." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "design" + "@value": "metrics" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "any hashing algorithm that does not exist in this list of entries" - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ - { - "@value": "other" + "@value": "A group of people who work together in an organized way for a shared purpose." } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@language": "en", - "@value": "A License participating in a 'with addition' model." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_NoneLicense", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Identifies the full text of a License, in SPDX templating format." + "@value": "This individual element was defined by the spec." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "https://spdx.org/rdf/3.0.1/terms/Core/created": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp", + "@value": "2024-11-22T03:00:01Z" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "https://spdx.org/rdf/3.0.1/terms/Core/createdBy": [ { - "@language": "en", - "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "https://spdx.org/rdf/3.0.1/terms/Core/specVersion": [ { - "@value": "swhid" + "@value": "3.0.1" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@id": "https://spdx.org/rdf/3.0.1/creationInfo_NoAssertionLicense", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + "@value": "This individual element was defined by the spec." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "https://spdx.org/rdf/3.0.1/terms/Core/created": [ { - "@value": "hasStaticLink" + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp", + "@value": "2024-11-22T03:00:01Z" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "https://spdx.org/rdf/3.0.1/terms/Core/createdBy": [ { - "@language": "en", - "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "https://spdx.org/rdf/3.0.1/terms/Core/specVersion": [ { - "@value": "video" + "@value": "3.0.1" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + "@value": "Provides information about the creation of the Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Property that describes the URI of the build configuration source file." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@value": "A license that is not listed on the SPDX License List." } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@language": "en", - "@value": "Records the measurement of prediction quality of the AI model." + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + "@value": "Describes what the given dataset should be used for." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides the location of an exploit catalog." + "@value": "Provides the location of an external reference." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ - { - "@value": "reportedBy" + "@value": "Enumeration of the different kinds of SPDX file." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Element is an Artifact that can be run on a computer" + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "executable" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "data is of a type not included in this list." + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "other" + "@value": "source" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + "@value": "A name used in a CdxPropertyEntry name-value pair." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "hasDependencyManifest" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Kilowatt-hour." + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "kilowattHour" + "@value": "specification" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" @@ -13506,82 +13196,89 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A canonical, unique, immutable identifier" + "@value": "Class that describes a build instance of software/artifacts." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNode" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N3be22ea4244a43d6af104de9fed1b4fb" + "@id": "_:N4f6d0abf94b14a189b945346f00ba9dc" + }, + { + "@id": "_:N7d2dbee05b72455c995a675186de5fd1" + }, + { + "@id": "_:N82be0a238ea44c658a60ca20e0c8c6fa" + }, + { + "@id": "_:N3ba51db196c04386ae47cb64aab6c95c" + }, + { + "@id": "_:Ne20cfbefa1424ba79abfc89287f1eef3" + }, + { + "@id": "_:Nbdc672a90df4480da8648bd31507d48e" + }, + { + "@id": "_:Nc8b9ea4213214eccb17ccccf3790161d" + }, + { + "@id": "_:Nce9a69dc19af4e1394f03174c67c5857" }, { - "@id": "_:N00e5d1a9fc9f4e8ea643c5dec21372c9" + "@id": "_:N85ad449141be453592e9e80c2bc379f4" } ] }, { - "@id": "_:N3be22ea4244a43d6af104de9fed1b4fb", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" - } - ], - "http://www.w3.org/ns/shacl#in": [ + "@id": "_:N4f6d0abf94b14a189b945346f00ba9dc", + "http://www.w3.org/ns/shacl#datatype": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" - } - ] + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" } ] }, { - "@id": "_:N00e5d1a9fc9f4e8ea643c5dec21372c9", + "@id": "_:N7d2dbee05b72455c995a675186de5fd1", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -13592,124 +13289,196 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + "@id": "_:N82be0a238ea44c658a60ca20e0c8c6fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "md6" + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + "@id": "_:N3ba51db196c04386ae47cb64aab6c95c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "red" + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:Ne20cfbefa1424ba79abfc89287f1eef3", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Contains a URL where the License or LicenseAddition can be found in use." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + "@id": "_:Nbdc672a90df4480da8648bd31507d48e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "A relationship has specific context implications during an element's build phase, during development." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "build" + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@id": "_:Nc8b9ea4213214eccb17ccccf3790161d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce9a69dc19af4e1394f03174c67c5857", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N85ad449141be453592e9e80c2bc379f4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + "@value": "The Element contains a set of changes to update, fix, or improve another Element." } ], - "http://www.w3.org/2002/07/owl#sameAs": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + "@value": "patch" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + "@value": "The Element is an Artifact that can be run on a computer." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "eolNotice" + "@value": "executable" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -13717,44 +13486,48 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` archive expands out as an artifact described by each `to` Element." + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "expandsTo" + "@value": "invokedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to the instant messaging system used by the maintainer for a package." + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "chat" + "@value": "adler32" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "@type": [ "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -13764,614 +13537,704 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:N784fd0e933c9417b9e11ea351159df76" - }, - { - "@id": "_:Nf9cc156a3e084f8ab0ce054200c8fca7" - }, - { - "@id": "_:N8746b43004e5422e8a87906a64680ef4" - }, - { - "@id": "_:Ncd7fa1f2b5334cd680d0c04e40453667" - }, - { - "@id": "_:Nda26387d9677485d8554cf33b606d465" - }, - { - "@id": "_:N9547de9ed84145228bed37ef2d51f84f" - }, - { - "@id": "_:N21d7410f6a994075adab308941db7bcd" - }, - { - "@id": "_:N22c1a3c4c4964b7f90a94e0af7e75d87" - }, - { - "@id": "_:Ne5992967c6784ac0a64f460548c9c73c" + "@id": "_:N954579de61d84bef909737ad4568a536" } ] }, { - "@id": "_:N784fd0e933c9417b9e11ea351159df76", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "_:N954579de61d84bef909737ad4568a536", + "http://www.w3.org/ns/shacl#class": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/ns/shacl#in": [ { - "@value": 1 + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" } ] }, { - "@id": "_:Nf9cc156a3e084f8ab0ce054200c8fca7", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + "@value": "support" } ] }, { - "@id": "_:N8746b43004e5422e8a87906a64680ef4", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "image" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { - "@id": "_:Ncd7fa1f2b5334cd680d0c04e40453667", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { - "@id": "_:Nda26387d9677485d8554cf33b606d465", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + "@value": "doesNotAffect" } ] }, { - "@id": "_:N9547de9ed84145228bed37ef2d51f84f", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IndividualElement", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "A concrete subclass of Element used by Individuals in the\nCore profile." } ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" - } - ] - }, - { - "@id": "_:N21d7410f6a994075adab308941db7bcd", - "http://www.w3.org/ns/shacl#class": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { - "@id": "_:N22c1a3c4c4964b7f90a94e0af7e75d87", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + "@value": "green" } ] }, { - "@id": "_:Ne5992967c6784ac0a64f460548c9c73c", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + "@language": "en", + "@value": "Megajoule." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + "@value": "megajoule" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + "@value": "Commentary on an assertion that an annotator has made." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#decimal" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "cve" + "@value": "blake3" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Low/no risk is posed by an AI system." + "@value": "A reference to a purchase order for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "low" + "@value": "purchaseOrder" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + "@value": "The name of a relevant standard that may apply to an artifact." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" - } - ], - "http://www.w3.org/2002/07/owl#sameAs": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A license expression participating in a license set." + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "An assertion made in relation to one or more elements." + "@value": "A reference to binary artifacts related to a package." } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@value": "binaryArtifact" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "Identifies when the Element was originally created." } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:N13b921afee3a413e9a3b06c638bf7824" - }, - { - "@id": "_:N208b27c07ce6469e9114d5b80dfc4f8f" - }, - { - "@id": "_:N3f6ce06e6ca2446781e41b064c3d1d58" - }, + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "_:N96ab198cab814dceb4dc205e80f644d6" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "_:N13b921afee3a413e9a3b06c638bf7824", - "http://www.w3.org/ns/shacl#class": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." } ], - "http://www.w3.org/ns/shacl#in": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@list": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" - } - ] + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": 1 + "@value": "timestamp" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + "@value": "copiedTo" } ] }, { - "@id": "_:N208b27c07ce6469e9114d5b80dfc4f8f", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@value": "directDownload" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." } ], - "http://www.w3.org/ns/shacl#pattern": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "^[^\\/]+\\/[^\\/]+$" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "_:N3f6ce06e6ca2446781e41b064c3d1d58", - "http://www.w3.org/ns/shacl#datatype": [ + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." } ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + "@value": "sha256" } ] }, { - "@id": "_:N96ab198cab814dceb4dc205e80f644d6", - "http://www.w3.org/ns/shacl#class": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" - } + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/ns/shacl#maxCount": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@value": 1 + "@language": "en", + "@value": "Records the type of the model used in the AI software." } ], - "http://www.w3.org/ns/shacl#minCount": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": 1 + "@id": "http://www.w3.org/2001/XMLSchema#string" } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + "@value": "mavenCentral" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + "@value": "An Element an annotator has made an assertion about." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "vulnerableCodeCannotBeControlledByAdversary" + "@value": "fixedBy" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Identifies the full text of a LicenseAddition." + "@value": "Abstract class representing a license combination consisting of one or more licenses." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd6f4245b3ebe44e6b100782b191deb97" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@id": "_:Nd6f4245b3ebe44e6b100782b191deb97", + "http://www.w3.org/ns/shacl#message": [ + { + "@language": "en", + "@value": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo is an abstract class and should not be instantiated directly. Instantiate a subclass instead." + } + ], + "http://www.w3.org/ns/shacl#not": [ + { + "@id": "_:Nf58f6bed32c5414ca98526a5d6a7b6dc" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" + } + ] + }, + { + "@id": "_:Nf58f6bed32c5414ca98526a5d6a7b6dc", + "http://www.w3.org/ns/shacl#hasValue": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + "@value": "A reference to related security information of unspecified type." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "dependsOn" + "@value": "securityOther" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + "@value": "The Element is a test used to verify functionality on an software element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "configures" + "@value": "test" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Identifies when the Element was originally created." + "@value": "Specifies the SSVC decision type." } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element is the evidence that a specification or requirement has been fulfilled" + "@value": "A relationship has specific context implications during the execution phase of an element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "evidence" + "@value": "runtime" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "@type": [ "http://www.w3.org/2002/07/owl#Class", - "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A collection of Elements, not necessarily with unifying context." + "@value": "A distinct article or unit related to Software." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" } ], "http://www.w3.org/ns/shacl#nodeKind": [ @@ -14381,487 +14244,551 @@ ], "http://www.w3.org/ns/shacl#property": [ { - "@id": "_:Nb387237d7787460e8f7e72786252a39f" + "@id": "_:Na1ce1658c3be4bc0b082944caae9ddea" + }, + { + "@id": "_:N2b94274553ab4bc2bbc78307f39b3327" + }, + { + "@id": "_:Ne03121e956234709bc0f8f288597ff50" + }, + { + "@id": "_:Nfbb5f5e996be44989d31d47d46540443" }, { - "@id": "_:Nda9579bf8aeb475c986dfda97af9e414" + "@id": "_:N58b8de667bb54771976a5e86a8a8139a" }, { - "@id": "_:N5ba1e97374714be89c6ce6144cda737a" + "@id": "_:N5912892962274966938ef83f3f23c015" } ] }, { - "@id": "_:Nb387237d7787460e8f7e72786252a39f", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Na1ce1658c3be4bc0b082944caae9ddea", + "http://www.w3.org/ns/shacl#message": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@language": "en", + "@value": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/ns/shacl#not": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "_:Nff8e6ed55f604249b913b2bbc6d8411d" } ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + "@id": "http://www.w3.org/1999/02/22-rdf-syntax-ns#type" } ] }, { - "@id": "_:Nda9579bf8aeb475c986dfda97af9e414", - "http://www.w3.org/ns/shacl#class": [ + "@id": "_:Nff8e6ed55f604249b913b2bbc6d8411d", + "http://www.w3.org/ns/shacl#hasValue": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" } ] }, { - "@id": "_:N5ba1e97374714be89c6ce6144cda737a", + "@id": "_:N2b94274553ab4bc2bbc78307f39b3327", "http://www.w3.org/ns/shacl#class": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" - } - ] - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#IRI" - } - ], - "http://www.w3.org/ns/shacl#path": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." - } - ], - "http://www.w3.org/2000/01/rdf-schema#label": [ - { - "@value": "hasAssessmentFor" - } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "An Element an annotator has made an assertion about." - } - ], - "http://www.w3.org/2000/01/rdf-schema#range": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Uniquely identifies an external element." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + "@id": "_:Ne03121e956234709bc0f8f288597ff50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#in": [ { - "@language": "en", - "@value": "The second-highest level of risk posed by an AI system." + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "high" + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:Nfbb5f5e996be44989d31d47d46540443", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Specifies the level of support associated with an artifact." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:N58b8de667bb54771976a5e86a8a8139a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", - "@type": [ - "http://www.w3.org/2002/07/owl#DatatypeProperty" + "@id": "_:N5912892962274966938ef83f3f23c015", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Captures a limitation of the AI software." + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "http://www.w3.org/2001/XMLSchema#string" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element)." + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "other" + "@value": "bower" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + "@value": "Specifies the time from which an element is no longer applicable / valid." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "amber" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A license that is not listed on the SPDX License List." - } - ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ - { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + "@value": "Provides additional purpose information of the software artifact." } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the element follows the simple Licensing profile specification" + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "simpleLicensing" + "@value": "hasDataFile" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a privacy assessment for a package." + "@value": "Describes the type of annotation." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "privacyAssessment" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference build system used to create or publish the package." + "@value": "Indicates absence of the field." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "buildSystem" + "@value": "no" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A reference to a dynamic analysis report for a package." + "@value": "Specifies the time from which an element is applicable / valid." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@value": "dynamicAnalysisReport" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Provides an indication of where to retrieve an external Element." + "@value": "Specifies the time an artifact was released." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "A mapping between prefixes and namespace partial URIs." - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#BlankNode" - } - ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Nc416283f46f74c5ca28e42eede357fc1" - }, - { - "@id": "_:Ne4619e36e32c4fdc886ba17b636520a3" - } - ] - }, - { - "@id": "_:Nc416283f46f74c5ca28e42eede357fc1", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#string" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#nodeKind": [ - { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + "@value": "coordinatedBy" } ] }, { - "@id": "_:Ne4619e36e32c4fdc886ba17b636520a3", - "http://www.w3.org/ns/shacl#datatype": [ - { - "@id": "http://www.w3.org/2001/XMLSchema#anyURI" - } - ], - "http://www.w3.org/ns/shacl#maxCount": [ - { - "@value": 1 - } - ], - "http://www.w3.org/ns/shacl#minCount": [ - { - "@value": 1 - } + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/2000/01/rdf-schema#comment": [ { - "@id": "http://www.w3.org/ns/shacl#Literal" + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." } ], - "http://www.w3.org/ns/shacl#path": [ + "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + "@value": "dynamicAnalysisReport" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "@type": [ - "http://www.w3.org/2002/07/owl#Class" + "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Categories of confidentiality level." + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + "@value": "A key used in a generic key-value pair." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { - "@id": "http://www.w3.org/2001/XMLSchema#boolean" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" @@ -14869,337 +14796,1144 @@ "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + "@value": "The `from` Element generates each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "republishedBy" + "@value": "generates" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "When a CVSS score is 0.0" + "@value": "A reference build system used to create or publish the package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "none" + "@value": "buildSystem" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "the Element refers to a chipset, processor, or electronic board" + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { - "@value": "device" + "@value": "clickthrough" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Indicates the amount of energy consumption incurred by an AI model." + "@value": "An SPDX version 2.X compatible verification method for software packages." } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5a2b8b0073a54a3db4d6092f1c5043ed" + }, + { + "@id": "_:Na3925605d49b4db382603ae946c37f51" + }, + { + "@id": "_:N88e97455b377466daa24bff58cde8f0d" + } + ] + }, + { + "@id": "_:N5a2b8b0073a54a3db4d6092f1c5043ed", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Na3925605d49b4db382603ae946c37f51", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N88e97455b377466daa24bff58cde8f0d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N50c6944cf3544d0ab17d40d70d7715c3" + }, + { + "@id": "_:Nd05558aa816f416f8c26895bb8d1d9bb" + }, + { + "@id": "_:N250a4372ab014e66ba3eec07accb85dc" + } + ] + }, + { + "@id": "_:N50c6944cf3544d0ab17d40d70d7715c3", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:Nd05558aa816f416f8c26895bb8d1d9bb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N250a4372ab014e66ba3eec07accb85dc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd11df36dd5014f759eab790e847b9857" + }, + { + "@id": "_:N3c163fcab8684aa09c61e78b4cbb9b38" + }, + { + "@id": "_:N73e74213eec84d8daaa36a51dab963d6" + }, + { + "@id": "_:N53970517ea09401691d51549f8e0fd90" + }, + { + "@id": "_:Nae8e63939c7c4cf4aa4ba555362d775c" + }, + { + "@id": "_:Nb3e77cdb9a14442eafb0659c7081c110" + } + ] + }, + { + "@id": "_:Nd11df36dd5014f759eab790e847b9857", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N3c163fcab8684aa09c61e78b4cbb9b38", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N73e74213eec84d8daaa36a51dab963d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "An individual human being." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#minCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ - { - "@language": "en", - "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." - } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "exploitCreatedBy" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N53970517ea09401691d51549f8e0fd90", + "http://www.w3.org/ns/shacl#class": [ { - "@language": "en", - "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#in": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] } ], - "http://www.w3.org/ns/shacl#nodeKind": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874)." + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#path": [ { - "@value": "sha224" + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" } ] }, { - "@id": "http://spdx.invalid./AbstractClass", - "@type": [ - "http://www.w3.org/2002/07/owl#Class" - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" + "@id": "_:Nae8e63939c7c4cf4aa4ba555362d775c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Property describing a parameter used in an instance of a build." + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + "@id": "http://www.w3.org/ns/shacl#Literal" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#path": [ { - "@language": "en", - "@value": "Information about the relationship between two Elements." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#pattern": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + "@id": "_:Nb3e77cdb9a14442eafb0659c7081c110", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@language": "en", - "@value": "Element is a bill of materials" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@value": "bom" + "@id": "http://www.w3.org/ns/shacl#Literal" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#path": [ { - "@language": "en", - "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#pattern": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", - "@value": "Used when there is a security related identifier of unspecified type." + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { - "@value": "securityOther" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + "@id": "http://www.w3.org/ns/shacl#IRI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#property": [ { - "@value": "act" + "@id": "_:N7091d1b764924e4db3551e0b422e61ba" + }, + { + "@id": "_:Nc38c872821b548ee8f430a027b2d711f" + }, + { + "@id": "_:N65301d1be04341678842dfc049e2a33c" + }, + { + "@id": "_:Nbc1332652da345c49ad3c948238f404b" + }, + { + "@id": "_:N9eda1b52fa264730ab0b383d300e1726" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", - "@type": [ - "http://www.w3.org/2002/07/owl#NamedIndividual", - "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:N7091d1b764924e4db3551e0b422e61ba", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)." + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], - "http://www.w3.org/2000/01/rdf-schema#label": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@value": "sha384" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } - ] - }, - { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", - "@type": [ - "http://www.w3.org/2002/07/owl#ObjectProperty" ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "http://www.w3.org/ns/shacl#nodeKind": [ { - "@language": "en", - "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/2000/01/rdf-schema#range": [ + "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" } ] }, { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", - "@type": [ - "http://www.w3.org/2002/07/owl#Class", - "http://www.w3.org/ns/shacl#NodeShape" - ], - "http://www.w3.org/2000/01/rdf-schema#comment": [ + "@id": "_:Nc38c872821b548ee8f430a027b2d711f", + "http://www.w3.org/ns/shacl#datatype": [ { - "@language": "en", - "@value": "Specifies a vulnerability and its associated information." + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], - "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + "http://www.w3.org/ns/shacl#maxCount": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { - "@id": "http://www.w3.org/ns/shacl#IRI" + "@id": "http://www.w3.org/ns/shacl#Literal" } ], - "http://www.w3.org/ns/shacl#property": [ - { - "@id": "_:Nad60293878ba46b5b12652a41f9e5b9e" - }, - { - "@id": "_:N596d74921771447c9b35785007e34f1c" - }, + "http://www.w3.org/ns/shacl#path": [ { - "@id": "_:N6b8369d5442f4e3c902c0fd4c6ad7f11" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" } ] }, { - "@id": "_:Nad60293878ba46b5b12652a41f9e5b9e", + "@id": "_:N65301d1be04341678842dfc049e2a33c", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -15210,24 +15944,20 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" - } - ], - "http://www.w3.org/ns/shacl#pattern": [ - { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" } ] }, { - "@id": "_:N596d74921771447c9b35785007e34f1c", + "@id": "_:Nbc1332652da345c49ad3c948238f404b", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -15238,24 +15968,20 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" - } - ], - "http://www.w3.org/ns/shacl#pattern": [ - { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" } ] }, { - "@id": "_:N6b8369d5442f4e3c902c0fd4c6ad7f11", + "@id": "_:N9eda1b52fa264730ab0b383d300e1726", "http://www.w3.org/ns/shacl#datatype": [ { - "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { + "@type": "http://www.w3.org/2001/XMLSchema#integer", "@value": 1 } ], @@ -15266,12 +15992,7 @@ ], "http://www.w3.org/ns/shacl#path": [ { - "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" - } - ], - "http://www.w3.org/ns/shacl#pattern": [ - { - "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" } ] } diff --git a/rdf/spdx-model.longturtle b/rdf/spdx-model.longturtle index 296ea2b775..6969996136 100644 --- a/rdf/spdx-model.longturtle +++ b/rdf/spdx-model.longturtle @@ -1,4 +1,5 @@ PREFIX dcterms: +PREFIX ns1: PREFIX omg-ann: PREFIX owl: PREFIX rdf: @@ -16,21 +17,20 @@ PREFIX xsd: sh:nodeKind sh:IRI ; sh:property [ - sh:class ; - sh:in ( - - - - ) ; + sh:datatype xsd:string ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; + sh:nodeKind sh:Literal ; + sh:path ; ] , [ - sh:class ; - sh:maxCount 1 ; + sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; ] , [ sh:datatype xsd:string ; @@ -43,9 +43,25 @@ PREFIX xsd: sh:path ; ] , [ - sh:class ; + sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ns1:PresenceType ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; ] , [ sh:class ; @@ -59,25 +75,16 @@ PREFIX xsd: sh:nodeKind sh:IRI ; sh:path ; ] , - [ - sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; - ] , [ sh:datatype xsd:string ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ - sh:class ; + sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; - ] , - [ - sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ sh:datatype xsd:string ; @@ -85,19 +92,7 @@ PREFIX xsd: sh:path ; ] , [ - sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:class ; + sh:class ns1:PresenceType ; sh:in ( @@ -105,13 +100,19 @@ PREFIX xsd: ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] ; . @@ -120,25 +121,20 @@ PREFIX xsd: owl:Class , sh:NodeShape ; rdfs:comment "Class that describes a build instance of software/artifacts."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; sh:property [ - sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; ] , [ - sh:datatype xsd:dateTimeStamp ; + sh:datatype xsd:anyURI ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; - ] , - [ - sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ; ] , [ sh:datatype xsd:string ; @@ -147,21 +143,19 @@ PREFIX xsd: sh:path ; ] , [ - sh:datatype xsd:anyURI ; + sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ - sh:class ; + sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ; ] , [ - sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; + sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; ] , [ sh:datatype xsd:dateTimeStamp ; @@ -171,63 +165,70 @@ PREFIX xsd: sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; ] , [ - sh:datatype xsd:string ; + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ns1:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; ] ; . - +ns1:Annotation a owl:Class , sh:NodeShape ; rdfs:comment "An assertion made in relation to one or more elements."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; sh:property - [ - sh:class ; - sh:in ( - - - ) ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; - ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:contentType ; sh:pattern "^[^\\/]+\\/[^\\/]+$" ; ] , + [ + sh:class ns1:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:subject ; + ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:statement ; ] , [ - sh:class ; + sh:class ns1:AnnotationType ; + sh:in ( + + + ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:annotationType ; ] ; . - +ns1:LifecycleScopedRelationship a owl:Class , sh:NodeShape ; rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Relationship ; sh:nodeKind sh:IRI ; sh:property [ - sh:class ; + sh:class ns1:LifecycleScopeType ; sh:in ( @@ -238,39 +239,38 @@ PREFIX xsd: ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:scope ; ] ; . - - a owl:Class ; - rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI ; +ns1:NoAssertionElement + a + owl:NamedIndividual , + ns1:IndividualElement ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; + ns1:creationInfo ; +. + +ns1:NoneElement + a + owl:NamedIndividual , + ns1:IndividualElement ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; + ns1:creationInfo ; . - +ns1:PackageVerificationCode a owl:Class , sh:NodeShape ; rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; + rdfs:subClassOf ns1:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ - sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:class ; + sh:class ns1:HashAlgorithm ; sh:in ( @@ -298,47 +298,59 @@ PREFIX xsd: sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:algorithm ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns1:packageVerificationCodeExcludedFile ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:hashValue ; ] ; . - +ns1:Person a owl:Class ; rdfs:comment "An individual human being."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Agent ; sh:nodeKind sh:IRI ; . - +ns1:SoftwareAgent a owl:Class ; rdfs:comment "A software agent."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Agent ; sh:nodeKind sh:IRI ; . - +ns1:SpdxDocument a owl:Class , sh:NodeShape ; rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:ElementCollection ; sh:nodeKind sh:IRI ; sh:property + [ + sh:class ns1:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:import ; + ] , [ sh:class ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:dataLicense ; ] , [ - sh:class ; + sh:class ns1:NamespaceMap ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; - ] , - [ - sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ns1:namespaceMap ; ] ; . @@ -350,10 +362,34 @@ PREFIX xsd: rdfs:subClassOf ; sh:nodeKind sh:IRI ; sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , [ sh:datatype xsd:string ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ sh:datatype xsd:string ; @@ -362,15 +398,9 @@ PREFIX xsd: sh:path ; ] , [ - sh:class ; - sh:in ( - - - - ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; ] , [ sh:class ; @@ -400,23 +430,6 @@ PREFIX xsd: sh:nodeKind sh:Literal ; sh:path ; ] , - [ - sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:class ; - sh:in ( - - - - - ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; - ] , [ sh:class ; sh:in ( @@ -430,16 +443,10 @@ PREFIX xsd: sh:nodeKind sh:IRI ; sh:path ; ] , - [ - sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; - ] , [ sh:datatype xsd:string ; - sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ sh:datatype xsd:string ; @@ -448,15 +455,20 @@ PREFIX xsd: sh:path ; ] , [ - sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ; + sh:class ns1:PresenceType ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; ] , [ - sh:datatype xsd:nonNegativeInteger ; - sh:maxCount 1 ; + sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] ; . @@ -520,13 +532,13 @@ only one of the elements applies."""@en ; sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] ; . @@ -542,13 +554,13 @@ only one of the elements applies."""@en ; sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] ; . @@ -558,8 +570,8 @@ only one of the elements applies."""@en ; ; rdfs:comment """An Individual Value for License when no assertion can be made about its actual value."""@en ; - rdfs:range ; owl:sameAs ; + ns1:creationInfo ; . @@ -568,8 +580,8 @@ value."""@en ; ; rdfs:comment """An Individual Value for License where the SPDX data creator determines that no license is present."""@en ; - rdfs:range ; owl:sameAs ; + ns1:creationInfo ; . @@ -600,18 +612,18 @@ text applied to it."""@en ; sh:nodeKind sh:IRI ; sh:property [ - sh:class ; + sh:class ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ; ] , [ - sh:class ; + sh:class ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ; ] ; . @@ -621,7 +633,7 @@ text applied to it."""@en ; sh:NodeShape ; rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:class ; @@ -716,18 +728,18 @@ text applied to it."""@en ; sh:path ; ] , [ - sh:datatype xsd:string ; + sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ - sh:datatype xsd:decimal ; + sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] ; . @@ -770,13 +782,6 @@ text applied to it."""@en ; sh:nodeKind sh:Literal ; sh:path ; ] , - [ - sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , [ sh:class ; sh:in ( @@ -787,6 +792,13 @@ text applied to it."""@en ; sh:minCount 1 ; sh:nodeKind sh:IRI ; sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; ] ; . @@ -824,6 +836,7 @@ affected by the vulnerability."""@en ; sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; @@ -831,6 +844,7 @@ affected by the vulnerability."""@en ; [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; sh:path ; ] ; @@ -853,19 +867,6 @@ not affected by the vulnerability."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; sh:property - [ - sh:class ; - sh:in ( - - - - - - ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; - ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; @@ -878,6 +879,19 @@ not affected by the vulnerability."""@en ; sh:nodeKind sh:Literal ; sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; ] ; . @@ -894,7 +908,7 @@ investigated."""@en ; owl:Class , sh:NodeShape ; rdfs:comment "Specifies a vulnerability and its associated information."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Artifact ; sh:nodeKind sh:IRI ; sh:property [ @@ -908,14 +922,14 @@ investigated."""@en ; sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; ] , [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; ] ; . @@ -929,7 +943,7 @@ investigated."""@en ; sh:nodeKind sh:IRI ; sh:property [ - sh:class ; + sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; sh:path ; ] , @@ -954,7 +968,7 @@ investigated."""@en ; owl:Class , sh:NodeShape ; rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; sh:property [ @@ -971,7 +985,7 @@ investigated."""@en ; owl:Class , sh:NodeShape ; rdfs:comment "A collection of SPDX Elements describing a single package."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Bom ; sh:nodeKind sh:IRI ; sh:property [ @@ -997,6 +1011,12 @@ investigated."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; sh:property + [ + sh:class ns1:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , [ sh:class ; sh:maxCount 1 ; @@ -1005,19 +1025,53 @@ investigated."""@en ; sh:path ; ] , [ - sh:class ; + sh:class ns1:PositiveIntegerRange ; sh:maxCount 1 ; sh:nodeKind sh:BlankNodeOrIRI ; sh:path ; - ] , - [ - sh:class ; - sh:maxCount 1 ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; ] ; . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" ; +. + + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" ; +. + + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" ; +. + + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" ; +. + + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" ; +. + spdx: a owl:Ontology ; rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; @@ -1091,7 +1145,7 @@ spdx: a owl:ObjectProperty ; rdfs:comment """Indicates whether the system can perform a decision or action without human involvement or guidance."""@en ; - rdfs:range ; + rdfs:range ns1:PresenceType ; . @@ -1129,7 +1183,7 @@ being used in the AI system."""@en ; a owl:ObjectProperty ; rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI package."""@en ; - rdfs:range ; + rdfs:range ns1:DictionaryEntry ; . @@ -1161,14 +1215,14 @@ description."""@en ; a owl:ObjectProperty ; rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; - rdfs:range ; + rdfs:range ns1:DictionaryEntry ; . a owl:ObjectProperty ; rdfs:comment """Captures the threshold that was used for computation of a metric described in the metric field."""@en ; - rdfs:range ; + rdfs:range ns1:DictionaryEntry ; . @@ -1213,7 +1267,7 @@ being used in the AI system."""@en ; a owl:ObjectProperty ; rdfs:comment """Records if sensitive personal information is used during model training or could be used during the inference."""@en ; - rdfs:range ; + rdfs:range ns1:PresenceType ; . @@ -1246,7 +1300,7 @@ infrastructure that the build was invoked on."""@en ; a owl:ObjectProperty ; rdfs:comment """Property that describes the digest of the build configuration file used to invoke a build."""@en ; - rdfs:range ; + rdfs:range ns1:Hash ; . @@ -1264,59 +1318,59 @@ invoke a build."""@en ; a owl:ObjectProperty ; rdfs:comment "Property describing the session in which a build is invoked."@en ; - rdfs:range ; + rdfs:range ns1:DictionaryEntry ; . a owl:ObjectProperty ; rdfs:comment "Property describing a parameter used in an instance of a build."@en ; - rdfs:range ; + rdfs:range ns1:DictionaryEntry ; . a owl:NamedIndividual , - ; + ns1:AnnotationType ; rdfs:label "other" ; - rdfs:comment "Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element)."@en ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; . a owl:NamedIndividual , - ; + ns1:AnnotationType ; rdfs:label "review" ; rdfs:comment "Used when someone reviews the Element."@en ; . - +ns1:Bom a owl:Class ; rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details (provenence, composition, licensing, etc.) about a product."""@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Bundle ; sh:nodeKind sh:IRI ; . - +ns1:Bundle a owl:Class , sh:NodeShape ; rdfs:comment "A collection of Elements that have a shared context."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:ElementCollection ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:context ; ] ; . a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "cpe22" ; rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; . @@ -1324,7 +1378,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "cpe23" ; rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; . @@ -1332,7 +1386,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "cve" ; rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; . @@ -1340,15 +1394,15 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "email" ; - rdfs:comment "Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3."@en ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; . a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "gitoid" ; rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; . @@ -1356,7 +1410,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "other" ; rdfs:comment "Used when the type does not match any of the other options."@en ; . @@ -1364,7 +1418,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "packageUrl" ; rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; . @@ -1372,7 +1426,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "securityOther" ; rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; . @@ -1380,7 +1434,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "swhid" ; rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; . @@ -1388,15 +1442,15 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "swid" ; - rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3."@en ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; . a owl:NamedIndividual , - ; + ns1:ExternalIdentifierType ; rdfs:label "urlScheme" ; rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; . @@ -1404,7 +1458,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "altDownloadLocation" ; rdfs:comment "A reference to an alternative download location."@en ; . @@ -1412,7 +1466,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "altWebPage" ; rdfs:comment "A reference to an alternative web page."@en ; . @@ -1420,7 +1474,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "binaryArtifact" ; rdfs:comment "A reference to binary artifacts related to a package."@en ; . @@ -1428,7 +1482,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "bower" ; rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; . @@ -1436,7 +1490,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "buildMeta" ; rdfs:comment "A reference build metadata related to a published package."@en ; . @@ -1444,7 +1498,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "buildSystem" ; rdfs:comment "A reference build system used to create or publish the package."@en ; . @@ -1452,7 +1506,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "certificationReport" ; rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; . @@ -1460,7 +1514,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "chat" ; rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; . @@ -1468,7 +1522,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "componentAnalysisReport" ; rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; . @@ -1476,7 +1530,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "cwe" ; rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; . @@ -1484,7 +1538,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "documentation" ; rdfs:comment "A reference to the documentation for a package."@en ; . @@ -1492,7 +1546,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "dynamicAnalysisReport" ; rdfs:comment "A reference to a dynamic analysis report for a package."@en ; . @@ -1500,7 +1554,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "eolNotice" ; rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; . @@ -1508,7 +1562,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "exportControlAssessment" ; rdfs:comment "A reference to a export control assessment for a package."@en ; . @@ -1516,7 +1570,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "funding" ; rdfs:comment "A reference to funding information related to a package."@en ; . @@ -1524,7 +1578,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "issueTracker" ; rdfs:comment "A reference to the issue tracker for a package."@en ; . @@ -1532,7 +1586,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "license" ; rdfs:comment "A reference to additional license information related to an artifact."@en ; . @@ -1540,7 +1594,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "mailingList" ; rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; . @@ -1548,7 +1602,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "mavenCentral" ; rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; . @@ -1556,7 +1610,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "metrics" ; rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; . @@ -1564,7 +1618,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "npm" ; rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; . @@ -1572,7 +1626,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "nuget" ; rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; . @@ -1580,7 +1634,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "other" ; rdfs:comment "Used when the type does not match any of the other options."@en ; . @@ -1588,7 +1642,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "privacyAssessment" ; rdfs:comment "A reference to a privacy assessment for a package."@en ; . @@ -1596,7 +1650,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "productMetadata" ; rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; . @@ -1604,7 +1658,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "purchaseOrder" ; rdfs:comment "A reference to a purchase order for a package."@en ; . @@ -1612,7 +1666,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "qualityAssessmentReport" ; rdfs:comment "A reference to a quality assessment for a package."@en ; . @@ -1620,7 +1674,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "releaseHistory" ; rdfs:comment "A reference to a published list of releases for a package."@en ; . @@ -1628,7 +1682,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "releaseNotes" ; rdfs:comment "A reference to the release notes for a package."@en ; . @@ -1636,7 +1690,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "riskAssessment" ; rdfs:comment "A reference to a risk assessment for a package."@en ; . @@ -1644,7 +1698,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "runtimeAnalysisReport" ; rdfs:comment "A reference to a runtime analysis report for a package."@en ; . @@ -1652,7 +1706,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "secureSoftwareAttestation" ; rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; . @@ -1660,7 +1714,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "securityAdversaryModel" ; rdfs:comment "A reference to the security adversary model for a package."@en ; . @@ -1668,7 +1722,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "securityAdvisory" ; rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; . @@ -1676,7 +1730,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "securityFix" ; rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; . @@ -1684,7 +1738,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "securityOther" ; rdfs:comment "A reference to related security information of unspecified type."@en ; . @@ -1692,7 +1746,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "securityPenTestReport" ; rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; . @@ -1700,7 +1754,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "securityPolicy" ; rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; . @@ -1708,7 +1762,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "securityThreatModel" ; rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; . @@ -1716,7 +1770,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "socialMedia" ; rdfs:comment "A reference to a social media channel for a package."@en ; . @@ -1724,7 +1778,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "sourceArtifact" ; rdfs:comment "A reference to an artifact containing the sources for a package."@en ; . @@ -1732,7 +1786,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "staticAnalysisReport" ; rdfs:comment "A reference to a static analysis report for a package."@en ; . @@ -1740,7 +1794,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "support" ; rdfs:comment "A reference to the software support channel or other support information for a package."@en ; . @@ -1748,7 +1802,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "vcs" ; rdfs:comment "A reference to a version control system related to a software artifact."@en ; . @@ -1756,7 +1810,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "vulnerabilityDisclosureReport" ; rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; . @@ -1764,7 +1818,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:ExternalRefType ; rdfs:label "vulnerabilityExploitabilityAssessment" ; rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; . @@ -1772,7 +1826,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:LifecycleScopeType ; rdfs:label "build" ; rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; . @@ -1780,7 +1834,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:LifecycleScopeType ; rdfs:label "design" ; rdfs:comment "A relationship has specific context implications during an element's design."@en ; . @@ -1788,7 +1842,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:LifecycleScopeType ; rdfs:label "development" ; rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; . @@ -1796,7 +1850,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:LifecycleScopeType ; rdfs:label "other" ; rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; . @@ -1804,7 +1858,7 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:LifecycleScopeType ; rdfs:label "runtime" ; rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; . @@ -1812,35 +1866,22 @@ invoke a build."""@en ; a owl:NamedIndividual , - ; + ns1:LifecycleScopeType ; rdfs:label "test" ; rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; . - - a - owl:NamedIndividual , - ; - rdfs:comment """An Individual Value for Element representing a set of Elements of unknown -identify or cardinality (number)."""@en ; - rdfs:range ; - owl:sameAs ; -. - - - a - owl:NamedIndividual , - ; - rdfs:comment """An Individual Value for Element representing a set of Elements with -cardinality (number/count) of zero."""@en ; - rdfs:range ; - owl:sameAs ; +ns1:Organization + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns1:Agent ; + sh:nodeKind sh:IRI ; . a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "ai" ; rdfs:comment "the element follows the AI profile specification"@en ; . @@ -1848,7 +1889,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "build" ; rdfs:comment "the element follows the Build profile specification"@en ; . @@ -1856,7 +1897,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "core" ; rdfs:comment "the element follows the Core profile specification"@en ; . @@ -1864,7 +1905,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "dataset" ; rdfs:comment "the element follows the Dataset profile specification"@en ; . @@ -1872,15 +1913,15 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "expandedLicensing" ; - rdfs:comment "the element follows the expanded Licensing profile specification"@en ; + rdfs:comment "the element follows the ExpandedLicensing profile specification"@en ; . a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "extension" ; rdfs:comment "the element follows the Extension profile specification"@en ; . @@ -1888,7 +1929,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "lite" ; rdfs:comment "the element follows the Lite profile specification"@en ; . @@ -1896,7 +1937,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "security" ; rdfs:comment "the element follows the Security profile specification"@en ; . @@ -1904,15 +1945,15 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "simpleLicensing" ; - rdfs:comment "the element follows the simple Licensing profile specification"@en ; + rdfs:comment "the element follows the SimpleLicensing profile specification"@en ; . a owl:NamedIndividual , - ; + ns1:ProfileIdentifierType ; rdfs:label "software" ; rdfs:comment "the element follows the Software profile specification"@en ; . @@ -1920,7 +1961,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipCompleteness ; rdfs:label "complete" ; rdfs:comment "The relationship is known to be exhaustive."@en ; . @@ -1928,7 +1969,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipCompleteness ; rdfs:label "incomplete" ; rdfs:comment "The relationship is known not to be exhaustive."@en ; . @@ -1936,7 +1977,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipCompleteness ; rdfs:label "noAssertion" ; rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; . @@ -1944,7 +1985,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "affects" ; rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; . @@ -1952,7 +1993,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "amendedBy" ; rdfs:comment "The `from` Element is amended by each `to` Element."@en ; . @@ -1960,7 +2001,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "ancestorOf" ; rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; . @@ -1968,7 +2009,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "availableFrom" ; rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; . @@ -1976,7 +2017,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "configures" ; rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; . @@ -1984,7 +2025,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "contains" ; rdfs:comment "The `from` Element contains each `to` Element."@en ; . @@ -1992,7 +2033,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "coordinatedBy" ; rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; . @@ -2000,7 +2041,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "copiedTo" ; rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; . @@ -2008,7 +2049,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "delegatedTo" ; rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; . @@ -2016,7 +2057,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "dependsOn" ; rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; . @@ -2024,7 +2065,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "descendantOf" ; rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; . @@ -2032,7 +2073,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "describes" ; rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; . @@ -2040,7 +2081,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "doesNotAffect" ; rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; . @@ -2048,7 +2089,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "expandsTo" ; rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; . @@ -2056,7 +2097,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "exploitCreatedBy" ; rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; . @@ -2064,7 +2105,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "fixedBy" ; rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; . @@ -2072,7 +2113,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "fixedIn" ; rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; . @@ -2080,7 +2121,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "foundBy" ; rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; . @@ -2088,7 +2129,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "generates" ; rdfs:comment "The `from` Element generates each `to` Element."@en ; . @@ -2096,7 +2137,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasAddedFile" ; rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; . @@ -2104,7 +2145,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasAssessmentFor" ; rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; . @@ -2112,7 +2153,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasAssociatedVulnerability" ; rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; . @@ -2120,7 +2161,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasConcludedLicense" ; rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; . @@ -2128,7 +2169,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasDataFile" ; rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; . @@ -2136,7 +2177,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasDeclaredLicense" ; rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; . @@ -2144,7 +2185,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasDeletedFile" ; rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; . @@ -2152,7 +2193,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasDependencyManifest" ; rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; . @@ -2160,7 +2201,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasDistributionArtifact" ; rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; . @@ -2168,7 +2209,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasDocumentation" ; rdfs:comment "The `from` Element is documented by each `to` Element."@en ; . @@ -2176,7 +2217,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasDynamicLink" ; rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; . @@ -2184,7 +2225,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasEvidence" ; rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; . @@ -2192,7 +2233,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasExample" ; rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; . @@ -2200,7 +2241,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasHost" ; rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; . @@ -2208,7 +2249,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasInput" ; rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; . @@ -2216,7 +2257,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasMetadata" ; rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; . @@ -2224,7 +2265,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasOptionalComponent" ; rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; . @@ -2232,7 +2273,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasOptionalDependency" ; rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; . @@ -2240,7 +2281,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasOutput" ; rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; . @@ -2248,7 +2289,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasPrerequisite" ; rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; . @@ -2256,7 +2297,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasProvidedDependency" ; rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; . @@ -2264,7 +2305,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasRequirement" ; rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; . @@ -2272,7 +2313,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasSpecification" ; rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; . @@ -2280,7 +2321,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasStaticLink" ; rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; . @@ -2288,7 +2329,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasTest" ; rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; . @@ -2296,7 +2337,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasTestCase" ; rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; . @@ -2304,7 +2345,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "hasVariant" ; rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; . @@ -2312,7 +2353,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "invokedBy" ; rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; . @@ -2320,7 +2361,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "modifiedBy" ; rdfs:comment "The `from` Element is modified by each `to` Element."@en ; . @@ -2328,15 +2369,15 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "other" ; - rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless)."@en ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; . a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "packagedBy" ; rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; . @@ -2344,7 +2385,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "patchedBy" ; rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; . @@ -2352,7 +2393,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "publishedBy" ; rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; . @@ -2360,7 +2401,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "reportedBy" ; rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; . @@ -2368,7 +2409,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "republishedBy" ; rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; . @@ -2376,7 +2417,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "serializedInArtifact" ; rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; . @@ -2384,7 +2425,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "testedOn" ; rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; . @@ -2392,7 +2433,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "trainedOn" ; rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; . @@ -2400,7 +2441,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "underInvestigationFor" ; rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; . @@ -2408,7 +2449,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:RelationshipType ; rdfs:label "usesTool" ; rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; . @@ -2416,7 +2457,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:SupportType ; rdfs:label "deployed" ; rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; . @@ -2424,7 +2465,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:SupportType ; rdfs:label "development" ; rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; . @@ -2432,7 +2473,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:SupportType ; rdfs:label "endOfSupport" ; rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; . @@ -2440,7 +2481,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:SupportType ; rdfs:label "limitedSupport" ; rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; . @@ -2448,7 +2489,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:SupportType ; rdfs:label "noAssertion" ; rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; . @@ -2456,7 +2497,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:SupportType ; rdfs:label "noSupport" ; rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; . @@ -2464,317 +2505,317 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual , - ; + ns1:SupportType ; rdfs:label "support" ; rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; . - +ns1:annotationType a owl:ObjectProperty ; rdfs:comment "Describes the type of annotation."@en ; - rdfs:range ; + rdfs:range ns1:AnnotationType ; . - +ns1:beginIntegerRange a owl:DatatypeProperty ; rdfs:comment "Defines the beginning of a range."@en ; rdfs:range xsd:positiveInteger ; . - +ns1:builtTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time an artifact was built."@en ; rdfs:range xsd:dateTimeStamp ; . - +ns1:completeness a owl:ObjectProperty ; rdfs:comment "Provides information about the completeness of relationships."@en ; - rdfs:range ; + rdfs:range ns1:RelationshipCompleteness ; . - +ns1:context a owl:DatatypeProperty ; rdfs:comment """Gives information about the circumstances or unifying properties that Elements of the bundle have been assembled under."""@en ; rdfs:range xsd:string ; . - +ns1:created a owl:DatatypeProperty ; rdfs:comment "Identifies when the Element was originally created."@en ; rdfs:range xsd:dateTimeStamp ; . - +ns1:createdBy a owl:ObjectProperty ; rdfs:comment "Identifies who or what created the Element."@en ; - rdfs:range ; + rdfs:range ns1:Agent ; . - +ns1:createdUsing a owl:ObjectProperty ; rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; - rdfs:range ; + rdfs:range ns1:Tool ; . - +ns1:creationInfo a owl:ObjectProperty ; rdfs:comment "Provides information about the creation of the Element."@en ; - rdfs:range ; + rdfs:range ns1:CreationInfo ; . - +ns1:dataLicense a owl:ObjectProperty ; rdfs:comment """Provides the license under which the SPDX documentation of the Element can be used."""@en ; rdfs:range ; . - +ns1:definingArtifact a owl:ObjectProperty ; rdfs:comment """Artifact representing a serialization instance of SPDX data containing the definition of a particular Element."""@en ; - rdfs:range ; + rdfs:range ns1:Artifact ; . - +ns1:description a owl:DatatypeProperty ; rdfs:comment "Provides a detailed description of the Element."@en ; rdfs:range xsd:string ; . - +ns1:element a owl:ObjectProperty ; rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; - rdfs:range ; + rdfs:range ns1:Element ; . - +ns1:endIntegerRange a owl:DatatypeProperty ; rdfs:comment "Defines the end of a range."@en ; rdfs:range xsd:positiveInteger ; . - +ns1:endTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; rdfs:range xsd:dateTimeStamp ; . - +ns1:extension a owl:ObjectProperty ; rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; rdfs:range ; . - +ns1:externalIdentifier a owl:ObjectProperty ; rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content that uniquely identifies an Element."""@en ; - rdfs:range ; + rdfs:range ns1:ExternalIdentifier ; . - +ns1:externalIdentifierType a owl:ObjectProperty ; rdfs:comment "Specifies the type of the external identifier."@en ; - rdfs:range ; + rdfs:range ns1:ExternalIdentifierType ; . - +ns1:externalRef a owl:ObjectProperty ; rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content that provides additional characteristics of an Element."""@en ; - rdfs:range ; + rdfs:range ns1:ExternalRef ; . - +ns1:externalRefType a owl:ObjectProperty ; rdfs:comment "Specifies the type of the external reference."@en ; - rdfs:range ; + rdfs:range ns1:ExternalRefType ; . - +ns1:externalSpdxId a owl:DatatypeProperty ; - rdfs:comment """Identifies an external Element used within a Document but defined external to -that Document."""@en ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; rdfs:range xsd:anyURI ; . - +ns1:from a owl:ObjectProperty ; rdfs:comment "References the Element on the left-hand side of a relationship."@en ; - rdfs:range ; + rdfs:range ns1:Element ; . - +ns1:identifier a owl:DatatypeProperty ; rdfs:comment "Uniquely identifies an external element."@en ; rdfs:range xsd:string ; . - +ns1:identifierLocator a owl:DatatypeProperty ; rdfs:comment "Provides the location for more information regarding an external identifier."@en ; rdfs:range xsd:anyURI ; . - +ns1:import a owl:ObjectProperty ; rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; - rdfs:range ; + rdfs:range ns1:ExternalMap ; . - +ns1:issuingAuthority a owl:DatatypeProperty ; rdfs:comment "An entity that is authorized to issue identification credentials."@en ; rdfs:range xsd:string ; . - +ns1:key a owl:DatatypeProperty ; rdfs:comment "A key used in a generic key-value pair."@en ; rdfs:range xsd:string ; . - +ns1:locationHint a owl:DatatypeProperty ; rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; rdfs:range xsd:anyURI ; . - +ns1:locator a owl:DatatypeProperty ; rdfs:comment "Provides the location of an external reference."@en ; rdfs:range xsd:string ; . - +ns1:name a owl:DatatypeProperty ; rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; rdfs:range xsd:string ; . - +ns1:namespace a owl:DatatypeProperty ; rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an Element ID."""@en ; rdfs:range xsd:anyURI ; . - +ns1:namespaceMap a owl:ObjectProperty ; rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; - rdfs:range ; + rdfs:range ns1:NamespaceMap ; . - +ns1:originatedBy a owl:ObjectProperty ; rdfs:comment "Identifies from where or whom the Element originally came."@en ; - rdfs:range ; + rdfs:range ns1:Agent ; . - +ns1:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; rdfs:comment """The relative file name of a file to be excluded from the `PackageVerificationCode`."""@en ; rdfs:range xsd:string ; . - +ns1:prefix a owl:DatatypeProperty ; rdfs:comment "A substitute for a URI."@en ; rdfs:range xsd:string ; . - +ns1:profileConformance a owl:ObjectProperty ; rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to conform to."""@en ; - rdfs:range ; + rdfs:range ns1:ProfileIdentifierType ; . - +ns1:relationshipType a owl:ObjectProperty ; rdfs:comment "Information about the relationship between two Elements."@en ; - rdfs:range ; + rdfs:range ns1:RelationshipType ; . - +ns1:releaseTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time an artifact was released."@en ; rdfs:range xsd:dateTimeStamp ; . - +ns1:rootElement a owl:ObjectProperty ; rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; - rdfs:range ; + rdfs:range ns1:Element ; . - +ns1:scope a owl:ObjectProperty ; rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; - rdfs:range ; + rdfs:range ns1:LifecycleScopeType ; . - +ns1:specVersion a owl:DatatypeProperty ; rdfs:comment """Provides a reference number that can be used to understand how to parse and interpret an Element."""@en ; rdfs:range xsd:string ; . - +ns1:standardName a owl:DatatypeProperty ; rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; rdfs:range xsd:string ; . - +ns1:startTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; rdfs:range xsd:dateTimeStamp ; . - +ns1:statement a owl:DatatypeProperty ; rdfs:comment "Commentary on an assertion that an annotator has made."@en ; rdfs:range xsd:string ; . - +ns1:subject a owl:ObjectProperty ; rdfs:comment "An Element an annotator has made an assertion about."@en ; - rdfs:range ; + rdfs:range ns1:Element ; . - +ns1:summary a owl:DatatypeProperty ; rdfs:comment "A short description of an Element."@en ; rdfs:range xsd:string ; . - +ns1:supportLevel a owl:ObjectProperty ; rdfs:comment "Specifies the level of support associated with an artifact."@en ; - rdfs:range ; + rdfs:range ns1:SupportType ; . - +ns1:to a owl:ObjectProperty ; rdfs:comment "References an Element on the right-hand side of a relationship."@en ; - rdfs:range ; + rdfs:range ns1:Element ; . - +ns1:validUntilTime a owl:DatatypeProperty ; rdfs:comment """Specifies until when the artifact can be used before its usage needs to be reassessed."""@en ; rdfs:range xsd:dateTimeStamp ; . - +ns1:value a owl:DatatypeProperty ; rdfs:comment "A value used in a generic key-value pair."@en ; rdfs:range xsd:string ; @@ -3021,7 +3062,7 @@ reassessed."""@en ; a owl:ObjectProperty ; rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; - rdfs:range ; + rdfs:range ns1:PresenceType ; . @@ -3039,7 +3080,7 @@ reassessed."""@en ; a owl:ObjectProperty ; rdfs:comment "Describes a sensor used for collecting the data."@en ; - rdfs:range ; + rdfs:range ns1:DictionaryEntry ; . @@ -3114,13 +3155,13 @@ by the License."""@en ; a owl:DatatypeProperty ; - rdfs:comment "A name used in a CdxExtension name-value pair."@en ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; rdfs:range xsd:string ; . a owl:DatatypeProperty ; - rdfs:comment "A value used in a CdxExtension name-value pair."@en ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; rdfs:range xsd:string ; . @@ -3236,7 +3277,7 @@ to mitigate a vulnerability."""@en ; a owl:ObjectProperty ; rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was found."""@en ; - rdfs:range ; + rdfs:range ; . @@ -3314,7 +3355,7 @@ relationship."""@en ; a owl:ObjectProperty ; rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom License Addition to its URI ID."""@en ; - rdfs:range ; + rdfs:range ns1:DictionaryEntry ; . @@ -3426,7 +3467,7 @@ a software Package, File or Snippet."""@en ; a owl:DatatypeProperty ; rdfs:comment """Defines the byte range in the original host file that the snippet information applies to."""@en ; - rdfs:range ; + rdfs:range ns1:PositiveIntegerRange ; . @@ -3479,7 +3520,7 @@ package's home page."""@en ; a owl:DatatypeProperty ; rdfs:comment """Defines the line range in the original host file that the snippet information applies to."""@en ; - rdfs:range ; + rdfs:range ns1:PositiveIntegerRange ; . @@ -3526,12 +3567,12 @@ about the origin of the package."""@en ; sh:NodeShape ; rdfs:comment """A class for describing the energy consumption incurred by an AI model in different stages of its lifecycle."""@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:class ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ; ] , [ sh:class ; @@ -3541,123 +3582,43 @@ different stages of its lifecycle."""@en ; [ sh:class ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ; ] ; . - +ns1:ExternalIdentifier a owl:Class , sh:NodeShape ; - rdfs:comment "Provides information about the creation of the Element."@en ; - sh:nodeKind sh:BlankNode ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ - sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; - ] , - [ - sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:class ; - sh:nodeKind sh:IRI ; - sh:path ; - ] , - [ - sh:class ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; - ] , - [ - sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:minCount 1 ; + sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; - ] ; -. - - - a - , - owl:Class , - sh:NodeShape ; - rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI ; - sh:property - [ - sh:class ; - sh:in ( - - - - - - - - - - - ) ; - sh:nodeKind sh:IRI ; - sh:path ; - ] , - [ - sh:class ; - sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:identifierLocator ; ] , - [ - sh:class ; - sh:nodeKind sh:IRI ; - sh:path ; - ] ; -. - - - a - owl:Class , - sh:NodeShape ; - rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:datatype xsd:anyURI ; - sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:issuingAuthority ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:identifier ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:comment ; ] , [ - sh:class ; + sh:class ns1:ExternalIdentifierType ; sh:in ( @@ -3674,58 +3635,53 @@ different stages of its lifecycle."""@en ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:externalIdentifierType ; ] ; . - +ns1:ExternalMap a owl:Class , sh:NodeShape ; - rdfs:comment """A map of Element identifiers that are used within a Document but defined -external to that Document."""@en ; - sh:nodeKind sh:BlankNode ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:locationHint ; ] , [ - sh:class ; + sh:class ns1:IntegrityMethod ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ns1:verifiedUsing ; ] , [ - sh:class ; + sh:class ns1:Artifact ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:definingArtifact ; ] , [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:externalSpdxId ; ] ; . - +ns1:ExternalRef a owl:Class , sh:NodeShape ; rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ - sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:class ; + sh:class ns1:ExternalRefType ; sh:in ( @@ -3776,40 +3732,38 @@ external to that Document."""@en ; ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:externalRefType ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:contentType ; sh:pattern "^[^\\/]+\\/[^\\/]+$" ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:comment ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns1:locator ; ] ; . - +ns1:Hash a owl:Class , sh:NodeShape ; rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; + rdfs:subClassOf ns1:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ - sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:class ; + sh:class ns1:HashAlgorithm ; sh:in ( @@ -3837,46 +3791,53 @@ external to that Document."""@en ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:algorithm ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:hashValue ; ] ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "adler32" ; - rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3."@en ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "blake2b256" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "blake2b384" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "blake2b512" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "blake3" ; rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; . @@ -3884,7 +3845,7 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "crystalsDilithium" ; rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; . @@ -3892,7 +3853,7 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "crystalsKyber" ; rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; . @@ -3900,7 +3861,7 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "falcon" ; rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; . @@ -3908,31 +3869,31 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "md2" ; - rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/)."@en ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "md4" ; - rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186)."@en ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "md5" ; - rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321)."@en ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "md6" ; rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; . @@ -3940,7 +3901,7 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "other" ; rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; . @@ -3948,39 +3909,39 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "sha1" ; - rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174)."@en ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "sha224" ; - rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874)."@en ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "sha256" ; - rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "sha384" ; - rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; . a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "sha3_224" ; rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; . @@ -3988,7 +3949,7 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "sha3_256" ; rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; . @@ -3996,7 +3957,7 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "sha3_384" ; rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; . @@ -4004,7 +3965,7 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "sha3_512" ; rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; . @@ -4012,44 +3973,69 @@ external to that Document."""@en ; a owl:NamedIndividual , - ; + ns1:HashAlgorithm ; rdfs:label "sha512" ; - rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + +ns1:IndividualElement + a owl:Class ; + rdfs:comment """A concrete subclass of Element used by Individuals in the +Core profile."""@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; . - +ns1:NamespaceMap a owl:Class , sh:NodeShape ; rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:prefix ; ] , [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:namespace ; ] ; . - +ns1:Relationship a owl:Class , sh:NodeShape ; rdfs:comment "Describes a relationship between one or more elements."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; sh:property [ - sh:class ; + sh:class ns1:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:to ; + ] , + [ + sh:class ns1:RelationshipCompleteness ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:completeness ; + ] , + [ + sh:class ns1:RelationshipType ; sh:in ( @@ -4114,79 +4100,70 @@ external to that Document."""@en ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:relationshipType ; ] , [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:startTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; ] , [ - sh:class ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; - ] , - [ - sh:class ; + sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; + sh:nodeKind sh:Literal ; + sh:path ns1:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; ] , [ - sh:class ; - sh:in ( - - - - ) ; + sh:class ns1:Element ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; - ] , - [ - sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + sh:path ns1:from ; ] ; . - +ns1:Tool a owl:Class ; rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; . - +ns1:algorithm a owl:ObjectProperty ; rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; - rdfs:range ; + rdfs:range ns1:HashAlgorithm ; . - +ns1:hashValue a owl:DatatypeProperty ; rdfs:comment "The result of applying a hash algorithm to an Element."@en ; rdfs:range xsd:string ; . - +ns1:suppliedBy a owl:ObjectProperty ; rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship referenced by the Element."""@en ; - rdfs:range ; + rdfs:range ns1:Agent ; . - +ns1:verifiedUsing a owl:ObjectProperty ; rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be asserted."""@en ; - rdfs:range ; + rdfs:range ns1:IntegrityMethod ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; . @@ -4234,7 +4211,7 @@ License or LicenseAddition."""@en ; owl:Class , sh:NodeShape ; rdfs:comment "A property name with an associated value."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:string ; @@ -4326,8 +4303,8 @@ License or LicenseAddition."""@en ; owl:Class , sh:NodeShape ; rdfs:comment "A canonical, unique, immutable identifier"@en ; - rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; + rdfs:subClassOf ns1:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:anyURI ; @@ -4357,13 +4334,6 @@ License or LicenseAddition."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; sh:property - [ - sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^[^\\/]+\\/[^\\/]+$" ; - ] , [ sh:class ; sh:in ( @@ -4373,6 +4343,13 @@ License or LicenseAddition."""@en ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; ] ; . @@ -4385,11 +4362,17 @@ software."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ sh:datatype xsd:string ; @@ -4403,17 +4386,11 @@ software."""@en ; sh:nodeKind sh:Literal ; sh:path ; ] , - [ - sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] ; . @@ -4422,7 +4399,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "application" ; - rdfs:comment "the Element is a software application"@en ; + rdfs:comment "The Element is a software application."@en ; . @@ -4430,7 +4407,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "archive" ; - rdfs:comment "the Element is an archived collection of one or more files (.tar, .zip, etc)"@en ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; . @@ -4438,7 +4415,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "bom" ; - rdfs:comment "Element is a bill of materials"@en ; + rdfs:comment "The Element is a bill of materials."@en ; . @@ -4446,7 +4423,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "configuration" ; - rdfs:comment "Element is configuration data"@en ; + rdfs:comment "The Element is configuration data."@en ; . @@ -4454,7 +4431,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "container" ; - rdfs:comment "the Element is a container image which can be used by a container runtime application"@en ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; . @@ -4462,7 +4439,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "data" ; - rdfs:comment "Element is data"@en ; + rdfs:comment "The Element is data."@en ; . @@ -4470,7 +4447,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "device" ; - rdfs:comment "the Element refers to a chipset, processor, or electronic board"@en ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; . @@ -4478,7 +4455,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "deviceDriver" ; - rdfs:comment "Element represents software that controls hardware devices"@en ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; . @@ -4486,7 +4463,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "diskImage" ; - rdfs:comment "the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; . @@ -4494,7 +4471,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "documentation" ; - rdfs:comment "Element is documentation"@en ; + rdfs:comment "The Element is documentation."@en ; . @@ -4502,7 +4479,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "evidence" ; - rdfs:comment "the Element is the evidence that a specification or requirement has been fulfilled"@en ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; . @@ -4510,7 +4487,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "executable" ; - rdfs:comment "Element is an Artifact that can be run on a computer"@en ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; . @@ -4518,7 +4495,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "file" ; - rdfs:comment "the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc)"@en ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; . @@ -4526,7 +4503,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "filesystemImage" ; - rdfs:comment "the Element is a file system image that can be written to a disk (or virtual) partition"@en ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; . @@ -4534,7 +4511,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "firmware" ; - rdfs:comment "the Element provides low level control over a device's hardware"@en ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; . @@ -4542,7 +4519,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "framework" ; - rdfs:comment "the Element is a software framework"@en ; + rdfs:comment "The Element is a software framework."@en ; . @@ -4550,7 +4527,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "install" ; - rdfs:comment "the Element is used to install software on disk"@en ; + rdfs:comment "The Element is used to install software on disk."@en ; . @@ -4558,7 +4535,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "library" ; - rdfs:comment "the Element is a software library"@en ; + rdfs:comment "The Element is a software library."@en ; . @@ -4566,7 +4543,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "manifest" ; - rdfs:comment "the Element is a software manifest"@en ; + rdfs:comment "The Element is a software manifest."@en ; . @@ -4574,7 +4551,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "model" ; - rdfs:comment "the Element is a machine learning or artificial intelligence model"@en ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; . @@ -4582,7 +4559,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "module" ; - rdfs:comment "the Element is a module of a piece of software"@en ; + rdfs:comment "The Element is a module of a piece of software."@en ; . @@ -4590,7 +4567,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "operatingSystem" ; - rdfs:comment "the Element is an operating system"@en ; + rdfs:comment "The Element is an operating system."@en ; . @@ -4598,7 +4575,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "other" ; - rdfs:comment "the Element doesn't fit into any of the other categories"@en ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; . @@ -4606,7 +4583,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "patch" ; - rdfs:comment "Element contains a set of changes to update, fix, or improve another Element"@en ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; . @@ -4614,7 +4591,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "platform" ; - rdfs:comment "Element represents a runtime environment"@en ; + rdfs:comment "The Element represents a runtime environment."@en ; . @@ -4622,7 +4599,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "requirement" ; - rdfs:comment "the Element provides a requirement needed as input for another Element"@en ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; . @@ -4630,7 +4607,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "source" ; - rdfs:comment "the Element is a single or a collection of source files"@en ; + rdfs:comment "The Element is a single or a collection of source files."@en ; . @@ -4638,7 +4615,7 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "specification" ; - rdfs:comment "the Element is a plan, guideline or strategy how to create, perform or analyse an application"@en ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; . @@ -4646,13 +4623,58 @@ software."""@en ; owl:NamedIndividual , ; rdfs:label "test" ; - rdfs:comment "The Element is a test used to verify functionality on an software element"@en ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + +ns1:ElementCollection + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ns1:ProfileIdentifierType ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ns1:profileConformance ; + ] , + [ + sh:class ns1:Element ; + sh:nodeKind sh:IRI ; + sh:path ns1:element ; + ] , + [ + sh:message "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ns1:ElementCollection ; + ] ; + sh:path rdf:type ; + ] , + [ + sh:class ns1:Element ; + sh:nodeKind sh:IRI ; + sh:path ns1:rootElement ; + ] ; . a owl:NamedIndividual , - ; + ns1:PresenceType ; rdfs:label "no" ; rdfs:comment "Indicates absence of the field."@en ; . @@ -4660,7 +4682,7 @@ software."""@en ; a owl:NamedIndividual , - ; + ns1:PresenceType ; rdfs:label "noAssertion" ; rdfs:comment "Makes no assertion about the field."@en ; . @@ -4668,25 +4690,17 @@ software."""@en ; a owl:NamedIndividual , - ; + ns1:PresenceType ; rdfs:label "yes" ; rdfs:comment "Indicates presence of the field."@en ; . - +ns1:contentType a owl:DatatypeProperty ; rdfs:comment "Provides information about the content type of an Element or a Property."@en ; rdfs:range xsd:string ; . - - a - , - owl:Class ; - rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; - sh:nodeKind sh:BlankNode ; -. - a owl:DatatypeProperty ; rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; @@ -4699,147 +4713,117 @@ software."""@en ; rdfs:range xsd:string ; . - +ns1:AnnotationType + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + +ns1:PositiveIntegerRange a - , owl:Class , sh:NodeShape ; - rdfs:comment "A distinct article or unit related to Software."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ - sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:datatype xsd:string ; + sh:datatype xsd:positiveInteger ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:beginIntegerRange ; ] , [ - sh:class ; - sh:in ( - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ) ; + sh:datatype xsd:positiveInteger ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; - ] , - [ - sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; - ] , + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:endIntegerRange ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ - sh:class ; - sh:in ( - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ) ; - sh:nodeKind sh:IRI ; - sh:path ; + sh:message "https://spdx.org/rdf/3.0.1/terms/Extension/Extension is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ; + ] ; + sh:path rdf:type ; ] ; . - + a owl:Class ; - rdfs:comment "Specifies the type of an annotation."@en ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; . - +ns1:Artifact a - , owl:Class , sh:NodeShape ; rdfs:comment "A distinct article or unit within the digital domain."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:builtTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; ] , [ - sh:datatype xsd:dateTimeStamp ; + sh:class ns1:Agent ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + sh:nodeKind sh:IRI ; + sh:path ns1:suppliedBy ; ] , [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:standardName ; ] , [ - sh:class ; - sh:maxCount 1 ; + sh:message "https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ns1:Artifact ; + ] ; + sh:path rdf:type ; + ] , + [ + sh:class ns1:Agent ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:originatedBy ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; ] , [ - sh:class ; + sh:class ns1:SupportType ; sh:in ( @@ -4850,65 +4834,56 @@ software."""@en ; ) ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:supportLevel ; ] , [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:releaseTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; - ] , - [ - sh:class ; - sh:nodeKind sh:IRI ; - sh:path ; ] ; . - - a - owl:Class , - sh:NodeShape ; - rdfs:comment "A tuple of two positive integers that define a range."@en ; - sh:nodeKind sh:BlankNode ; - sh:property - [ - sh:datatype xsd:positiveInteger ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - ] , - [ - sh:datatype xsd:positiveInteger ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - ] ; +ns1:RelationshipCompleteness + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; . - +ns1:SpdxOrganization a - , - owl:Class ; - rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI ; + owl:NamedIndividual , + ns1:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; + ns1:creationInfo ; . - +ns1:comment + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + a owl:Class ; - rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the -ExpandedLicensing profile."""@en ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; + sh:property + [ + sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ; + ] ; + sh:path rdf:type ; + ] ; . a - , owl:Class , sh:NodeShape ; rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; @@ -4916,22 +4891,30 @@ ExpandedLicensing profile."""@en ; sh:nodeKind sh:IRI ; sh:property [ - sh:datatype xsd:string ; + sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ - sh:datatype xsd:boolean ; + sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; + ] , + [ + sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ; + ] ; + sh:path rdf:type ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ sh:datatype xsd:string ; @@ -4946,51 +4929,60 @@ ExpandedLicensing profile."""@en ; sh:path ; ] , [ - sh:datatype xsd:string ; + sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ - sh:datatype xsd:boolean ; - sh:maxCount 1 ; + sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ - sh:datatype xsd:anyURI ; + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] ; . a - , owl:Class , sh:NodeShape ; rdfs:comment """Abstract class for additional text intended to be added to a License, but which is not itself a standalone License."""@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ - sh:datatype xsd:anyURI ; + sh:datatype xsd:string ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; + ] , + [ + sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ; + ] ; + sh:path rdf:type ; ] , [ sh:datatype xsd:string ; @@ -5005,31 +4997,23 @@ which is not itself a standalone License."""@en ; sh:path ; ] , [ - sh:datatype xsd:boolean ; - sh:maxCount 1 ; + sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] , [ - sh:datatype xsd:string ; + sh:datatype xsd:boolean ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] ; . - - a owl:Class ; - rdfs:comment "Specifies the exploit catalog type."@en ; -. - a - , owl:Class , sh:NodeShape ; - rdfs:comment "Asbtract ancestor class for all VEX relationships"@en ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; sh:property @@ -5044,43 +5028,24 @@ which is not itself a standalone License."""@en ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ; + ] , + [ + sh:message "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ; + ] ; + sh:path rdf:type ; ] ; . - - a owl:Class ; - rdfs:comment "Specifies the type of a content identifier."@en ; -. - - - a owl:Class ; - rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; -. - - - a owl:Class ; - rdfs:comment "Specifies the unit of energy consumption."@en ; -. - - - a owl:Class ; - rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; -. - - - a owl:DatatypeProperty ; - rdfs:comment """Provide consumers with comments by the creator of the Element about the -Element."""@en ; - rdfs:range xsd:string ; -. - a owl:Class , sh:NodeShape ; rdfs:comment """The class that helps note down the quantity of energy consumption and the unit used for measurement."""@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:class ; @@ -5108,30 +5073,186 @@ used for measurement."""@en ; rdfs:comment "Specifies the safety risk level."@en ; . - + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + a - , owl:Class , sh:NodeShape ; - rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; - sh:nodeKind sh:BlankNode ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns1:Artifact ; + sh:nodeKind sh:IRI ; sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:message "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ; + ] ; + sh:path rdf:type ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; ] ; . - - a owl:Class ; - rdfs:comment "Categories of confidentiality level."@en ; +ns1:CreationInfo + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property + [ + sh:class ns1:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns1:createdUsing ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ns1:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:createdBy ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:comment ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; . - - a owl:Class ; - rdfs:comment "Specifies the SSVC decision type."@en ; +ns1:IntegrityMethod + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property + [ + sh:message "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ns1:IntegrityMethod ; + ] ; + sh:path rdf:type ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:comment ; + ] ; . @@ -5144,28 +5265,45 @@ used for measurement."""@en ; rdfs:comment "Specifies the VEX justification type."@en ; . +ns1:LifecycleScopeType + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + a - , owl:Class , sh:NodeShape ; rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Relationship ; sh:nodeKind sh:IRI ; sh:property [ - sh:class ; + sh:class ns1:Agent ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ; + sh:path ns1:suppliedBy ; ] , [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; ] , + [ + sh:message "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ; + ] ; + sh:path rdf:type ; + ] , [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; @@ -5173,96 +5311,89 @@ used for measurement."""@en ; sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; ] , - [ - sh:class ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ; - ] , [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; ] ; . - - a owl:Class ; - rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; -. - - - a owl:Class ; - rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; -. - a owl:Class ; rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that tools may create."""@en ; . - +ns1:PresenceType a owl:Class ; rdfs:comment "Categories of presence or absence."@en ; . - +ns1:SupportType a owl:Class ; rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; . - +ns1:Agent a owl:Class ; rdfs:comment "Agent represents anything with the potential to act on a system."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; . - - a - , - owl:Class ; - rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI ; -. - - +ns1:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; . - + a owl:Class ; - rdfs:comment "Enumeration of the valid profiles."@en ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:message "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ; + ] ; + sh:path rdf:type ; + ] ; . - +ns1:ExternalIdentifierType a owl:Class ; rdfs:comment "Specifies the type of an external identifier."@en ; . - +ns1:DictionaryEntry a owl:Class , sh:NodeShape ; rdfs:comment "A key with an associated value."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:value ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:key ; ] ; . @@ -5271,83 +5402,90 @@ tools may create."""@en ; rdfs:comment "Enumeration of dataset types."@en ; . - - a owl:Class ; - rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; -. - - +ns1:Element a - , owl:Class , sh:NodeShape ; rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; sh:nodeKind sh:IRI ; sh:property [ - sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:description ; ] , [ - sh:class ; + sh:class ns1:IntegrityMethod ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ns1:verifiedUsing ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:summary ; + ] , + [ + sh:class ns1:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:externalRef ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:comment ; ] , [ - sh:class ; + sh:class ns1:ExternalIdentifier ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ns1:externalIdentifier ; ] , [ - sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; + sh:message "https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not + [ + sh:hasValue ns1:Element ; + ] ; + sh:path rdf:type ; ] , [ - sh:class ; + sh:class ns1:CreationInfo ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ns1:creationInfo ; ] , [ sh:class ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ; + sh:path ns1:extension ; ] , [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:name ; ] ; . +ns1:HashAlgorithm + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + a owl:Class ; rdfs:comment "Provides information about the primary purpose of an Element."@en ; . - +ns1:ExternalRefType a owl:Class ; rdfs:comment "Specifies the type of an external reference."@en ; . - +ns1:RelationshipType a owl:Class ; rdfs:comment "Information about the relationship between two Elements."@en ; . diff --git a/rdf/spdx-model.n3 b/rdf/spdx-model.n3 index 6d1cbb3627..c55967d990 100644 --- a/rdf/spdx-model.n3 +++ b/rdf/spdx-model.n3 @@ -1,4 +1,5 @@ @prefix dcterms: . +@prefix ns1: . @prefix omg-ann: . @prefix owl: . @prefix rdf: . @@ -12,207 +13,225 @@ rdfs:comment "Specifies an AI package and its associated information."@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; + sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; sh:path ], [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:class ; + [ sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns1:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], [ sh:class ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; sh:path ], - [ sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], [ sh:datatype xsd:string ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + sh:path ], + [ sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + [ sh:class ns1:PresenceType ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ], + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ] . a owl:Class, sh:NodeShape ; rdfs:comment "Class that describes a build instance of software/artifacts."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:datatype xsd:dateTimeStamp ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:datatype xsd:anyURI ; + [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + sh:path ], + [ sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], + [ sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:datatype xsd:string ; + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns1:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . - a owl:Class, +ns1:Annotation a owl:Class, sh:NodeShape ; rdfs:comment "An assertion made in relation to one or more elements."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ], - [ sh:datatype xsd:string ; + sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:contentType ; sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns1:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:subject ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + sh:path ns1:statement ], + [ sh:class ns1:AnnotationType ; + sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ] . + sh:path ns1:annotationType ] . - a owl:Class, +ns1:LifecycleScopedRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Relationship ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; + sh:property [ sh:class ns1:LifecycleScopeType ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ] . + sh:path ns1:scope ] . - a owl:Class ; - rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI . +ns1:NoAssertionElement a owl:NamedIndividual, + ns1:IndividualElement ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; + ns1:creationInfo . - a owl:Class, +ns1:NoneElement a owl:NamedIndividual, + ns1:IndividualElement ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; + ns1:creationInfo . + +ns1:PackageVerificationCode a owl:Class, sh:NodeShape ; rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:string ; + rdfs:subClassOf ns1:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns1:HashAlgorithm ; + sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:algorithm ], + [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; - sh:in ( ) ; + sh:path ns1:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ] . + sh:nodeKind sh:Literal ; + sh:path ns1:hashValue ] . - a owl:Class ; +ns1:Person a owl:Class ; rdfs:comment "An individual human being."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Agent ; sh:nodeKind sh:IRI . - a owl:Class ; +ns1:SoftwareAgent a owl:Class ; rdfs:comment "A software agent."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Agent ; sh:nodeKind sh:IRI . - a owl:Class, +ns1:SpdxDocument a owl:Class, sh:NodeShape ; rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:ElementCollection ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; + sh:property [ sh:class ns1:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:import ], + [ sh:class ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:class ; + sh:path ns1:dataLicense ], + [ sh:class ns1:NamespaceMap ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ] . + sh:path ns1:namespaceMap ] . a owl:Class, sh:NodeShape ; rdfs:comment "Specifies a data package and its associated information."@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:string ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], + [ sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; - sh:in ( ) ; + sh:path ], + [ sh:datatype xsd:string ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ], + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], [ sh:class ; sh:in ( ) ; sh:minCount 1 ; @@ -222,37 +241,26 @@ sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ], [ sh:class ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; sh:path ], - [ sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], [ sh:datatype xsd:string ; - sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:nonNegativeInteger ; + [ sh:class ns1:PresenceType ; + sh:in ( ) ; sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ] . a owl:Class, sh:NodeShape ; @@ -294,11 +302,11 @@ only one of the elements applies."""@en ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ] . a owl:Class, sh:NodeShape ; @@ -308,25 +316,25 @@ only one of the elements applies."""@en ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ] . a owl:NamedIndividual, ; rdfs:comment """An Individual Value for License when no assertion can be made about its actual value."""@en ; - rdfs:range ; - = . + = ; + ns1:creationInfo . a owl:NamedIndividual, ; rdfs:comment """An Individual Value for License where the SPDX data creator determines that no license is present."""@en ; - rdfs:range ; - = . + = ; + ns1:creationInfo . a owl:Class, sh:NodeShape ; @@ -346,22 +354,22 @@ of the indicated License."""@en ; text applied to it."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; + sh:property [ sh:class ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; + sh:path ], + [ sh:class ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ] . + sh:path ] . a owl:Class, sh:NodeShape ; rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:class ; sh:minCount 1 ; sh:nodeKind sh:BlankNodeOrIRI ; @@ -416,16 +424,16 @@ text applied to it."""@en ; sh:minCount 1 ; sh:nodeKind sh:IRI ; sh:path ], - [ sh:datatype xsd:string ; + [ sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:decimal ; + sh:path ], + [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ] . a owl:Class, sh:NodeShape ; @@ -453,17 +461,17 @@ text applied to it."""@en ; sh:minCount 1 ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], [ sh:class ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ] . + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . a owl:Class, sh:NodeShape ; @@ -484,11 +492,13 @@ affected by the vulnerability."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; sh:path ] . @@ -504,12 +514,7 @@ a fix has been applied and are no longer affected."""@en ; not affected by the vulnerability."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ], - [ sh:datatype xsd:string ; + sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ], @@ -517,7 +522,12 @@ not affected by the vulnerability."""@en ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . a owl:Class ; rdfs:comment """Designates elements as products where the impact of a vulnerability is being @@ -528,7 +538,7 @@ investigated."""@en ; a owl:Class, sh:NodeShape ; rdfs:comment "Specifies a vulnerability and its associated information."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Artifact ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; @@ -538,12 +548,12 @@ investigated."""@en ; [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . a owl:Class, @@ -551,7 +561,7 @@ investigated."""@en ; rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; + sh:property [ sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; sh:path ], [ sh:datatype xsd:string ; @@ -568,7 +578,7 @@ investigated."""@en ; a owl:Class, sh:NodeShape ; rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; @@ -579,7 +589,7 @@ investigated."""@en ; a owl:Class, sh:NodeShape ; rdfs:comment "A collection of SPDX Elements describing a single package."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Bom ; sh:nodeKind sh:IRI ; sh:property [ sh:class ; sh:in ( ) ; @@ -591,19 +601,49 @@ investigated."""@en ; rdfs:comment "Describes a certain part of a file."@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; + sh:property [ sh:class ns1:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; sh:path ], - [ sh:class ; - sh:maxCount 1 ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:class ; + [ sh:class ns1:PositiveIntegerRange ; sh:maxCount 1 ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ] . + sh:path ] . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . spdx: a owl:Ontology ; rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; @@ -654,7 +694,7 @@ spdx: a owl:Ontology ; a owl:ObjectProperty ; rdfs:comment """Indicates whether the system can perform a decision or action without human involvement or guidance."""@en ; - rdfs:range . + rdfs:range ns1:PresenceType . a owl:DatatypeProperty ; rdfs:comment "Captures the domain in which the AI package can be used."@en ; @@ -680,7 +720,7 @@ being used in the AI system."""@en ; a owl:ObjectProperty ; rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI package."""@en ; - rdfs:range . + rdfs:range ns1:DictionaryEntry . a owl:ObjectProperty ; rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model @@ -702,12 +742,12 @@ description."""@en ; a owl:ObjectProperty ; rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; - rdfs:range . + rdfs:range ns1:DictionaryEntry . a owl:ObjectProperty ; rdfs:comment """Captures the threshold that was used for computation of a metric described in the metric field."""@en ; - rdfs:range . + rdfs:range ns1:DictionaryEntry . a owl:DatatypeProperty ; rdfs:comment """Describes all the preprocessing steps applied to the training data before the @@ -738,7 +778,7 @@ being used in the AI system."""@en ; a owl:ObjectProperty ; rdfs:comment """Records if sensitive personal information is used during model training or could be used during the inference."""@en ; - rdfs:range . + rdfs:range ns1:PresenceType . a owl:DatatypeProperty ; rdfs:comment "Property that describes the time at which a build stops."@en ; @@ -761,7 +801,7 @@ infrastructure that the build was invoked on."""@en ; a owl:ObjectProperty ; rdfs:comment """Property that describes the digest of the build configuration file used to invoke a build."""@en ; - rdfs:range . + rdfs:range ns1:Hash . a owl:DatatypeProperty ; rdfs:comment "Property describes the invocation entrypoint of a build."@en ; @@ -773,970 +813,961 @@ invoke a build."""@en ; a owl:ObjectProperty ; rdfs:comment "Property describing the session in which a build is invoked."@en ; - rdfs:range . + rdfs:range ns1:DictionaryEntry . a owl:ObjectProperty ; rdfs:comment "Property describing a parameter used in an instance of a build."@en ; - rdfs:range . + rdfs:range ns1:DictionaryEntry . a owl:NamedIndividual, - ; + ns1:AnnotationType ; rdfs:label "other" ; - rdfs:comment "Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element)."@en . + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . a owl:NamedIndividual, - ; + ns1:AnnotationType ; rdfs:label "review" ; rdfs:comment "Used when someone reviews the Element."@en . - a owl:Class ; +ns1:Bom a owl:Class ; rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details (provenence, composition, licensing, etc.) about a product."""@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Bundle ; sh:nodeKind sh:IRI . - a owl:Class, +ns1:Bundle a owl:Class, sh:NodeShape ; rdfs:comment "A collection of Elements that have a shared context."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:ElementCollection ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ns1:context ] . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "cpe22" ; rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "cpe23" ; rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "cve" ; rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "email" ; - rdfs:comment "Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3."@en . + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "gitoid" ; rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "other" ; rdfs:comment "Used when the type does not match any of the other options."@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "packageUrl" ; rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "securityOther" ; rdfs:comment "Used when there is a security related identifier of unspecified type."@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "swhid" ; rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "swid" ; - rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3."@en . + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . a owl:NamedIndividual, - ; + ns1:ExternalIdentifierType ; rdfs:label "urlScheme" ; rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "altDownloadLocation" ; rdfs:comment "A reference to an alternative download location."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "altWebPage" ; rdfs:comment "A reference to an alternative web page."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "binaryArtifact" ; rdfs:comment "A reference to binary artifacts related to a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "bower" ; rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "buildMeta" ; rdfs:comment "A reference build metadata related to a published package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "buildSystem" ; rdfs:comment "A reference build system used to create or publish the package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "certificationReport" ; rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "chat" ; rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "componentAnalysisReport" ; rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "cwe" ; rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "documentation" ; rdfs:comment "A reference to the documentation for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "dynamicAnalysisReport" ; rdfs:comment "A reference to a dynamic analysis report for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "eolNotice" ; rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "exportControlAssessment" ; rdfs:comment "A reference to a export control assessment for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "funding" ; rdfs:comment "A reference to funding information related to a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "issueTracker" ; rdfs:comment "A reference to the issue tracker for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "license" ; rdfs:comment "A reference to additional license information related to an artifact."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "mailingList" ; rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "mavenCentral" ; rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "metrics" ; rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "npm" ; rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "nuget" ; rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "other" ; rdfs:comment "Used when the type does not match any of the other options."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "privacyAssessment" ; rdfs:comment "A reference to a privacy assessment for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "productMetadata" ; rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "purchaseOrder" ; rdfs:comment "A reference to a purchase order for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "qualityAssessmentReport" ; rdfs:comment "A reference to a quality assessment for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "releaseHistory" ; rdfs:comment "A reference to a published list of releases for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "releaseNotes" ; rdfs:comment "A reference to the release notes for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "riskAssessment" ; rdfs:comment "A reference to a risk assessment for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "runtimeAnalysisReport" ; rdfs:comment "A reference to a runtime analysis report for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "secureSoftwareAttestation" ; rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "securityAdversaryModel" ; rdfs:comment "A reference to the security adversary model for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "securityAdvisory" ; rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "securityFix" ; rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "securityOther" ; rdfs:comment "A reference to related security information of unspecified type."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "securityPenTestReport" ; rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "securityPolicy" ; rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "securityThreatModel" ; rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "socialMedia" ; rdfs:comment "A reference to a social media channel for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "sourceArtifact" ; rdfs:comment "A reference to an artifact containing the sources for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "staticAnalysisReport" ; rdfs:comment "A reference to a static analysis report for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "support" ; rdfs:comment "A reference to the software support channel or other support information for a package."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "vcs" ; rdfs:comment "A reference to a version control system related to a software artifact."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "vulnerabilityDisclosureReport" ; rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . a owl:NamedIndividual, - ; + ns1:ExternalRefType ; rdfs:label "vulnerabilityExploitabilityAssessment" ; rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . a owl:NamedIndividual, - ; + ns1:LifecycleScopeType ; rdfs:label "build" ; rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . a owl:NamedIndividual, - ; + ns1:LifecycleScopeType ; rdfs:label "design" ; rdfs:comment "A relationship has specific context implications during an element's design."@en . a owl:NamedIndividual, - ; + ns1:LifecycleScopeType ; rdfs:label "development" ; rdfs:comment "A relationship has specific context implications during development phase of an element."@en . a owl:NamedIndividual, - ; + ns1:LifecycleScopeType ; rdfs:label "other" ; rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . a owl:NamedIndividual, - ; + ns1:LifecycleScopeType ; rdfs:label "runtime" ; rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . a owl:NamedIndividual, - ; + ns1:LifecycleScopeType ; rdfs:label "test" ; rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . - a owl:NamedIndividual, - ; - rdfs:comment """An Individual Value for Element representing a set of Elements of unknown -identify or cardinality (number)."""@en ; - rdfs:range ; - = . - - a owl:NamedIndividual, - ; - rdfs:comment """An Individual Value for Element representing a set of Elements with -cardinality (number/count) of zero."""@en ; - rdfs:range ; - = . +ns1:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns1:Agent ; + sh:nodeKind sh:IRI . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "ai" ; rdfs:comment "the element follows the AI profile specification"@en . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "build" ; rdfs:comment "the element follows the Build profile specification"@en . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "core" ; rdfs:comment "the element follows the Core profile specification"@en . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "dataset" ; rdfs:comment "the element follows the Dataset profile specification"@en . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "expandedLicensing" ; - rdfs:comment "the element follows the expanded Licensing profile specification"@en . + rdfs:comment "the element follows the ExpandedLicensing profile specification"@en . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "extension" ; rdfs:comment "the element follows the Extension profile specification"@en . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "lite" ; rdfs:comment "the element follows the Lite profile specification"@en . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "security" ; rdfs:comment "the element follows the Security profile specification"@en . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "simpleLicensing" ; - rdfs:comment "the element follows the simple Licensing profile specification"@en . + rdfs:comment "the element follows the SimpleLicensing profile specification"@en . a owl:NamedIndividual, - ; + ns1:ProfileIdentifierType ; rdfs:label "software" ; rdfs:comment "the element follows the Software profile specification"@en . a owl:NamedIndividual, - ; + ns1:RelationshipCompleteness ; rdfs:label "complete" ; rdfs:comment "The relationship is known to be exhaustive."@en . a owl:NamedIndividual, - ; + ns1:RelationshipCompleteness ; rdfs:label "incomplete" ; rdfs:comment "The relationship is known not to be exhaustive."@en . a owl:NamedIndividual, - ; + ns1:RelationshipCompleteness ; rdfs:label "noAssertion" ; rdfs:comment "No assertion can be made about the completeness of the relationship."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "affects" ; rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "amendedBy" ; rdfs:comment "The `from` Element is amended by each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "ancestorOf" ; rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "availableFrom" ; rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "configures" ; rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "contains" ; rdfs:comment "The `from` Element contains each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "coordinatedBy" ; rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "copiedTo" ; rdfs:comment "The `from` Element has been copied to each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "delegatedTo" ; rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "dependsOn" ; rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "descendantOf" ; rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "describes" ; rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "doesNotAffect" ; rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "expandsTo" ; rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "exploitCreatedBy" ; rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "fixedBy" ; rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "fixedIn" ; rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "foundBy" ; rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "generates" ; rdfs:comment "The `from` Element generates each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasAddedFile" ; rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasAssessmentFor" ; rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasAssociatedVulnerability" ; rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasConcludedLicense" ; rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasDataFile" ; rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasDeclaredLicense" ; rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasDeletedFile" ; rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasDependencyManifest" ; rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasDistributionArtifact" ; rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasDocumentation" ; rdfs:comment "The `from` Element is documented by each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasDynamicLink" ; rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasEvidence" ; rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasExample" ; rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasHost" ; rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasInput" ; rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasMetadata" ; rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasOptionalComponent" ; rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasOptionalDependency" ; rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasOutput" ; rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasPrerequisite" ; rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasProvidedDependency" ; rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasRequirement" ; rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasSpecification" ; rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasStaticLink" ; rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasTest" ; rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasTestCase" ; rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "hasVariant" ; rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "invokedBy" ; rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "modifiedBy" ; rdfs:comment "The `from` Element is modified by each `to` Element."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "other" ; - rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless)."@en . + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "packagedBy" ; rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "patchedBy" ; rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "publishedBy" ; rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "reportedBy" ; rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "republishedBy" ; rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "serializedInArtifact" ; rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "testedOn" ; rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "trainedOn" ; rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "underInvestigationFor" ; rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . a owl:NamedIndividual, - ; + ns1:RelationshipType ; rdfs:label "usesTool" ; rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . a owl:NamedIndividual, - ; + ns1:SupportType ; rdfs:label "deployed" ; rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . a owl:NamedIndividual, - ; + ns1:SupportType ; rdfs:label "development" ; rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . a owl:NamedIndividual, - ; + ns1:SupportType ; rdfs:label "endOfSupport" ; rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . a owl:NamedIndividual, - ; + ns1:SupportType ; rdfs:label "limitedSupport" ; rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . a owl:NamedIndividual, - ; + ns1:SupportType ; rdfs:label "noAssertion" ; rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . a owl:NamedIndividual, - ; + ns1:SupportType ; rdfs:label "noSupport" ; rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . a owl:NamedIndividual, - ; + ns1:SupportType ; rdfs:label "support" ; rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . - a owl:ObjectProperty ; +ns1:annotationType a owl:ObjectProperty ; rdfs:comment "Describes the type of annotation."@en ; - rdfs:range . + rdfs:range ns1:AnnotationType . - a owl:DatatypeProperty ; +ns1:beginIntegerRange a owl:DatatypeProperty ; rdfs:comment "Defines the beginning of a range."@en ; rdfs:range xsd:positiveInteger . - a owl:DatatypeProperty ; +ns1:builtTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time an artifact was built."@en ; rdfs:range xsd:dateTimeStamp . - a owl:ObjectProperty ; +ns1:completeness a owl:ObjectProperty ; rdfs:comment "Provides information about the completeness of relationships."@en ; - rdfs:range . + rdfs:range ns1:RelationshipCompleteness . - a owl:DatatypeProperty ; +ns1:context a owl:DatatypeProperty ; rdfs:comment """Gives information about the circumstances or unifying properties that Elements of the bundle have been assembled under."""@en ; rdfs:range xsd:string . - a owl:DatatypeProperty ; +ns1:created a owl:DatatypeProperty ; rdfs:comment "Identifies when the Element was originally created."@en ; rdfs:range xsd:dateTimeStamp . - a owl:ObjectProperty ; +ns1:createdBy a owl:ObjectProperty ; rdfs:comment "Identifies who or what created the Element."@en ; - rdfs:range . + rdfs:range ns1:Agent . - a owl:ObjectProperty ; +ns1:createdUsing a owl:ObjectProperty ; rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; - rdfs:range . + rdfs:range ns1:Tool . - a owl:ObjectProperty ; +ns1:creationInfo a owl:ObjectProperty ; rdfs:comment "Provides information about the creation of the Element."@en ; - rdfs:range . + rdfs:range ns1:CreationInfo . - a owl:ObjectProperty ; +ns1:dataLicense a owl:ObjectProperty ; rdfs:comment """Provides the license under which the SPDX documentation of the Element can be used."""@en ; rdfs:range . - a owl:ObjectProperty ; +ns1:definingArtifact a owl:ObjectProperty ; rdfs:comment """Artifact representing a serialization instance of SPDX data containing the definition of a particular Element."""@en ; - rdfs:range . + rdfs:range ns1:Artifact . - a owl:DatatypeProperty ; +ns1:description a owl:DatatypeProperty ; rdfs:comment "Provides a detailed description of the Element."@en ; rdfs:range xsd:string . - a owl:ObjectProperty ; +ns1:element a owl:ObjectProperty ; rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; - rdfs:range . + rdfs:range ns1:Element . - a owl:DatatypeProperty ; +ns1:endIntegerRange a owl:DatatypeProperty ; rdfs:comment "Defines the end of a range."@en ; rdfs:range xsd:positiveInteger . - a owl:DatatypeProperty ; +ns1:endTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; rdfs:range xsd:dateTimeStamp . - a owl:ObjectProperty ; +ns1:extension a owl:ObjectProperty ; rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; rdfs:range . - a owl:ObjectProperty ; +ns1:externalIdentifier a owl:ObjectProperty ; rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content that uniquely identifies an Element."""@en ; - rdfs:range . + rdfs:range ns1:ExternalIdentifier . - a owl:ObjectProperty ; +ns1:externalIdentifierType a owl:ObjectProperty ; rdfs:comment "Specifies the type of the external identifier."@en ; - rdfs:range . + rdfs:range ns1:ExternalIdentifierType . - a owl:ObjectProperty ; +ns1:externalRef a owl:ObjectProperty ; rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content that provides additional characteristics of an Element."""@en ; - rdfs:range . + rdfs:range ns1:ExternalRef . - a owl:ObjectProperty ; +ns1:externalRefType a owl:ObjectProperty ; rdfs:comment "Specifies the type of the external reference."@en ; - rdfs:range . + rdfs:range ns1:ExternalRefType . - a owl:DatatypeProperty ; - rdfs:comment """Identifies an external Element used within a Document but defined external to -that Document."""@en ; +ns1:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; rdfs:range xsd:anyURI . - a owl:ObjectProperty ; +ns1:from a owl:ObjectProperty ; rdfs:comment "References the Element on the left-hand side of a relationship."@en ; - rdfs:range . + rdfs:range ns1:Element . - a owl:DatatypeProperty ; +ns1:identifier a owl:DatatypeProperty ; rdfs:comment "Uniquely identifies an external element."@en ; rdfs:range xsd:string . - a owl:DatatypeProperty ; +ns1:identifierLocator a owl:DatatypeProperty ; rdfs:comment "Provides the location for more information regarding an external identifier."@en ; rdfs:range xsd:anyURI . - a owl:ObjectProperty ; +ns1:import a owl:ObjectProperty ; rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; - rdfs:range . + rdfs:range ns1:ExternalMap . - a owl:DatatypeProperty ; +ns1:issuingAuthority a owl:DatatypeProperty ; rdfs:comment "An entity that is authorized to issue identification credentials."@en ; rdfs:range xsd:string . - a owl:DatatypeProperty ; +ns1:key a owl:DatatypeProperty ; rdfs:comment "A key used in a generic key-value pair."@en ; rdfs:range xsd:string . - a owl:DatatypeProperty ; +ns1:locationHint a owl:DatatypeProperty ; rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; rdfs:range xsd:anyURI . - a owl:DatatypeProperty ; +ns1:locator a owl:DatatypeProperty ; rdfs:comment "Provides the location of an external reference."@en ; rdfs:range xsd:string . - a owl:DatatypeProperty ; +ns1:name a owl:DatatypeProperty ; rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; rdfs:range xsd:string . - a owl:DatatypeProperty ; +ns1:namespace a owl:DatatypeProperty ; rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an Element ID."""@en ; rdfs:range xsd:anyURI . - a owl:ObjectProperty ; +ns1:namespaceMap a owl:ObjectProperty ; rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; - rdfs:range . + rdfs:range ns1:NamespaceMap . - a owl:ObjectProperty ; +ns1:originatedBy a owl:ObjectProperty ; rdfs:comment "Identifies from where or whom the Element originally came."@en ; - rdfs:range . + rdfs:range ns1:Agent . - a owl:DatatypeProperty ; +ns1:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; rdfs:comment """The relative file name of a file to be excluded from the `PackageVerificationCode`."""@en ; rdfs:range xsd:string . - a owl:DatatypeProperty ; +ns1:prefix a owl:DatatypeProperty ; rdfs:comment "A substitute for a URI."@en ; rdfs:range xsd:string . - a owl:ObjectProperty ; +ns1:profileConformance a owl:ObjectProperty ; rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to conform to."""@en ; - rdfs:range . + rdfs:range ns1:ProfileIdentifierType . - a owl:ObjectProperty ; +ns1:relationshipType a owl:ObjectProperty ; rdfs:comment "Information about the relationship between two Elements."@en ; - rdfs:range . + rdfs:range ns1:RelationshipType . - a owl:DatatypeProperty ; +ns1:releaseTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time an artifact was released."@en ; rdfs:range xsd:dateTimeStamp . - a owl:ObjectProperty ; +ns1:rootElement a owl:ObjectProperty ; rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; - rdfs:range . + rdfs:range ns1:Element . - a owl:ObjectProperty ; +ns1:scope a owl:ObjectProperty ; rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; - rdfs:range . + rdfs:range ns1:LifecycleScopeType . - a owl:DatatypeProperty ; +ns1:specVersion a owl:DatatypeProperty ; rdfs:comment """Provides a reference number that can be used to understand how to parse and interpret an Element."""@en ; rdfs:range xsd:string . - a owl:DatatypeProperty ; +ns1:standardName a owl:DatatypeProperty ; rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; rdfs:range xsd:string . - a owl:DatatypeProperty ; +ns1:startTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; rdfs:range xsd:dateTimeStamp . - a owl:DatatypeProperty ; +ns1:statement a owl:DatatypeProperty ; rdfs:comment "Commentary on an assertion that an annotator has made."@en ; rdfs:range xsd:string . - a owl:ObjectProperty ; +ns1:subject a owl:ObjectProperty ; rdfs:comment "An Element an annotator has made an assertion about."@en ; - rdfs:range . + rdfs:range ns1:Element . - a owl:DatatypeProperty ; +ns1:summary a owl:DatatypeProperty ; rdfs:comment "A short description of an Element."@en ; rdfs:range xsd:string . - a owl:ObjectProperty ; +ns1:supportLevel a owl:ObjectProperty ; rdfs:comment "Specifies the level of support associated with an artifact."@en ; - rdfs:range . + rdfs:range ns1:SupportType . - a owl:ObjectProperty ; +ns1:to a owl:ObjectProperty ; rdfs:comment "References an Element on the right-hand side of a relationship."@en ; - rdfs:range . + rdfs:range ns1:Element . - a owl:DatatypeProperty ; +ns1:validUntilTime a owl:DatatypeProperty ; rdfs:comment """Specifies until when the artifact can be used before its usage needs to be reassessed."""@en ; rdfs:range xsd:dateTimeStamp . - a owl:DatatypeProperty ; +ns1:value a owl:DatatypeProperty ; rdfs:comment "A value used in a generic key-value pair."@en ; rdfs:range xsd:string . @@ -1893,7 +1924,7 @@ reassessed."""@en ; a owl:ObjectProperty ; rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; - rdfs:range . + rdfs:range ns1:PresenceType . a owl:DatatypeProperty ; rdfs:comment "Describes what the given dataset should be used for."@en ; @@ -1905,7 +1936,7 @@ reassessed."""@en ; a owl:ObjectProperty ; rdfs:comment "Describes a sensor used for collecting the data."@en ; - rdfs:range . + rdfs:range ns1:DictionaryEntry . a owl:DatatypeProperty ; rdfs:comment "Identifies the full text of a LicenseAddition."@en ; @@ -1956,11 +1987,11 @@ by the License."""@en ; rdfs:range . a owl:DatatypeProperty ; - rdfs:comment "A name used in a CdxExtension name-value pair."@en ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; rdfs:range xsd:string . a owl:DatatypeProperty ; - rdfs:comment "A value used in a CdxExtension name-value pair."@en ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; rdfs:range xsd:string . a owl:ObjectProperty ; @@ -2035,7 +2066,7 @@ to mitigate a vulnerability."""@en ; a owl:ObjectProperty ; rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was found."""@en ; - rdfs:range . + rdfs:range . a owl:ObjectProperty ; rdfs:comment "Specifies the exploit catalog type."@en ; @@ -2089,7 +2120,7 @@ relationship."""@en ; a owl:ObjectProperty ; rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom License Addition to its URI ID."""@en ; - rdfs:range . + rdfs:range ns1:DictionaryEntry . a owl:DatatypeProperty ; rdfs:comment "A string in the license expression format."@en ; @@ -2161,7 +2192,7 @@ a software Package, File or Snippet."""@en ; a owl:DatatypeProperty ; rdfs:comment """Defines the byte range in the original host file that the snippet information applies to."""@en ; - rdfs:range . + rdfs:range ns1:PositiveIntegerRange . a owl:DatatypeProperty ; rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be @@ -2198,7 +2229,7 @@ package's home page."""@en ; a owl:DatatypeProperty ; rdfs:comment """Defines the line range in the original host file that the snippet information applies to."""@en ; - rdfs:range . + rdfs:range ns1:PositiveIntegerRange . a owl:DatatypeProperty ; rdfs:comment """Provides a place for the SPDX data creator to record the package URL string @@ -2230,333 +2261,300 @@ about the origin of the package."""@en ; sh:NodeShape ; rdfs:comment """A class for describing the energy consumption incurred by an AI model in different stages of its lifecycle."""@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:class ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], + sh:path ], [ sh:class ; sh:nodeKind sh:BlankNodeOrIRI ; sh:path ], [ sh:class ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ] . + sh:path ] . - a owl:Class, +ns1:ExternalIdentifier a owl:Class, sh:NodeShape ; - rdfs:comment "Provides information about the creation of the Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:datatype xsd:string ; - sh:maxCount 1 ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; - sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ], + sh:path ns1:identifierLocator ], [ sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . - - a , - owl:Class, - sh:NodeShape ; - rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI ; - sh:property [ sh:class ; - sh:in ( ) ; - sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; - sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; - sh:nodeKind sh:IRI ; - sh:path ] . - - a owl:Class, - sh:NodeShape ; - rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ns1:issuingAuthority ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ns1:identifier ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + sh:path ns1:comment ], + [ sh:class ns1:ExternalIdentifierType ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ] . + sh:path ns1:externalIdentifierType ] . - a owl:Class, +ns1:ExternalMap a owl:Class, sh:NodeShape ; - rdfs:comment """A map of Element identifiers that are used within a Document but defined -external to that Document."""@en ; - sh:nodeKind sh:BlankNode ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + sh:path ns1:locationHint ], + [ sh:class ns1:IntegrityMethod ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:class ; + sh:path ns1:verifiedUsing ], + [ sh:class ns1:Artifact ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ], + sh:path ns1:definingArtifact ], [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ns1:externalSpdxId ] . - a owl:Class, +ns1:ExternalRef a owl:Class, sh:NodeShape ; rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns1:ExternalRefType ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ], + sh:path ns1:externalRefType ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:contentType ; sh:pattern "^[^\\/]+\\/[^\\/]+$" ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ns1:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns1:locator ] . - a owl:Class, +ns1:Hash a owl:Class, sh:NodeShape ; rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + rdfs:subClassOf ns1:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns1:HashAlgorithm ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ] . + sh:path ns1:algorithm ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:hashValue ] . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "adler32" ; - rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3."@en . + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "blake2b256" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "blake2b384" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "blake2b512" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "blake3" ; rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "crystalsDilithium" ; rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "crystalsKyber" ; rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "falcon" ; rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "md2" ; - rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/)."@en . + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "md4" ; - rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186)."@en . + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "md5" ; - rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321)."@en . + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "md6" ; rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "other" ; rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "sha1" ; - rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174)."@en . + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "sha224" ; - rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874)."@en . + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "sha256" ; - rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "sha384" ; - rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "sha3_224" ; rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "sha3_256" ; rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "sha3_384" ; rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "sha3_512" ; rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . a owl:NamedIndividual, - ; + ns1:HashAlgorithm ; rdfs:label "sha512" ; - rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns1:IndividualElement a owl:Class ; + rdfs:comment """A concrete subclass of Element used by Individuals in the +Core profile."""@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI . - a owl:Class, +ns1:NamespaceMap a owl:Class, sh:NodeShape ; rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ns1:prefix ], [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ns1:namespace ] . - a owl:Class, +ns1:Relationship a owl:Class, sh:NodeShape ; rdfs:comment "Describes a relationship between one or more elements."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; - sh:in ( ) ; - sh:maxCount 1 ; + sh:property [ sh:class ns1:Element ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ], - [ sh:datatype xsd:dateTimeStamp ; + sh:path ns1:to ], + [ sh:class ns1:RelationshipCompleteness ; + sh:in ( ) ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:class ; - sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; + sh:path ns1:completeness ], + [ sh:class ns1:RelationshipType ; + sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; - sh:in ( ) ; + sh:path ns1:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ], + sh:nodeKind sh:Literal ; + sh:path ns1:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + sh:path ns1:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns1:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:from ] . - a owl:Class ; +ns1:Tool a owl:Class ; rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI . - a owl:ObjectProperty ; +ns1:algorithm a owl:ObjectProperty ; rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; - rdfs:range . + rdfs:range ns1:HashAlgorithm . - a owl:DatatypeProperty ; +ns1:hashValue a owl:DatatypeProperty ; rdfs:comment "The result of applying a hash algorithm to an Element."@en ; rdfs:range xsd:string . - a owl:ObjectProperty ; +ns1:suppliedBy a owl:ObjectProperty ; rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship referenced by the Element."""@en ; - rdfs:range . + rdfs:range ns1:Agent . - a owl:ObjectProperty ; +ns1:verifiedUsing a owl:ObjectProperty ; rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be asserted."""@en ; - rdfs:range . + rdfs:range ns1:IntegrityMethod . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . a owl:DatatypeProperty ; rdfs:comment """Specifies the SPDX License List version in which this license or exception @@ -2589,7 +2587,7 @@ License or LicenseAddition."""@en ; a owl:Class, sh:NodeShape ; rdfs:comment "A property name with an associated value."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; @@ -2648,8 +2646,8 @@ License or LicenseAddition."""@en ; a owl:Class, sh:NodeShape ; rdfs:comment "A canonical, unique, immutable identifier"@en ; - rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; + rdfs:subClassOf ns1:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:minCount 1 ; @@ -2667,16 +2665,16 @@ License or LicenseAddition."""@en ; rdfs:comment "Refers to any object that stores content on a computer."@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^[^\\/]+\\/[^\\/]+$" ], - [ sh:class ; + sh:property [ sh:class ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ] . + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . a owl:Class, sh:NodeShape ; @@ -2684,10 +2682,14 @@ License or LicenseAddition."""@en ; software."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:anyURI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; @@ -2696,184 +2698,194 @@ software."""@en ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ] . a owl:NamedIndividual, ; rdfs:label "application" ; - rdfs:comment "the Element is a software application"@en . + rdfs:comment "The Element is a software application."@en . a owl:NamedIndividual, ; rdfs:label "archive" ; - rdfs:comment "the Element is an archived collection of one or more files (.tar, .zip, etc)"@en . + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . a owl:NamedIndividual, ; rdfs:label "bom" ; - rdfs:comment "Element is a bill of materials"@en . + rdfs:comment "The Element is a bill of materials."@en . a owl:NamedIndividual, ; rdfs:label "configuration" ; - rdfs:comment "Element is configuration data"@en . + rdfs:comment "The Element is configuration data."@en . a owl:NamedIndividual, ; rdfs:label "container" ; - rdfs:comment "the Element is a container image which can be used by a container runtime application"@en . + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . a owl:NamedIndividual, ; rdfs:label "data" ; - rdfs:comment "Element is data"@en . + rdfs:comment "The Element is data."@en . a owl:NamedIndividual, ; rdfs:label "device" ; - rdfs:comment "the Element refers to a chipset, processor, or electronic board"@en . + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . a owl:NamedIndividual, ; rdfs:label "deviceDriver" ; - rdfs:comment "Element represents software that controls hardware devices"@en . + rdfs:comment "The Element represents software that controls hardware devices."@en . a owl:NamedIndividual, ; rdfs:label "diskImage" ; - rdfs:comment "the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . a owl:NamedIndividual, ; rdfs:label "documentation" ; - rdfs:comment "Element is documentation"@en . + rdfs:comment "The Element is documentation."@en . a owl:NamedIndividual, ; rdfs:label "evidence" ; - rdfs:comment "the Element is the evidence that a specification or requirement has been fulfilled"@en . + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . a owl:NamedIndividual, ; rdfs:label "executable" ; - rdfs:comment "Element is an Artifact that can be run on a computer"@en . + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . a owl:NamedIndividual, ; rdfs:label "file" ; - rdfs:comment "the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc)"@en . + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . a owl:NamedIndividual, ; rdfs:label "filesystemImage" ; - rdfs:comment "the Element is a file system image that can be written to a disk (or virtual) partition"@en . + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . a owl:NamedIndividual, ; rdfs:label "firmware" ; - rdfs:comment "the Element provides low level control over a device's hardware"@en . + rdfs:comment "The Element provides low level control over a device's hardware."@en . a owl:NamedIndividual, ; rdfs:label "framework" ; - rdfs:comment "the Element is a software framework"@en . + rdfs:comment "The Element is a software framework."@en . a owl:NamedIndividual, ; rdfs:label "install" ; - rdfs:comment "the Element is used to install software on disk"@en . + rdfs:comment "The Element is used to install software on disk."@en . a owl:NamedIndividual, ; rdfs:label "library" ; - rdfs:comment "the Element is a software library"@en . + rdfs:comment "The Element is a software library."@en . a owl:NamedIndividual, ; rdfs:label "manifest" ; - rdfs:comment "the Element is a software manifest"@en . + rdfs:comment "The Element is a software manifest."@en . a owl:NamedIndividual, ; rdfs:label "model" ; - rdfs:comment "the Element is a machine learning or artificial intelligence model"@en . + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . a owl:NamedIndividual, ; rdfs:label "module" ; - rdfs:comment "the Element is a module of a piece of software"@en . + rdfs:comment "The Element is a module of a piece of software."@en . a owl:NamedIndividual, ; rdfs:label "operatingSystem" ; - rdfs:comment "the Element is an operating system"@en . + rdfs:comment "The Element is an operating system."@en . a owl:NamedIndividual, ; rdfs:label "other" ; - rdfs:comment "the Element doesn't fit into any of the other categories"@en . + rdfs:comment "The Element doesn't fit into any of the other categories."@en . a owl:NamedIndividual, ; rdfs:label "patch" ; - rdfs:comment "Element contains a set of changes to update, fix, or improve another Element"@en . + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . a owl:NamedIndividual, ; rdfs:label "platform" ; - rdfs:comment "Element represents a runtime environment"@en . + rdfs:comment "The Element represents a runtime environment."@en . a owl:NamedIndividual, ; rdfs:label "requirement" ; - rdfs:comment "the Element provides a requirement needed as input for another Element"@en . + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . a owl:NamedIndividual, ; rdfs:label "source" ; - rdfs:comment "the Element is a single or a collection of source files"@en . + rdfs:comment "The Element is a single or a collection of source files."@en . a owl:NamedIndividual, ; rdfs:label "specification" ; - rdfs:comment "the Element is a plan, guideline or strategy how to create, perform or analyse an application"@en . + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . a owl:NamedIndividual, ; rdfs:label "test" ; - rdfs:comment "The Element is a test used to verify functionality on an software element"@en . + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + +ns1:ElementCollection a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns1:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns1:profileConformance ], + [ sh:class ns1:Element ; + sh:nodeKind sh:IRI ; + sh:path ns1:element ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns1:ElementCollection ] ; + sh:path rdf:type ], + [ sh:class ns1:Element ; + sh:nodeKind sh:IRI ; + sh:path ns1:rootElement ] . a owl:NamedIndividual, - ; + ns1:PresenceType ; rdfs:label "no" ; rdfs:comment "Indicates absence of the field."@en . a owl:NamedIndividual, - ; + ns1:PresenceType ; rdfs:label "noAssertion" ; rdfs:comment "Makes no assertion about the field."@en . a owl:NamedIndividual, - ; + ns1:PresenceType ; rdfs:label "yes" ; rdfs:comment "Indicates presence of the field."@en . - a owl:DatatypeProperty ; +ns1:contentType a owl:DatatypeProperty ; rdfs:comment "Provides information about the content type of an Element or a Property."@en ; rdfs:range xsd:string . - a , - owl:Class ; - rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; - sh:nodeKind sh:BlankNode . - a owl:DatatypeProperty ; rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; rdfs:range xsd:decimal . @@ -2882,116 +2894,123 @@ software."""@en ; rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; rdfs:range xsd:string . - a , - owl:Class, +ns1:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns1:PositiveIntegerRange a owl:Class, sh:NodeShape ; - rdfs:comment "A distinct article or unit related to Software."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:string ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:datatype xsd:positiveInteger ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; - sh:in ( ) ; + sh:path ns1:beginIntegerRange ], + [ sh:datatype xsd:positiveInteger ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:class ; - sh:in ( ) ; - sh:nodeKind sh:IRI ; - sh:path ] . + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:endIntegerRange ] . - a owl:Class ; - rdfs:comment "Specifies the type of an annotation."@en . + a owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:message "https://spdx.org/rdf/3.0.1/terms/Extension/Extension is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . - a , - owl:Class, + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns1:Artifact a owl:Class, sh:NodeShape ; rdfs:comment "A distinct article or unit within the digital domain."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:builtTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:datatype xsd:dateTimeStamp ; + [ sh:class ns1:Agent ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + sh:nodeKind sh:IRI ; + sh:path ns1:suppliedBy ], [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; - sh:maxCount 1 ; + sh:path ns1:standardName ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns1:Artifact ] ; + sh:path rdf:type ], + [ sh:class ns1:Agent ; sh:nodeKind sh:IRI ; - sh:path ], - [ sh:class ; - sh:in ( ) ; - sh:nodeKind sh:IRI ; - sh:path ], + sh:path ns1:originatedBy ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ns1:validUntilTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:class ; + [ sh:class ns1:SupportType ; + sh:in ( ) ; sh:nodeKind sh:IRI ; - sh:path ] . - - a owl:Class, - sh:NodeShape ; - rdfs:comment "A tuple of two positive integers that define a range."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:positiveInteger ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:positiveInteger ; + sh:path ns1:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ns1:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . - a , - owl:Class ; - rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI . +ns1:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . - a owl:Class ; - rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the -ExpandedLicensing profile."""@en ; +ns1:SpdxOrganization a owl:NamedIndividual, + ns1:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = ; + ns1:creationInfo . + +ns1:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; rdfs:subClassOf ; - sh:nodeKind sh:IRI . + sh:nodeKind sh:IRI ; + sh:property [ sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ] . - a , - owl:Class, + a owl:Class, sh:NodeShape ; rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:string ; + sh:property [ sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:boolean ; + sh:path ], + [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; @@ -3000,37 +3019,41 @@ ExpandedLicensing profile."""@en ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:datatype xsd:string ; + [ sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:boolean ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], [ sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . - a , - owl:Class, + a owl:Class, sh:NodeShape ; rdfs:comment """Abstract class for additional text intended to be added to a License, but which is not itself a standalone License."""@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:anyURI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; @@ -3039,23 +3062,17 @@ which is not itself a standalone License."""@en ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:datatype xsd:boolean ; - sh:maxCount 1 ; + [ sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:string ; + sh:path ], + [ sh:datatype xsd:boolean ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . - - a owl:Class ; - rdfs:comment "Specifies the exploit catalog type."@en . + sh:path ] . - a , - owl:Class, + a owl:Class, sh:NodeShape ; - rdfs:comment "Asbtract ancestor class for all VEX relationships"@en ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; @@ -3065,30 +3082,16 @@ which is not itself a standalone License."""@en ; [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . - - a owl:Class ; - rdfs:comment "Specifies the type of a content identifier."@en . - - a owl:Class ; - rdfs:comment "Enumeration of the different kinds of SPDX file."@en . - - a owl:Class ; - rdfs:comment "Specifies the unit of energy consumption."@en . - - a owl:Class ; - rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . - - a owl:DatatypeProperty ; - rdfs:comment """Provide consumers with comments by the creator of the Element about the -Element."""@en ; - rdfs:range xsd:string . + sh:path ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ] . a owl:Class, sh:NodeShape ; rdfs:comment """The class that helps note down the quantity of energy consumption and the unit used for measurement."""@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:class ; sh:in ( ) ; sh:maxCount 1 ; @@ -3104,158 +3107,220 @@ used for measurement."""@en ; a owl:Class ; rdfs:comment "Specifies the safety risk level."@en . - a , - owl:Class, - sh:NodeShape ; - rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ] . - a owl:Class ; rdfs:comment "Categories of confidentiality level."@en . a owl:Class ; rdfs:comment "Specifies the SSVC decision type."@en . + a owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns1:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ], + [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns1:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns1:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns1:createdUsing ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns1:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:comment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns1:IntegrityMethod a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:message "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns1:IntegrityMethod ] ; + sh:path rdf:type ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:comment ] . + a owl:Class ; rdfs:comment "Availability of dataset."@en . a owl:Class ; rdfs:comment "Specifies the VEX justification type."@en . - a , - owl:Class, +ns1:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class, sh:NodeShape ; rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Relationship ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; + sh:property [ sh:class ns1:Agent ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ], + sh:path ns1:suppliedBy ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; + sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:class ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . - - a owl:Class ; - rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . - - a owl:Class ; - rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . a owl:Class ; rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that tools may create."""@en . - a owl:Class ; +ns1:PresenceType a owl:Class ; rdfs:comment "Categories of presence or absence."@en . - a owl:Class ; +ns1:SupportType a owl:Class ; rdfs:comment "Indicates the type of support that is associated with an artifact."@en . - a owl:Class ; +ns1:Agent a owl:Class ; rdfs:comment "Agent represents anything with the potential to act on a system."@en ; - rdfs:subClassOf ; + rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI . - a , - owl:Class ; - rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI . - - a owl:Class . - - a owl:Class ; +ns1:ProfileIdentifierType a owl:Class ; rdfs:comment "Enumeration of the valid profiles."@en . - a owl:Class ; + a owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:message "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ] . + +ns1:ExternalIdentifierType a owl:Class ; rdfs:comment "Specifies the type of an external identifier."@en . - a owl:Class, +ns1:DictionaryEntry a owl:Class, sh:NodeShape ; rdfs:comment "A key with an associated value."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ns1:value ], [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ns1:key ] . a owl:Class ; rdfs:comment "Enumeration of dataset types."@en . - a owl:Class ; - rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . - - a , - owl:Class, +ns1:Element a owl:Class, sh:NodeShape ; rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:datatype xsd:string ; + sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], + sh:path ns1:description ], + [ sh:class ns1:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:verifiedUsing ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + sh:path ns1:summary ], + [ sh:class ns1:ExternalRef ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], + sh:path ns1:externalRef ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ; + sh:path ns1:comment ], + [ sh:class ns1:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:externalIdentifier ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns1:Element ] ; + sh:path rdf:type ], + [ sh:class ns1:CreationInfo ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], + sh:path ns1:creationInfo ], [ sh:class ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], + sh:path ns1:extension ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ns1:name ] . + +ns1:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . a owl:Class ; rdfs:comment "Provides information about the primary purpose of an Element."@en . - a owl:Class ; +ns1:ExternalRefType a owl:Class ; rdfs:comment "Specifies the type of an external reference."@en . - a owl:Class ; +ns1:RelationshipType a owl:Class ; rdfs:comment "Information about the relationship between two Elements."@en . diff --git a/rdf/spdx-model.nt b/rdf/spdx-model.nt index df731d35fd..711f7e41e4 100644 --- a/rdf/spdx-model.nt +++ b/rdf/spdx-model.nt @@ -1,3488 +1,3569 @@ -_:N8c3b465b415b409d895456c2f6ee7c50 . - "funding" . - "timestamp" . -_:N441c940eb087403188d7f17bd5a55a61 . - "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . -_:N341003cfbb2341dc85b4e126aedddb6f _:N40997879b8144df69163822d2df5baef . -_:N2d8b30121bba468383f1a52208a233a0 . - "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . - . - "Captures a standard that is being complied with."@en . - "syntactic" . -_:Ncdcdce99937a4256a16f3f88605197d9 _:N4cf191c2823c4f9ba2e3124c01643d11 . - _:Na4175476fbca48768ff989c226c9a147 . - "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . -_:N7476374ddf7c4c82a95e5a63b60e4e0e . -_:N7c1de3ae74ec4d1d9b6be8a05eea2f76 _:N9c88962fdf0e47f99a0477fe51b4207d . -_:N5332cee7bc2443a3b1d7513e03dbfdca _:N5c42defa8afb4ab59df899067c1e54af . - "vulnerableCodeNotInExecutePath" . - . - . - "hasHost" . - "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . - . - "generates" . - . -_:N2895a64ec18c48e68dbf01572a5d0cc8 . -_:N442fd7eee89f41b2a0f43bb6b2a05372 . - . -_:N4379f82c1b44400197a0281504402fc5 . - "trackStar" . -_:Nb953247c1d474ff9b1190938b713a604 . - . - . - . - . - . - . - _:N00e5d1a9fc9f4e8ea643c5dec21372c9 . - _:N74164e072d8147ca808c451ad6b5d980 . - _:N784fd0e933c9417b9e11ea351159df76 . -_:N49a4e0f670334d2cbe90cca23083d0ad . - "the element follows the AI profile specification"@en . -_:N7e6385c5f3414e35862d986501bfff61 . - . - . -_:Nc034445fd507418d8439a09bb2e562dc . - . - . -_:Nfa5229038d564307aa21cdf1f0981a70 _:Ndb56a4a0aad9490faaa05462a9fcc5b9 . -_:Nf9cc156a3e084f8ab0ce054200c8fca7 . - . - "adler32" . - . - . -_:Nc0df3f2041aa425183862b62f02dd829 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . - "securityAdversaryModel" . - . -_:N35cc536a7b8e4401b4f4e6b8982306e1 _:N6f651952b35948a8be2adee1bac83c6f . - "The `from` Element is modified by each `to` Element."@en . -_:Neb11974d792545bab359067d0609d8ef "1"^^ . -_:N5a9be7ba8fdb49af9acd6f2e114fd2b8 . - "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . -_:N3ef3340b9a594445b7754965e6a0adaf . - . - . -_:Nf39729cdf1294ea88879ccd16e468339 _:Na9e5a2b2a00c4436a1ad0b1cb737f8f7 . -_:N1f599cc99ec04100bcd965c2ec4fdbfe . - . - "limitedSupport" . - . - . -_:Nc6fa5c5fdf614c2f88c2b4fc315663fb . -_:Ne3895908b9eb4cf68888a0b70d8088ff "1"^^ . - . - "the element follows the Extension profile specification"@en . -_:Nb6b505dc76be4a36b1710a497695e245 _:N6731fd512ee84a2781b8140677b0161e . -_:Ne2b61099faaa4dfeb2a1dbb6cb39c943 . -_:Nad60293878ba46b5b12652a41f9e5b9e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . -_:N097b38569ab54334ba50aa2055c21bf9 . - . -_:Ncadfef9a365e400a9db499b45bcaafcb . - "requirement" . -_:N1b7b0e6303e14427817b4b206ef940ce . - _:N9547de9ed84145228bed37ef2d51f84f . -_:Nc6fa5c5fdf614c2f88c2b4fc315663fb _:Nb6b505dc76be4a36b1710a497695e245 . - . - . - "vcs" . - . - "install" . -_:N320baf3ea5274f3393919c1999ded96d . -_:Nd4eff7d7430d4e6f98acd7f97e4910f1 _:N5e376019b0684f24bf032cb891f1c491 . -_:N14c84f27ec214a8aa7744493af4f1b05 . -_:Nd3eb5f22c3be4e02942314bbb3d6fc3e "1"^^ . -_:N81774ccb63bb44f59726b12497ed50c2 _:Ne8efa463e51845deb9ed8d60461313c3 . -_:N5665c63b6756409c9cdaed2974ba4360 . -_:N71251064642941d5a8323c552deea710 . - . - "A tuple of two positive integers that define a range."@en . -_:N5ba1e97374714be89c6ce6144cda737a . - . - . - "The second-highest level of risk posed by an AI system."@en . - _:N999ce6cccf4c43f493041f0c109b3166 . -_:N293889ce0f674698af83932fc5a7b302 "2"^^ . - _:Ne2b61099faaa4dfeb2a1dbb6cb39c943 . -_:N04f6ef255f0f45e0843face78e6af32f . -_:Nf43982ec469c40b4b91b9ef5cea7460d _:N556257d7798d418ea42ac047b24405ec . -_:N97819d7a350747339be471fc904dd3e6 . -_:N3cfc6c76a3744d609a80a0095af2dcad . - "sha3_224" . - . - . - . - . - . - . -_:N00f0f016bff441178fb3b14b0f1ba310 . - . -_:N941027defe6c4c49915b8fb72263813e _:N353611490d3c430e8e861c3a903369fb . -_:Nc642cb7cb5d441eaaa4a1fc86368d998 . -_:N68dfb19b51934b85a897e13ae36b552a . -_:N2be1468f91bc454082c8d0af333d205f _:N2751c2ba1ffd40bda218899993caf814 . -_:N700fb510f2d245d387b84b64f59e834a . -_:N7c1de3ae74ec4d1d9b6be8a05eea2f76 . - "A relationship has specific context implications during an element's design."@en . - "availableFrom" . -_:N69fe400001ad47cbb9e616ed9d727696 . -_:Nc26fe6b1cfc54bc6811b7d4724089f96 . - "socialMedia" . -_:N3df9880d78624ddba1dd8e35a428b9c9 "1"^^ . - . - . - . - . -_:N1e4dbab89bc942d6934c8d53674bbf1b . -_:N37e9effec5ca4011a388b871588a9bfc . - . - . - . - "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . -_:Ne1fcb633a4f546229e86a46e5a84a543 _:N42dac2d2cbe6407596e2fb585812097d . - _:Nb3c96ed9edf047408c12db5df1daaf43 . - _:N0809050b78e64f1c8f5666cc9ffc92a6 . - _:N1f599cc99ec04100bcd965c2ec4fdbfe . -_:N5ba1e97374714be89c6ce6144cda737a _:N3051e5f9bfdf45b19c416045118502ef . -_:Ncf36f0c937574a40957458e67ccab9cc . - . - "Specifies the type of the external reference."@en . -_:N61bad2d32f474f829df8b09e757aec59 . -_:N35cc536a7b8e4401b4f4e6b8982306e1 . - "the element follows the Core profile specification"@en . -_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd . - "qualityAssessmentReport" . - "md5" . -_:N88066f14b8624768ac4e2ef3ea08df92 _:Ndecce5d991454f63835a411ad5c3d25f . - _:Na62fed341d814dc8ac95b17410dd06e9 . -_:Ne1476e00df5f4847a5f13d26ed774a56 . - "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . - . - . - . -_:Ncd7fa1f2b5334cd680d0c04e40453667 "1"^^ . -_:Na9d0fc4b8c454d308184549fca9959b6 . - "vulnerabilityExploitabilityAssessment" . - "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . - "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . - . -_:Nf2495df384ef4dfe9e42259508a5f433 . - . -_:N13b921afee3a413e9a3b06c638bf7824 . -_:N045868218fe84846bfd5a8efe73f5f05 . - . - . - . -_:N5c4503ba9d8a43719f83795d17b3c7a7 "1"^^ . -_:Nfa63aaf3414846a894fd74b0e16b27ef _:N0c63fb970906431f8ed02f6980609420 . - "mavenCentral" . - "exportControlAssessment" . - _:N1288d377b72c44a58a576536a10d2030 . -_:N75a4a8a0dcc14090818fdc6eade781c2 . -_:N66b9ee3f008340d2b9dffa814afd424b . - . - _:N7a1979daf894407dabf96d89e984ff05 . -_:N80091d0c87724fbf9c10267c2549575d "1"^^ . - . - "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . -_:Naee034377c334f78a3af1a4d25c3d468 . -_:Ne6082a08d51b4476b3a983aafaf1d69e . - "Property describing a parameter used in an instance of a build."@en . -_:Nebb958f1bf4c40b2abcb1472090d7504 . - . - . -_:N015d97ba72604b6fa2e5fa44fa994d9a _:N5a9be7ba8fdb49af9acd6f2e114fd2b8 . -_:N553eab502b9344dfa8c5091d3acb923d . - "hasAssessmentFor" . -_:N97819d7a350747339be471fc904dd3e6 . -_:Nfd92f942c5e84eb79e459f1d3f1ac4a6 . - . -_:Nad1212fd5ed241c891f8afc9235f406c "1"^^ . -_:N86117ed461e44611b359453a2e0ddc6d _:N4dc5e2b6b5fa44d79acdc84229f675fe . - "act" . -_:N1cfe20f0d2a049b7b751bd3aa0b4a09d "1"^^ . -_:Ncd807f7a6b8b429283fa3418dc19e6d9 . - _:Nbf51d2fce0c449ca8df0fa964ec48e89 . - "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . - . - "other" . - . -_:N69fe400001ad47cbb9e616ed9d727696 . - . -_:N0f509a18a72e4662a7e7fc2fe485c3ac . - _:Nf3860ad4cc5d4d87be1f408701c9f435 . - . -_:Nd3eb5f22c3be4e02942314bbb3d6fc3e . - . - . -_:Necfb795205bb49a69ffa1a569c48717a "1"^^ . - "swid" . -_:N6cddf83b203740bbb3558b7474a07821 "1"^^ . - "Describes the confidentiality level of the data points contained in the dataset."@en . -_:N275d7c15ea6640618cb7cde014c0aa3e _:N4707a6558f8643199e75a488fd156a09 . -_:Ndaecf52053104527964b081f8f6d4dfe . -_:Na9d7622cd7e94569b9540b0dc94308f3 _:Nf43982ec469c40b4b91b9ef5cea7460d . - "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . - . - . -_:N8a37f4cffd6247e08ac9432f8447d89a "1"^^ . -_:Nf2495df384ef4dfe9e42259508a5f433 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . -_:N2895a64ec18c48e68dbf01572a5d0cc8 "1"^^ . -_:N7f66313069b94a1386353f07d06a8ce2 _:N8e3eb89dc9a84ae0ae77a3bbc07580c9 . -_:N67fc6e9fc5d24eabb8543cdc669b1145 . - . - . -_:Ndfbc16b71fc74cb09458e7b7f0e12f1a . -_:N0da978c5d15a4e0ca2abb1d9a336eba1 . - . - "test" . - "swhid" . - . -_:N68dfb19b51934b85a897e13ae36b552a . - . - . -_:N9fc754cd17fe403b9e6567ff39e96ef5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - . - . - _:N15fc27df69c64453aa991097a3de803a . - "A reference to the release notes for a package."@en . - "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . - "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . - "swhid" . -_:N682a1c11ac5b4e2ea369c111bf3c01c7 _:N9a36e08577374de4a5b5818cbd4e6583 . - "Identifies all the text and metadata associated with a license in the license\nXML format."@en . - . -_:N1b99de6ce73e49328dc792c34798532e _:N67b0d956754a43a5b927ae155984d43e . -_:Nad60293878ba46b5b12652a41f9e5b9e . -_:Nf1c469cfa41644dd9f4cafc8ea99bad5 _:N99061926c1b041518ba79742537acbaf . -_:Nb3c96ed9edf047408c12db5df1daaf43 "1"^^ . - "Identifies when the Element was originally created."@en . -_:N2305488d52f34ae3bd7f3de8a96329e4 . -_:N3daf4b35020144689a44f0ff15ab9244 "1"^^ . -_:Ne1476e00df5f4847a5f13d26ed774a56 . -_:N5a18c93b836b4c75887455a2be533616 . - . -_:Ne880e2c5878f4becba59cd843618c77a . -_:N86dbcc278d2a463da15bda1f007010e6 _:Nab408dbbfc0f4711b251486cdcbf2168 . -_:N2751f527dac048b29b31dea36517c56a . -_:Nf37cc853c16d47099115691bcb77f2e1 . - . -_:Nb7591bd67efe44909d92824106c3b13d _:N2e8a1060d29d437ba2a94908211b9554 . - "hasDependencyManifest" . -_:Nf39729cdf1294ea88879ccd16e468339 . - . -_:N2e7af3d6eac3464eafe353090d745bf8 . - _:Ne9376f7e610a4f378d34348bf09acb82 . - . -_:N80a219d388944c2c9272a65ce39a65d4 _:N058b8decd10442dc9da66c8ec337fe89 . -_:N36ba7d6688234724ae43de9320a88887 . -_:Nc5839c1a42cb4cbf8b8f389491a2b604 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . - . - "A reference to the instant messaging system used by the maintainer for a package."@en . - "descendantOf" . -_:Nbb554a0d397845a2a23c335ba508c87e _:Ncb7110c05f9f446f887398fa2d241dd1 . - . -_:N4d420b10df2e48ec90b7a163f5e7774c _:N86117ed461e44611b359453a2e0ddc6d . - "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . -_:Nd0989d19000249b7b6abdfee096c9f41 _:N082cb9b35b7b4791aa1d9debf6080789 . - . -_:Nfd60dc4acf8f405b86d3ebb119d8edeb . -_:N3ed90f3640954f3cb8ac8478cc923b35 _:Nee5028549c054614bcad84bd05b4e1a7 . -_:Nbb554a0d397845a2a23c335ba508c87e . -_:Ne4619e36e32c4fdc886ba17b636520a3 . - "security" . - "evidence" . - . -_:N293889ce0f674698af83932fc5a7b302 . - "model" . - . - . -_:N00e5d1a9fc9f4e8ea643c5dec21372c9 "1"^^ . -_:N32c6410af083493aa3238362e1cbd67e . - . - "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . - . - "attend" . -_:N00f0f016bff441178fb3b14b0f1ba310 "1"^^ . - . - . - "critical" . -_:Nd78d72bd38c34a3c804f97f9e6b927a3 . - "A reference to a privacy assessment for a package."@en . -_:N9a4f2ea8112e48b18e9aaa109a1e02b3 "1"^^ . -_:N9b52daafec44429186724a6d9a846793 . - . -_:Ne0a4093971cc4c949d28cdad8bdcb48d _:N46c1d107f9c3474aac7ed47419f9465a . -_:N4477c4b31f20446998b8dff00cd309b3 "1"^^ . -_:N931242be4ac14a95b8ef51122ba2cf40 . - . - "A license expression participating in a license set."@en . - . -_:N556257d7798d418ea42ac047b24405ec . - . - . - "Describes a certain part of a file."@en . - "Specifies the type of a content identifier."@en . - "categorical" . -_:N86dbcc278d2a463da15bda1f007010e6 . -_:N6f651952b35948a8be2adee1bac83c6f _:N6a5bd79f035f4d7c9d036bc4a4d9990a . - "sha3_384" . -_:N8746b43004e5422e8a87906a64680ef4 . -_:N5f799594600d45d0b83461261182f275 . - . -_:N349d882683524e14ae98f62402cadf06 _:N2684328da52949f091f313d918153601 . - "Records any relevant background information or additional comments\nabout the origin of the package."@en . - . -_:N69674ef0cb504722bc20bd3195026b39 "1"^^ . - . - . -_:Nd217b5feb10442a4b50049ba66de62ed _:Ncd807f7a6b8b429283fa3418dc19e6d9 . -_:N7cdb8eb1992246f785b58b577320b504 _:Nc709c441c5e04513bcf2e73d3670fca8 . -_:Nc416283f46f74c5ca28e42eede357fc1 . - . - . -_:N9ee209fef169433cbe6e5201db0529b7 . - "cve" . - . -_:Ncf36f0c937574a40957458e67ccab9cc "1"^^ . - "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . - "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . - "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . - _:N69fe400001ad47cbb9e616ed9d727696 . - "Contains a URL where the License or LicenseAddition can be found in use."@en . -_:Necfb795205bb49a69ffa1a569c48717a . - . - . - . -_:Ne3895908b9eb4cf68888a0b70d8088ff . -_:N4d420b10df2e48ec90b7a163f5e7774c "1"^^ . - . -_:Nad0e6f0b63fa454384d0c495911f493e . -_:N55072cbd77a64b16b152c20236d786f7 "1"^^ . - "hasAssociatedVulnerability" . - "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . - "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . -_:Nea611e5c42f94004b40d78331b3f6977 . -_:N6f651952b35948a8be2adee1bac83c6f . - . - . - . - . - "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . -_:N8e3eb89dc9a84ae0ae77a3bbc07580c9 . - . - . - . -_:Nab78d95787b8439db6189f9699047620 . -_:N5c4503ba9d8a43719f83795d17b3c7a7 . -_:N7884508b0c584d0288f2250c1ee3bc89 _:N137d0a75fd374daeb077f228da53897d . -_:Nd0d9b8cea40d40dc91877f32f673ef66 . -_:N833899f5b4b1487b8858f9aebd17a95c _:Nf7e356ac5a1044be99fd42634fb81f7d . - _:N5665c63b6756409c9cdaed2974ba4360 . - . - "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . - . -_:Ne7755fef413944e6a5bd969d379e8410 . - . - "securityThreatModel" . - _:N6dd024b62af74fb5a94391f7343f1c79 . -_:N2c65a23cf781468598b84d1456d825fb . -_:Ndfeaf41c217c4e0c8c442c54949d7e6a "1"^^ . -_:N094c19bcead34504bd0d0b85f8ba1078 _:N0295e624408541b9b840c231db039610 . - . - . - "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . -_:N6a3cf2ffe9b9430390c5ce23bd48fce4 . -_:Nbfec05fc44f6435dbdeeb9f608a28e4c . - _:N931242be4ac14a95b8ef51122ba2cf40 . - "Describes a sensor used for collecting the data."@en . - . - . - "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . - "Specifies whether an additional text identifier has been marked as deprecated."@en . - "Records the type of the model used in the AI software."@en . -_:N9b270772d72b4f059b6cf8c0703f1948 _:Ne2f51219aefd476d89347b0e1c485369 . -_:N4d420b10df2e48ec90b7a163f5e7774c "1"^^ . -_:N761b1b05ac5746c3b86d599c46526598 . - . - . -_:N3daf4b35020144689a44f0ff15ab9244 . -_:N79f0bab894254f7aa8a118661d65f476 . -_:Ne4d0e63a8226430099ec09bd81396164 . - . - . -_:Ne5992967c6784ac0a64f460548c9c73c . -_:N6dd024b62af74fb5a94391f7343f1c79 . -_:N353611490d3c430e8e861c3a903369fb _:N3d67d474d6584406964ab34eebc78a17 . -_:N9a2ece59dbaf463a9c858ceb00db829f . -_:N00e5d1a9fc9f4e8ea643c5dec21372c9 . -_:N48e045eccfb146548852b6d7274d180e . - . -_:N27a589ebe1bb40c483985fcde9a2d5f2 . - "foundBy" . - . - . -_:N69674ef0cb504722bc20bd3195026b39 _:N49a4e0f670334d2cbe90cca23083d0ad . -_:Ne8b93e1651f84d5f8ff94e4b82012f07 . - _:N8746b43004e5422e8a87906a64680ef4 . - . - _:Ncd7fa1f2b5334cd680d0c04e40453667 . -_:N6afb5f6c981f4dc0b9434c037cffebfb _:N7e45c1203a3548efa7e52e91b09b78f1 . - "Indicates the type of support that is associated with an artifact."@en . -_:N9547de9ed84145228bed37ef2d51f84f . - "The third-highest level of risk posed by an AI system."@en . - _:N5c4503ba9d8a43719f83795d17b3c7a7 . -_:Na8a357017cea4aaf8263bb41e69ff340 _:Nf385f0cc22b44164be25837552539b1c . -_:N015d97ba72604b6fa2e5fa44fa994d9a . - "deployed" . -_:N7d98dd34e2e442ec8f9dd87a82897c1a . -_:Nc6df8997e25c4618ad64b329bea18fa4 . -_:Nc642cb7cb5d441eaaa4a1fc86368d998 "1"^^ . - "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . -_:Ne616eaa63e1944649dd12a3061e5726a . - "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . -_:N22c1a3c4c4964b7f90a94e0af7e75d87 . -_:N659a17727ec34fe487d556cc5ed935fa "1"^^ . - . -_:Nd1e13d5c3983406c938eabee95860c0e . -_:N2895a64ec18c48e68dbf01572a5d0cc8 . - . - "Identifies who or what created the Element."@en . - "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . -_:Ne5992967c6784ac0a64f460548c9c73c . -_:N30a7d396784a431ba0eb686ae5b7e645 . - . - "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . -_:N18a257cc80b34d42949a3f99d880f84c _:Na9d7622cd7e94569b9540b0dc94308f3 . -_:N9fc754cd17fe403b9e6567ff39e96ef5 . - "other" . - _:Nc6df8997e25c4618ad64b329bea18fa4 . -_:Nea611e5c42f94004b40d78331b3f6977 . -_:N8c0c4aa1f1ae4f7485a88627cfbc1631 . - "The result of applying a hash algorithm to an Element."@en . -_:N596d74921771447c9b35785007e34f1c . - _:Nbfec05fc44f6435dbdeeb9f608a28e4c . - . -_:N3393c7f385f241039c50705b72f15549 . - . - "Element represents a runtime environment"@en . - . - . -_:Nf98babca843e446f8ddf5dee59296ef5 . - "vulnerabilityDisclosureReport" . - . -_:N442fd7eee89f41b2a0f43bb6b2a05372 . -_:Ndaecf52053104527964b081f8f6d4dfe . - _:N26117aef00804f4b9d67298a6fd9c1de . -_:N107aa4617cfc41499f0678d83f303c24 "1"^^ . - . -_:N35cc536a7b8e4401b4f4e6b8982306e1 "1"^^ . - "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . - . - . -_:N8e8fa340313748a7b459ba889204f2c1 . -_:N69674ef0cb504722bc20bd3195026b39 . - . -_:N6cddf83b203740bbb3558b7474a07821 . -_:N28c8fedea4324ffa8c41338d5fae0fe5 . -_:Ne3abaf912f304b1bbda537f0c9866ce8 . -_:N3b3c65b750eb401889ee9800adc1da9c . -_:Nffd32d595d024069b6df3a1ef8da642a . - . - . -_:N7476374ddf7c4c82a95e5a63b60e4e0e . - "hasDeclaredLicense" . - . - "trainedOn" . - _:N801bb08e2f0f4a8b9b2e9e8d3a406ffd . -_:Nb05234e65ed34c2e86c4abf63f02725c _:N30ddffc861f14836a83cde39db10d792 . - . -_:N64aa14b2a42d49a394ae8a9d4febed04 _:N31d0b150d561413c9ecc2d72bfc66683 . -_:N0295e624408541b9b840c231db039610 _:N9ee209fef169433cbe6e5201db0529b7 . - "exploitCreatedBy" . - "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . - . - . - _:Nf7805d1c06ba43eaa22c6043949bd567 . - . - . -_:Nd78d72bd38c34a3c804f97f9e6b927a3 "1"^^ . - . -_:Na62fed341d814dc8ac95b17410dd06e9 . - . - . - . - _:N28c8fedea4324ffa8c41338d5fae0fe5 . - . -_:Nd4eff7d7430d4e6f98acd7f97e4910f1 . - . - "Provides a CVSS version 4 assessment for a vulnerability."@en . -_:Ne880e2c5878f4becba59cd843618c77a . - . -_:N8411f84580e2497da97dab50dc3b4df3 _:N80a219d388944c2c9272a65ce39a65d4 . -_:Nea5cd277bd75414183676bf891a32527 _:Nc26fe6b1cfc54bc6811b7d4724089f96 . - . -_:N6b8369d5442f4e3c902c0fd4c6ad7f11 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - . - "source" . -_:N97819d7a350747339be471fc904dd3e6 "1"^^ . -_:N9a4f2ea8112e48b18e9aaa109a1e02b3 . -_:N5cc19e587a4f464a9572d61b4352c919 . -_:Nff63d22b8dc54a40a1754583641b37f3 "1"^^ . -_:Nfc79218ef172418cad1d73977bceaf78 . - "the Element provides low level control over a device's hardware"@en . - _:Nb7591bd67efe44909d92824106c3b13d . - . -_:Nfafa3bfbbc7b4ea7bd042cec31c4660f . - "binaryArtifact" . - "Refers to one or more Elements that are part of an ElementCollection."@en . - "A map of Element identifiers that are used within a Document but defined\nexternal to that Document."@en . -_:N069fdf6673d440b8ab54670ad7906662 "1"^^ . -_:N7177e8b281d74917a500d212b7382b6b _:N7f66313069b94a1386353f07d06a8ce2 . - . -_:N4d126f9477f941e8bd279a13b5a8f5bd . - "A collection of Elements, not necessarily with unifying context."@en . -_:Na9e5a2b2a00c4436a1ad0b1cb737f8f7 . -_:N682a1c11ac5b4e2ea369c111bf3c01c7 . - . -_:Ne92d6e989fde455e8e2dd493a67d27bd . - . - . - _:Ne3895908b9eb4cf68888a0b70d8088ff . - "privacyAssessment" . - "the Element is a machine learning or artificial intelligence model"@en . - . - . -_:N8a37f4cffd6247e08ac9432f8447d89a . -_:Ne0a4093971cc4c949d28cdad8bdcb48d . -_:N99069f06ac76429c9f76e68132e89664 . - . - . -_:N78f0595c63a44f9ea394e506cdf868e9 _:N8551607a3f804986877c0affaed0b752 . -_:Nb953247c1d474ff9b1190938b713a604 . -_:N3be22ea4244a43d6af104de9fed1b4fb "1"^^ . -_:Nd677bc1745684cf98fb92f17a75ebd52 . -_:N4d420b10df2e48ec90b7a163f5e7774c . - . -_:N4c5910b87a7e4fc69577e8ccd52c8ab3 . - "A mapping between prefixes and namespace partial URIs."@en . -_:N0c63fb970906431f8ed02f6980609420 _:N727e38139bfa40d9b56e586cf9ac5bdb . - . -_:N6dd024b62af74fb5a94391f7343f1c79 "1"^^ . -_:N9dfffc9a0d064fbbb99f222927600262 . - "Element is documentation"@en . -_:N49d9ce37bbb44f77a01b48e5f2009c3f _:Nf6aee0ab31d04453b5b92d210b1ad859 . - "hasDistributionArtifact" . - . -_:N4d420b10df2e48ec90b7a163f5e7774c . - "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . -_:N1013910040b04b98b3a99c32bab64312 . - "The `from` Element contains each `to` Element."@en . - _:N2fa63ba2278342bb9c50f3eea6a8c45f . -_:N99061926c1b041518ba79742537acbaf _:Ncadfef9a365e400a9db499b45bcaafcb . -_:N37e9effec5ca4011a388b871588a9bfc . - . - . - . -_:N4379f82c1b44400197a0281504402fc5 . -_:N80091d0c87724fbf9c10267c2549575d . - . - "The `from` Element is documented by each `to` Element."@en . - "other" . -_:N35cc536a7b8e4401b4f4e6b8982306e1 . - . -_:N1192fb0a041f4b77a8c069659dad0770 . - . -_:Ne7755fef413944e6a5bd969d379e8410 "1"^^ . - . - _:Nec3642cffbce44abbfb1f66ffa74d5c1 . - . - "design" . - "Provides the location for more information regarding an external identifier."@en . - . -_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd . - . - "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . - . -_:N9177e2ee3c054acba6cd2b8f4d78e4f3 . -_:Naa8dde945f86469da5292aed6e8c1634 _:Nff58f069db3f4f099a21fd26a1b4e17e . - "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . - "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . -_:Nd43d5a2d7d1648598329bd2d9c226af3 _:N9b40da1378ab4d6e80898c98996790e2 . - "support" . - "dynamicAnalysisReport" . - . - . -_:Nf7805d1c06ba43eaa22c6043949bd567 . - . -_:N87ef2338681b493982fdd6660c334933 "1"^^ . -_:Nb28e67cb657b4e9e910e0447be07f36b _:N76180350f15e4fd0be60faa3412ed1fa . -_:N6cddf83b203740bbb3558b7474a07821 . - . -_:Ne3abaf912f304b1bbda537f0c9866ce8 . -_:N0da978c5d15a4e0ca2abb1d9a336eba1 . -_:Nf1e92f23ec15434084ea8a1bcf7473a8 _:Nb40056258a0d4d96a453b1af72d463fc . -_:Nad0e6f0b63fa454384d0c495911f493e _:Ne1fcb633a4f546229e86a46e5a84a543 . -_:N885913019f4b4fe7afcd38cc847f9ef6 _:N04c56aaa0702449d89c679a6ae2d509e . -_:N082cb9b35b7b4791aa1d9debf6080789 . - . - . - . -_:N42775851ecec45ee90ee1fe5c1071993 . - "ancestorOf" . - . - _:N21d7410f6a994075adab308941db7bcd . - . -_:Nec3642cffbce44abbfb1f66ffa74d5c1 . -_:Nc7ccb8d419ad49ab9f18f22daf82266f . - . - . - "other" . - . - . - . - "Specifies the level of support associated with an artifact."@en . - . -_:N931242be4ac14a95b8ef51122ba2cf40 . -_:Nd134630c82914216aaa76b9680232c0c _:N700fb510f2d245d387b84b64f59e834a . - "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . - . - "Property describing the start time of a build."@en . - "vulnerableCodeNotPresent" . - . - _:N00f0f016bff441178fb3b14b0f1ba310 . - . - . - . - . - . - _:N2305488d52f34ae3bd7f3de8a96329e4 . - "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . - "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . -_:Ne9348ee72a18435bbcdf5bb338a3fcb6 . - . - . - "chat" . -_:Nd0d9b8cea40d40dc91877f32f673ef66 . - "A name used in a CdxExtension name-value pair."@en . - "firmware" . - . -_:Ndc5c3acba75e4205b113623c75621c6e _:N9dce65a406e14831b9cc10cfd6e434a6 . - . - . - . -_:Ne3895908b9eb4cf68888a0b70d8088ff "1"^^ . -_:N62048f401c7a408d8e6074d8172edd5b . - "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . -_:N950494b11f9e43fd9ce4b21264e6a0a8 . -_:Nde44f9707bd34a41a8e403a4f539bb2e . - . - "Describes methods that can be used to explain the results from the AI model."@en . - . - "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . - . - . - _:Nf4064e5c7fb84a899bffb14df5844894 . -_:Nf32238231fca45f1ac5221bd1ecd220c . - "Provides the location of an external reference."@en . - "A reference to additional product metadata such as reference within organization's product catalog."@en . - "Kilowatt-hour."@en . - "hasConcludedLicense" . - . - "Commentary on an assertion that an annotator has made."@en . - "low" . -_:N8c3b465b415b409d895456c2f6ee7c50 _:N6f822a7a1a0748eaa9f4fe3e881d6726 . -_:Nc642cb7cb5d441eaaa4a1fc86368d998 . - "Captures the domain in which the AI package can be used."@en . - . - "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . - . - _:N7f27ce1812214cf08ea19bcb018764e2 . - "the Element is the evidence that a specification or requirement has been fulfilled"@en . - "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . -_:Ncadfef9a365e400a9db499b45bcaafcb _:N092e19c1eb954e979b39018f62ba840a . -_:Nc5bf40e3b2584e2eaa4becc473bed079 . - . -_:Nf1c469cfa41644dd9f4cafc8ea99bad5 . -_:Ncf36f0c937574a40957458e67ccab9cc . -_:Nb28e67cb657b4e9e910e0447be07f36b . - . - "A type of extension consisting of a list of name value pairs."@en . -_:Nee5028549c054614bcad84bd05b4e1a7 _:N124216cccbad47f486b33fd9dce70c06 . - "packageUrl" . - "The `from` Element generates each `to` Element."@en . -_:N3ef3340b9a594445b7754965e6a0adaf _:N941027defe6c4c49915b8fb72263813e . -_:N30ddffc861f14836a83cde39db10d792 . -_:N1a58fcdd17f342af8cfbbbb7d7a9ed87 . -_:Na40768ed7c6a40fcb01c9e8f1793b8a7 . -_:N73c4669b1ca14351aad291112524e432 . - "Provides an exploit assessment of a vulnerability."@en . - "When a CVSS score is 0.0"@en . -_:Nba91218e21de428abcc29e6f6dd70951 . - _:N55072cbd77a64b16b152c20236d786f7 . -_:N441c940eb087403188d7f17bd5a55a61 . - . -_:N0809050b78e64f1c8f5666cc9ffc92a6 . -_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . - . - "runtimeAnalysisReport" . -_:N6f822a7a1a0748eaa9f4fe3e881d6726 _:N301f290b72884ba28b9bf8cee6c7d12e . - . - _:Nffd32d595d024069b6df3a1ef8da642a . - . - . -_:N761b1b05ac5746c3b86d599c46526598 . - . - . - . - "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . - "A substitute for a URI."@en . - "testedOn" . - "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . - . - "design" . - . - "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . - . - "A reference to a dynamic analysis report for a package."@en . -_:Ne2b61099faaa4dfeb2a1dbb6cb39c943 _:N6afb5f6c981f4dc0b9434c037cffebfb . -_:Nf6a8366ab85b4074b187672b593f3e6e . - . - . -_:Nada0379a8e6840aeab21269255f5c588 . - . - "inlineMitigationsAlreadyExist" . - "core" . - "The `from` archive expands out as an artifact described by each `to` Element."@en . - . -_:N659a17727ec34fe487d556cc5ed935fa . - "productMetadata" . - . - "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . -_:N9b270772d72b4f059b6cf8c0703f1948 . - "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . -_:Na40768ed7c6a40fcb01c9e8f1793b8a7 . - . - "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . - . -_:N7d98dd34e2e442ec8f9dd87a82897c1a . - . - . -_:N9fc754cd17fe403b9e6567ff39e96ef5 . -_:N092e19c1eb954e979b39018f62ba840a _:Ne9348ee72a18435bbcdf5bb338a3fcb6 . - _:Nff63d22b8dc54a40a1754583641b37f3 . - . -_:N80091d0c87724fbf9c10267c2549575d "1"^^ . -_:Nc7ccb8d419ad49ab9f18f22daf82266f "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . -_:N193f441ef82a4c6f872a77fdc536a646 _:Nb3642a2160e24cfd8d98230c09e472be . - . - . - . - _:Nf37cc853c16d47099115691bcb77f2e1 . -_:Nb3642a2160e24cfd8d98230c09e472be . -_:Nbc63e97d65ef4f38936c3be4f51c6827 . - . - "An SPDX version 2.X compatible verification method for software packages."@en . -_:N744e6bd4bf054480b6e284543bb79b87 "1"^^ . - _:Necfb795205bb49a69ffa1a569c48717a . - . -_:Nc034445fd507418d8439a09bb2e562dc "1"^^ . - . -_:Nb6697d6a50a946d9a78f5c1d507fee30 . - _:N107aa4617cfc41499f0678d83f303c24 . - . -_:N89f5ced0d2b44da98e135f5754616ccc . - . -_:N3df9880d78624ddba1dd8e35a428b9c9 . - . - . - . - . - . - "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . - . -_:N9dfffc9a0d064fbbb99f222927600262 . -_:Nfc79218ef172418cad1d73977bceaf78 . - "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . - . - "hasRequirement" . - "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . -_:N81c3ab3c353544c9b673be7535094681 . -_:N1f248bb10ce740cc9124e394b35259ba _:N4b5795c987f1446dbda919350438fd0a . - "A short description of an Element."@en . -_:N6cddf83b203740bbb3558b7474a07821 "1"^^ . - . -_:N1a58fcdd17f342af8cfbbbb7d7a9ed87 _:N3cfc6c76a3744d609a80a0095af2dcad . -_:N1b790cf0ad524fad8d4f129ccda94fa6 . - . - "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . - _:N3df9880d78624ddba1dd8e35a428b9c9 . -_:N28c546d9833444d7b7370a64f4274b1b . - . - "Specifies the exploit catalog type."@en . - . - _:N0da978c5d15a4e0ca2abb1d9a336eba1 . -_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd . -_:N6dd024b62af74fb5a94391f7343f1c79 . -_:N60de5e93a2424ac08a6d0747c85f5699 . -_:Na1f3d174a6d64488a8ff34be710850c5 . - "md6" . - "copiedTo" . -_:N731ab899248d4b07adeacd5aafffa0bf . - "Records the measurement of prediction quality of the AI model."@en . - . - . - . - . - . - . -_:Ndf7085005814495cbc9689c68bb9683d . - "noSupport" . -_:N3d67d474d6584406964ab34eebc78a17 _:N2e7af3d6eac3464eafe353090d745bf8 . -_:Nd7c9818a72e64d35a203d1b243e90dd6 . -_:N5665c63b6756409c9cdaed2974ba4360 "1"^^ . - . -_:Nd1e13d5c3983406c938eabee95860c0e . -_:N2fd6d6c96c7b46dabc958e2ddb32657c . - "Provides the license under which the SPDX documentation of the Element can be\nused."@en . -_:Nfc73e3099ed6465bb089df33bbf469ff . -_:N744e6bd4bf054480b6e284543bb79b87 . - . - . - "blake2b512" . -_:N6349b0f36b7f449faa1d73050fbde88f . - "vulnerableCodeCannotBeControlledByAdversary" . - . - _:N9177e2ee3c054acba6cd2b8f4d78e4f3 . -_:N5cc19e587a4f464a9572d61b4352c919 . -_:N21d7410f6a994075adab308941db7bcd . - . - . - "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . -_:N5c307bac3b90460f8b755b5d46827013 "1"^^ . -_:N35bab262301147c0b1b11e0643a659c6 . -_:N8746b43004e5422e8a87906a64680ef4 . -_:N5f799594600d45d0b83461261182f275 . -_:Nbe2a417f2d204fcb9bb60e5d58b0044f . - . - . -_:N999ce6cccf4c43f493041f0c109b3166 . -_:N6d28e1bd9c9f4454b0cd19fce2d51a40 . -_:Nc709c441c5e04513bcf2e73d3670fca8 _:N78f0595c63a44f9ea394e506cdf868e9 . - _:Nfdf2a70978294bcebad4f299b134dc99 . -_:N71251064642941d5a8323c552deea710 . - "Conveys information about how VEX status was determined."@en . - . - "the Element is a software framework"@en . - "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . -_:N9a36e08577374de4a5b5818cbd4e6583 _:N73c4669b1ca14351aad291112524e432 . - . - . -_:N5165398aea9744d49e3ba082cb6fa0d8 . -_:N87ef2338681b493982fdd6660c334933 . - . - . - . - . - "fixedBy" . - . - . -_:Nd78d72bd38c34a3c804f97f9e6b927a3 . -_:N6d28e1bd9c9f4454b0cd19fce2d51a40 _:N9f2f4966ca1442de8457e4f8329d0710 . - . - . -_:N5c307bac3b90460f8b755b5d46827013 . -_:N4c5910b87a7e4fc69577e8ccd52c8ab3 "1"^^ . -_:N999ce6cccf4c43f493041f0c109b3166 . -_:N597e9b8e9fea4a669873e005bac16fc5 . - . -_:Nc5bf40e3b2584e2eaa4becc473bed079 . - . -_:Nbf34bde0e54243da9c73928c648b8ad7 . -_:Nbd9879e4dffa4f9bbdc67aa2782f06f5 _:Ne92d6e989fde455e8e2dd493a67d27bd . -_:N950494b11f9e43fd9ce4b21264e6a0a8 . -_:N2454277637b14ff0b3c86e707c803ebf . -_:Nb37183f337474d0d8058f31577954cf8 . -_:Nf4064e5c7fb84a899bffb14df5844894 . - . - "republishedBy" . - . - . -_:N896ec867378949ebbc26581fe9cf864c . -_:Nea611e5c42f94004b40d78331b3f6977 . - . - . -_:N41aee74b0dbe4609888f3e3488e75e26 . - . - "Provides relevant information about the AI software, not including the model\ndescription."@en . - "An SPDX Element containing an SPDX license expression string."@en . -_:Nee5028549c054614bcad84bd05b4e1a7 . - "Records the biases that the dataset is known to encompass."@en . - "A reference to a certification report for a package from an accredited/independent body."@en . - . -_:N312b811b38e3467eb37fbf91bc0dd93b . +_:N2a72f2e0c3d44dd5ac4c0633f336d556 . +_:N186b972a57284ae1946b3f7d8e762830 _:N66595c518c6248f69bdca82dccebf454 . +_:N8f24e4128c124ec08b9e80f45a43dd1e "1"^^ . +_:N00d83dee7aa44a7991821a46e83e5164 . + "support" . + . +_:N0c3b30ca2bdf4cb1839bdc608bc41186 . + . + "hasExample" . +_:Nebecc80c7e4045d1b3ad15ab0c1d04ec "1"^^ . + . + "Describes if any sensitive personal information is present in the dataset."@en . +_:N4278c3d777ea4ebd81cd23af80459c2d "1"^^ . . -_:N60be8975df7d4f659d6589e10d3c8e19 . -_:N065968ff4b1d468f80d208a94f728820 . -_:N731ab899248d4b07adeacd5aafffa0bf _:Nb05234e65ed34c2e86c4abf63f02725c . - "audio" . -_:Naae3483836e249d3a4cdd827af0f8631 _:Ndf7f8e578ea545babb3686ec4ccbd3ad . -_:Na9e5a2b2a00c4436a1ad0b1cb737f8f7 _:N71c5c74023cf4a52a8b457b1547df6f4 . - . - "Provides a CVSS version 2.0 assessment for a vulnerability."@en . - "the element follows the Security profile specification"@en . -_:Ne0cb74aabc9c4794b4d9319b9a1fe42b _:N4d126f9477f941e8bd279a13b5a8f5bd . - . - . - . - "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . -_:Ne9376f7e610a4f378d34348bf09acb82 . - _:Nda26387d9677485d8554cf33b606d465 . - . - "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . -_:N0809050b78e64f1c8f5666cc9ffc92a6 . - "Specifies a vulnerability and its associated information."@en . -_:N0da978c5d15a4e0ca2abb1d9a336eba1 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . -_:Na62fed341d814dc8ac95b17410dd06e9 . - . - . -_:N3ed90f3640954f3cb8ac8478cc923b35 . -_:Ndf7f8e578ea545babb3686ec4ccbd3ad _:Na8a357017cea4aaf8263bb41e69ff340 . - "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . - . -_:N81c3ab3c353544c9b673be7535094681 _:N4545916c069c4e0ab8f2f3c3e582d429 . -_:N293889ce0f674698af83932fc5a7b302 . -_:Nfdf2a70978294bcebad4f299b134dc99 . -_:N40997879b8144df69163822d2df5baef . - . - . -_:N9586947b2f2b402c815b61cb75a37942 _:Nee384a627c3d4a89bbf6312a1aa64aba . -_:N22c1a3c4c4964b7f90a94e0af7e75d87 . - . - . - . - . - "A license that is listed on the SPDX License List."@en . -_:N5e77c3af3932465a99431b715d09d12e . -_:Nb55dc8c91e234dedbb3dbcc141a59bc9 _:Nfe1303da564e44c3ab64d0e8f83a0713 . -_:N5f799594600d45d0b83461261182f275 . - . - "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . -_:N1192fb0a041f4b77a8c069659dad0770 _:N57470b62e6a142f9928ab5bfe4606b0a . -_:N442fd7eee89f41b2a0f43bb6b2a05372 . -_:Nda26387d9677485d8554cf33b606d465 "1"^^ . - . -_:Nc416283f46f74c5ca28e42eede357fc1 . -_:N89f5ced0d2b44da98e135f5754616ccc . - . - "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . -_:Nff63d22b8dc54a40a1754583641b37f3 . - . - "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . -_:N2fa63ba2278342bb9c50f3eea6a8c45f "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . -_:Nada0379a8e6840aeab21269255f5c588 . - . -_:Ndfeaf41c217c4e0c8c442c54949d7e6a "1"^^ . -_:N1fb6b0088d4c43e7b3c2fc9342ceaa64 _:Nd134630c82914216aaa76b9680232c0c . - "An Element an annotator has made an assertion about."@en . - "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . -_:N999ce6cccf4c43f493041f0c109b3166 "1"^^ . -_:N26117aef00804f4b9d67298a6fd9c1de . - "sha256" . - . -_:Nf385f0cc22b44164be25837552539b1c . -_:N40b61fa0587f469bb27b3e4ece9283bf . - _:N7476374ddf7c4c82a95e5a63b60e4e0e . - "the Element is a software application"@en . -_:N097b38569ab54334ba50aa2055c21bf9 "1"^^ . - . - . -_:Nad1212fd5ed241c891f8afc9235f406c _:Nfa63aaf3414846a894fd74b0e16b27ef . - "serializedInArtifact" . -_:N62c446ad08764db680206dcd96bc8476 "1"^^ . -_:Nda9579bf8aeb475c986dfda97af9e414 . -_:N5f35c1f648d4471ba9ad3e7fc90e56b7 _:N1a58fcdd17f342af8cfbbbb7d7a9ed87 . -_:Nf1e92f23ec15434084ea8a1bcf7473a8 . -_:Nba91218e21de428abcc29e6f6dd70951 _:N6717b73c37f1437da67113b68f12bf12 . -_:N208b27c07ce6469e9114d5b80dfc4f8f "1"^^ . -_:Ncd807f7a6b8b429283fa3418dc19e6d9 _:N833899f5b4b1487b8858f9aebd17a95c . - . -_:N441c940eb087403188d7f17bd5a55a61 . -_:N3b3c65b750eb401889ee9800adc1da9c . -_:N29943647d0a54ed3bbf4236b7f26fed8 . -_:Ne7755fef413944e6a5bd969d379e8410 . - . -_:N56b887d449ac42dcac573916474bbce1 _:N2bae390e06fc47d4916dcf58441c0065 . - . - . - . - "hasDynamicLink" . - . -_:N1e4dbab89bc942d6934c8d53674bbf1b _:N70201d67aa3f481b9abefcb469f48d98 . -_:Nf43982ec469c40b4b91b9ef5cea7460d . - . - . - "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . - . - "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . - . - . -_:N100bd4537cc64a3c9da777da1eb0ce8e _:Nf9ea823dce8b4178968bb583746dda07 . -_:Ne616eaa63e1944649dd12a3061e5726a . -_:N835bfbd04e26414fa4e0357251d9e6c7 _:Nf1e92f23ec15434084ea8a1bcf7473a8 . - . - "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . -_:N3cf591f215db46d1b2957c0113ce16f8 _:N16549d2169e94a4d8d291368d2d9f71b . - "A collection of SPDX Elements describing a single package."@en . -_:N69674ef0cb504722bc20bd3195026b39 . - . - . -_:N990faf2e9bde43ab98201c748005987c . - . - . - "medium" . -_:Naae3483836e249d3a4cdd827af0f8631 . -_:Ne3abaf912f304b1bbda537f0c9866ce8 . -_:Na40768ed7c6a40fcb01c9e8f1793b8a7 "1"^^ . - "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . - . - . -_:N659a17727ec34fe487d556cc5ed935fa "1"^^ . - "A key with an associated value."@en . - _:N8d911077b7fd4e4180299a09ca29ea53 . -_:Nb6b505dc76be4a36b1710a497695e245 . - "Provides information about the primary purpose of an Element."@en . - "device" . -_:N3f6ce06e6ca2446781e41b064c3d1d58 "1"^^ . - _:Nd3eb5f22c3be4e02942314bbb3d6fc3e . -_:N80091d0c87724fbf9c10267c2549575d . - "Uniquely identifies an external element."@en . - . -_:Nbfec05fc44f6435dbdeeb9f608a28e4c . -_:N88066f14b8624768ac4e2ef3ea08df92 . -_:N60be8975df7d4f659d6589e10d3c8e19 _:N20563c47790549c1a3121000a834c4cb . -_:N71251064642941d5a8323c552deea710 . - . -_:Nf98babca843e446f8ddf5dee59296ef5 . -_:Nc2c6dbe5330f4b17ae33727e45f3e9d4 . - . - "Element is a bill of materials"@en . -_:Ne4c7d5c25b2f46f3b980935a3b7858e2 _:Nb28e67cb657b4e9e910e0447be07f36b . -_:Ne1fcb633a4f546229e86a46e5a84a543 . - . -_:N1cfe20f0d2a049b7b751bd3aa0b4a09d _:N5332cee7bc2443a3b1d7513e03dbfdca . - . -_:N8746b43004e5422e8a87906a64680ef4 "1"^^ . - _:N29943647d0a54ed3bbf4236b7f26fed8 . - _:N2d8b30121bba468383f1a52208a233a0 . -_:Nbf34bde0e54243da9c73928c648b8ad7 _:N1b7b0e6303e14427817b4b206ef940ce . - "Specifies a data package and its associated information."@en . -_:Nc034445fd507418d8439a09bb2e562dc . - "Specifies the unit in which energy is measured."@en . - . - . - . - "hasMetadata" . -_:Ndecce5d991454f63835a411ad5c3d25f _:Ne8307a3d6a8a433fad20e9cf2bd69327 . -_:N2751c2ba1ffd40bda218899993caf814 _:N731ab899248d4b07adeacd5aafffa0bf . - _:N596d74921771447c9b35785007e34f1c . -_:N3be22ea4244a43d6af104de9fed1b4fb _:N193f441ef82a4c6f872a77fdc536a646 . - . -_:Nbf51d2fce0c449ca8df0fa964ec48e89 . -_:N0ffbbdd15b364d55bc0212ba5c32739b . -_:N30c0e029fe894fb8809a14d4f50d81cb . - . - _:Neb11974d792545bab359067d0609d8ef . - "test" . - . - _:N442fd7eee89f41b2a0f43bb6b2a05372 . - "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . -_:N67a7c2de8c574fb991ccc64346e1de56 . - . - . - "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . - "Capture the scope of information about a specific relationship between elements."@en . -_:N2fd6d6c96c7b46dabc958e2ddb32657c "1"^^ . - . - . - . - . - "Provides a map of a property names to a values."@en . - . -_:N315a049473324a5d82678153bc504c4b _:N8c3b465b415b409d895456c2f6ee7c50 . - "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . - "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . - . - "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . - . - "kev" . - "Specifies the type of an external reference."@en . -_:N96ab198cab814dceb4dc205e80f644d6 . -_:N727e38139bfa40d9b56e586cf9ac5bdb . - "issueTracker" . - _:N8373dd8071e2429e95b3b0897bdab7de . - "the Element refers to a chipset, processor, or electronic board"@en . - "the Element doesn't fit into any of the other categories"@en . -_:Ndfbc16b71fc74cb09458e7b7f0e12f1a _:N2bdf11c1b85e405a835c07e19f150556 . - . - . - . - "kilowattHour" . -_:N37e9effec5ca4011a388b871588a9bfc "1"^^ . - . - . - . - "hasVariant" . - "2024-04-05"^^ . - . -_:N744e6bd4bf054480b6e284543bb79b87 . -_:N30ddffc861f14836a83cde39db10d792 _:Nd698c35793ab47df8eaa1d9f6fe9f131 . -_:Nbf51d2fce0c449ca8df0fa964ec48e89 . - "securityAdvisory" . -_:N08242c50c463457c930eba2a9659cdf9 . + . + . +_:Nb4381a5cee3143a482af28cf9a364f3c . . - . -_:N208b27c07ce6469e9114d5b80dfc4f8f . - . -_:N18ed9985cff84e34807e6aa0a780a707 . -_:N0da978c5d15a4e0ca2abb1d9a336eba1 . - "development" . -_:N3be22ea4244a43d6af104de9fed1b4fb "1"^^ . -_:N6761e7f2e133401fa1a4d1f8bed0202e _:N48e045eccfb146548852b6d7274d180e . -_:Nee384a627c3d4a89bbf6312a1aa64aba . -_:N99061926c1b041518ba79742537acbaf . -_:N37712d80dea04088b1ab530db3aaa7fd _:N1192fb0a041f4b77a8c069659dad0770 . - . - . -_:N6dd024b62af74fb5a94391f7343f1c79 "1"^^ . -_:Nad60293878ba46b5b12652a41f9e5b9e . - . - . -_:N56d611894502410481612d5cb6016003 . - "directDownload" . -_:Na168e6a25ca4415aa927f2d16152226c . - "hasEvidence" . - "sha3_256" . - . -_:Nbfec05fc44f6435dbdeeb9f608a28e4c . - . - . -_:Na9d0fc4b8c454d308184549fca9959b6 . -_:N67b0d956754a43a5b927ae155984d43e . -_:N2895a64ec18c48e68dbf01572a5d0cc8 . - . - . -_:Na9d0fc4b8c454d308184549fca9959b6 _:N64aa14b2a42d49a394ae8a9d4febed04 . -_:N1f599cc99ec04100bcd965c2ec4fdbfe . -_:N65e7526ffa224998af69bd3d4082b522 _:N045868218fe84846bfd5a8efe73f5f05 . -_:N2c65a23cf781468598b84d1456d825fb "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . -_:Nb09770ecd1d644e4aa2b0faf704a96de . - . - "contains" . - "A reference to a runtime analysis report for a package."@en . - "hasStaticLink" . - _:N2fd6d6c96c7b46dabc958e2ddb32657c . - . -_:Ne2b61099faaa4dfeb2a1dbb6cb39c943 . - . - . - . - . -_:N7f27ce1812214cf08ea19bcb018764e2 . - . -_:N67a7c2de8c574fb991ccc64346e1de56 "1"^^ . - . - "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . -_:N46b3ee96a83c4a44bb51112e0ca4621c . - . - . -_:N87ef2338681b493982fdd6660c334933 "1"^^ . - . - "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . - "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . - "A reference to a risk assessment for a package."@en . -_:N57470b62e6a142f9928ab5bfe4606b0a _:N990faf2e9bde43ab98201c748005987c . -_:Nf3860ad4cc5d4d87be1f408701c9f435 . - . -_:N28c546d9833444d7b7370a64f4274b1b . - _:N80091d0c87724fbf9c10267c2549575d . -_:N70a01ce1edb94124ac3d6a3b187db793 . - . -_:Nde44f9707bd34a41a8e403a4f539bb2e _:Ndfbc16b71fc74cb09458e7b7f0e12f1a . -_:Nb3c96ed9edf047408c12db5df1daaf43 . - "noAssertion" . - . - . - "Low/no risk is posed by an AI system."@en . - . -_:N8049abc6ee7f449ebf27e3e8357bdf75 . - . -_:N058b8decd10442dc9da66c8ec337fe89 . -_:Na168e6a25ca4415aa927f2d16152226c "1"^^ . - . -_:N6e7150c4286149b7aa27ddf655625b5e . - . -_:N1013910040b04b98b3a99c32bab64312 _:N60e06f4852a44b05b3dfdbd769a39b3a . - . - "Element is an Artifact that can be run on a computer"@en . -_:Ne84bb159066e48a1a884cceaa3854438 _:N1013910040b04b98b3a99c32bab64312 . -_:N208b27c07ce6469e9114d5b80dfc4f8f "^[^\\/]+\\/[^\\/]+$" . -_:Neb11974d792545bab359067d0609d8ef . -_:N320baf3ea5274f3393919c1999ded96d . - "Used when the type does not match any of the other options."@en . - . - "hasOptionalDependency" . - _:N150b1880a8e64af2af56beec5b8f629e . - "Identifies the name of an Element as designated by the creator."@en . - "A license exception that is listed on the SPDX Exceptions list."@en . -_:N5a18c93b836b4c75887455a2be533616 . - "Abstract class representing a License or an OrLaterOperator."@en . -_:N7e45c1203a3548efa7e52e91b09b78f1 _:N312b811b38e3467eb37fbf91bc0dd93b . - "data is audio based, such as a collection of music from the 80s."@en . - "none" . -_:N5c307bac3b90460f8b755b5d46827013 . - . - "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . - . -_:Ncdb4a970c7f542688b373a1da217c447 . -_:Na1ab85fdd72146cfb0eb275a20aed6fb . -_:Ne14b54567e794b13a34acf8718d2ccf6 . -_:N9b40da1378ab4d6e80898c98996790e2 _:Nf05790d65f4b451781271dd86a5b4005 . + . + . + "act" . + . +_:Nce9a69dc19af4e1394f03174c67c5857 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "other" . +_:Nc9ddcdf86e874968aa8f5ba821975eb4 . + . + . + _:N1647e706f6764e7d9ec4e0aa8979d0c6 . +_:Nf284f365ba5c4e4da40d7d7900d82744 . +_:N4b7945a329d940d7a4167237a4e60e53 "1"^^ . + "A collection of Elements that have a shared context."@en . + . +_:Nc7b49cc0a08745e08e5ba42ee492184f . + . +_:Ndde9f898797c42b989ef522557debf64 . + . +_:N4f7ca95fbfad4d20810e92ab09220394 _:N95c7a63c89e94f8d9ceb0dd0c34ac9e3 . + . + "modifiedBy" . + . + "System Package Data Exchange (SPDX) Ontology"@en . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N91d11db27b28462b8545b78734a27503 "1"^^ . +_:Na8cf54eee3ac40cca0ed6cfdaef6a576 . + . +_:N2061c93cd5774c61823bf76c952d5242 _:N6369a0cffc0445e888c1e30a54a5be5d . +_:Nbf6c9a626dad41fa8a0422cb3ddab7a3 _:Ndcdb30d7deca45a8bc3e563144933f0e . + . + "republishedBy" . + . + _:Na96bc2776ef4488595f136d0fbac26a6 . + "A license or addition that is not listed on the SPDX License List."@en . + "clear" . + "sourceArtifact" . + . + . +_:Nbc1332652da345c49ad3c948238f404b . + . +_:N516b1b46dbb04f1c953906f0388bf8b4 "1"^^ . +_:Ne3e1ac11e78640fab50085207414679f _:N510a0fe04f844da5bb96208d9e6a563c . + . + "delegatedTo" . +_:Nae8e63939c7c4cf4aa4ba555362d775c . + "A reference to a runtime analysis report for a package."@en . + . + . +_:N89d361d3f1d94de5b28ee82b1d3da3de _:N93d2d1d1dc3e4b7ea516ee004f674bfb . +_:N163fe4499b2a454a9641b23118bf53ae . + . +_:N425d570f86674f7facee623f8d84a311 _:Nbd45f3e248c84b27b2e1a0da67d47a71 . + . +_:N5ddf9ddcd2bc446f8729bd7a23566faf _:N0cac787ed3f3421fa6687df4da790a0c . + . +_:Na1cdda0a73e94e598b769cac4a5a5cb8 . + "A distinct article or unit related to Software."@en . + . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + . +_:Nebecc80c7e4045d1b3ad15ab0c1d04ec . +_:N58c62d134f5e41d78440946685ecf0cc "1"^^ . +_:Na0242fde5c314aa599a3a00cfb01634c . +_:N68e2aefd82ab40c59cc6c2bfeab0adc4 . + . + . + . +_:N07cb32d0626a45cfbea37a7dd2a8b854 . +_:Ne21f363965114243b81ce67f76575de3 . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:N1a0279389d714631b1d12935e9f2b014 _:N70cbc4a60eda4e648df0df882fab278d . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . +_:N4b7945a329d940d7a4167237a4e60e53 . +_:N4881d1614aa0403894d16c3ca276d790 . +_:Ne223bb746dc9463bbbe16ca844619e98 . + . + . +_:Na1cdda0a73e94e598b769cac4a5a5cb8 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + . +_:N7368659f06844e79815bdbdeac2b73f3 . +_:Nf71f6300b14a4726a20ffad899bed919 "1"^^ . +_:N8adbab8e05cf4258a0b7e9eedbd03e5f . +_:N66595c518c6248f69bdca82dccebf454 . +_:N6ac0694afb0c40c1bb0988b0569f0cb4 . +_:N52399fdf517c416ebb2e470463b71b5d . + . +_:N38aeb59117654398b393a546eaaa5fd9 . +_:N4f9424fdcb0643a6b8dbd2c83de164a1 _:Ne21f363965114243b81ce67f76575de3 . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Ne3b40c9739164b2eb0ae163374d9c4ac . + "Specifies the type of a content identifier."@en . +_:Na44640dae5c34e6ab6f3759a75426eb0 _:Nbbe9948554644fd8b49899d278739242 . +_:N954579de61d84bef909737ad4568a536 . + . + . +_:Nc51fb19223644705a84f646344b7e9d3 . +_:N9eda1b52fa264730ab0b383d300e1726 "1"^^ . + _:N73f9586a8a7d4b978afcb9cfe998050b . +_:N036299b1f2af44eeb966da8a1217ac9e _:Nd6ca1bcbdc494e39a9c1a4da0c52a0b3 . + . + . + "megajoule" . +_:N4278c3d777ea4ebd81cd23af80459c2d . + . +_:N78c7513398064da1a55c5df1b3c96444 . + "patch" . + . . -_:Ndb56a4a0aad9490faaa05462a9fcc5b9 . - "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . - "Identifies an external Element used within a Document but defined external to\nthat Document."@en . -_:N00f0f016bff441178fb3b14b0f1ba310 . - . - _:N097b38569ab54334ba50aa2055c21bf9 . - "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . - . - . - . -_:Na341e2127b1c4da9b7a2c521b48ba61d _:Nc7468096abf8437e9360a8148a93acdf . - . - . - "Records the results of general safety risk assessment of the AI system."@en . - "Enumeration of the different kinds of SPDX file."@en . - . - . - . -_:Nf37cc853c16d47099115691bcb77f2e1 . - . -_:N065968ff4b1d468f80d208a94f728820 . - "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . -_:N761b1b05ac5746c3b86d599c46526598 . - "A reference to the issue tracker for a package."@en . - "Specifies the time from which an element is no longer applicable / valid."@en . -_:N75a4a8a0dcc14090818fdc6eade781c2 . - . - . - . - . + . +_:N264b55b33a4549a6a131d79763879896 . + . +_:N52399fdf517c416ebb2e470463b71b5d _:N40f9e58aac214052a173ad93b4ed57e9 . + . + . +_:N36b7d391e5cf402199bf454d82f5735c _:Nfbd5a9c0923c423a84d0bb8fef89f4a3 . + . +_:N63f963c2c8a4467bb803f9af7eaafd3d . +_:Ne68051bb209048da9a57bc5dbaf28bf0 . + "yes" . + . +_:N30d5cdb21c144005b1d74c81aa0e129e . +_:N37829b662873490d9964f7bbbc300fce _:N3c8c7c06f10e44fea576f974877ed15b . +_:N576b7fbe3ba74572a6eb065c67761847 . + "the element follows the Core profile specification"@en . +_:N4e1bd25f594a483ab492b4c24a5748eb . + "expandedLicensing" . + . +_:N85ad449141be453592e9e80c2bc379f4 . + . +_:N7368659f06844e79815bdbdeac2b73f3 _:N2847f93323fd468eab2b926c5715c994 . +_:N89d38dc48bd64f1d894f7f8c5494c264 . + "The highest level of risk posed by an AI system."@en . +_:N13396ee366a94de388e2aff47754e81f . +_:N6bd3d2cfd9cd4f248e354deb40a851ff . + "specification" . + . +_:Ne68051bb209048da9a57bc5dbaf28bf0 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + _:N034bf868068348fb92f2f33976cad5ae . +_:Na461e12485ec495f9d16f08504499025 . + . +_:Nc4156282a9c34b6190b0869cdc1793db . +_:N0bf807da343b4645904db560abf69583 . + "blake2b384" . + "the element follows the AI profile specification"@en . + "The result of applying a hash algorithm to an Element."@en . "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . - "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . - . -_:N7a1979daf894407dabf96d89e984ff05 . + . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + "The Element is data."@en . + "A reference to the issue tracker for a package."@en . + . +_:N132cde65c9b14a1694d400388aecf0cc _:N23a349d7f4a14351adf4c70293152926 . + . +_:Nf26016059c3e414da185e30155b543f5 . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + _:Ndde9f898797c42b989ef522557debf64 . +_:N4f6d0abf94b14a189b945346f00ba9dc "1"^^ . + . + . + "riskAssessment" . + . +_:N8e672d95ff7d48e68c1ed7ecf019b269 "1"^^ . + . +_:N40f9e58aac214052a173ad93b4ed57e9 _:Nf81435c80dee4c1db825f1917f62e947 . +_:Nb2f2a5ddadbe4718954d50737f92e201 _:Na44640dae5c34e6ab6f3759a75426eb0 . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + . . - _:N0f509a18a72e4662a7e7fc2fe485c3ac . - . -_:N01b77c997a784a81856bfe55a59f0d26 . -_:Nc0df3f2041aa425183862b62f02dd829 . -_:N9c23cd2dcd4243b996ef8897bfa8759e . - "application" . - _:N37e9effec5ca4011a388b871588a9bfc . - "A License participating in an 'or later' model."@en . + "A reference to a published list of releases for a package."@en . + "Provides information about the creation of the Element."@en . + . + . + . +_:N687efc23ea2c4c0b9a09c9ca45dc49b3 . +_:N329ecc1447f349cc968623ddffe6a2f7 . +_:N963f7603cd844b03bd4631e0713b1635 . + . +_:Ne93ae5d0cb664d7ab2554eaa72a23f25 . + . + "The Element is a software library."@en . + . + "audio" . +_:Nb4381a5cee3143a482af28cf9a364f3c . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . +_:Nc3c21678fc9a459784f054a6954a9aa8 . +_:Na96bc2776ef4488595f136d0fbac26a6 . + . + . + . +_:N8adbab8e05cf4258a0b7e9eedbd03e5f . +_:N731241b6024d4e109893eb1354404ec5 _:N897df0f6e23b488988a2d2db8aad5bc4 . + "directory" . + "Refers to one or more Elements that are part of an ElementCollection."@en . + . + "A relationship has specific context implications during an element's design."@en . +_:N58b8de667bb54771976a5e86a8a8139a . +_:Nbd47cac50394462f9015e00ec4b449a6 . + "buildSystem" . +_:N894cee407d8747ec8adc2f05ce722a86 "1"^^ . +_:N00fcf1f501a749fc9cbbdbdf23a7aaa8 "1"^^ . +_:Nda71586c3c6541b4a6a907d316dca405 "1"^^ . + . +_:N34cf4751490f48f9852ff2fa143a6321 _:Nd1b797da281643468add752e036349fd . + . + "filesystemImage" . + "Specifies the version of a VEX statement."@en . +_:N942417ca6d844df0914d75b099a457f8 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9c1ccbc2b86f454395a450f736b67eec . + . + "framework" . + . +_:N9dbe04a2eaac4271aafe4a7650ec4e15 _:N261545ecf40d4f65bf47dc050598e90f . + . +_:N45b62edbd5f3406dba20232288ec19fd "1"^^ . + . + . + . +_:Na3925605d49b4db382603ae946c37f51 . +_:Ndb06ff981cef4e94bfdbec22badacd4d "1"^^ . +_:N9bd771ac02cc41519919a01d4deca105 . + "releaseNotes" . +_:N41fda4edc0294fce84cdb5688d8ef9ef _:Ne06f01bddfb24f69a9e1c0ba9694b11d . + . + . + . + . + . + . + "Specifies the CVSS vector string for a vulnerability."@en . +_:N3d9237b249544033acbf7d94cac2b424 . +_:N2b7fa052bf664f2a9e1923831d282602 _:Na5ef7f1675b84ce99e4f4ca36d200a91 . +_:N8e672d95ff7d48e68c1ed7ecf019b269 . +_:N74551d5c49b94ece99a5fdec0d58d233 . +_:N034bf868068348fb92f2f33976cad5ae . + . + . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N62b8677868664944abc9f19745aed957 . +_:Nc3c21678fc9a459784f054a6954a9aa8 . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . +_:Nb850dda843534d3ab3ffbadf70766fef . +_:N4aa1ea2c440f4aecb7a6656a599fbf22 . + "sha3_256" . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . +_:Ne11c75cafdb0438299216847b06716cf "1"^^ . + . +_:N5a2b8b0073a54a3db4d6092f1c5043ed "1"^^ . +_:Na2b089e6c69d4697ae4de61d18f020f7 . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + _:N0bf807da343b4645904db560abf69583 . +_:N615be2b8b7174608b24884d12a2039ad _:N37829b662873490d9964f7bbbc300fce . + "patchedBy" . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N894cee407d8747ec8adc2f05ce722a86 . + _:Ne20cfbefa1424ba79abfc89287f1eef3 . + . +_:N00fcf1f501a749fc9cbbdbdf23a7aaa8 . +_:Nb40076de31ba4cc08826656559e10385 _:N59f692071bb64860ab9f02cfb4670088 . +_:Nda71586c3c6541b4a6a907d316dca405 . +_:N7a48123f699948b5867af1fec0d7b88e . + . + . +_:Nc8b9ea4213214eccb17ccccf3790161d "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "A reference to metrics related to package such as OpenSSF scorecards."@en . +_:Na8cf54eee3ac40cca0ed6cfdaef6a576 . +_:Nae7b37ebeef141519b9f1102ae1b30c5 . +_:N0713bbcf2b1f4e23b912a81e12b5d270 . + . +_:N542022ab56194a2184bd872572ca204b . + . + "buildMeta" . + _:Nce9a69dc19af4e1394f03174c67c5857 . +_:Nf44042158d4d4c85a5bd6a0fcb538498 . + . +_:Nf5531d9c16ff4f589dff19f480634c29 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . +_:N991d42b910e64656b45d7c4ce9e7f5e3 _:N734a831b529349fb969fd328dc6dcb1c . +_:N565a78360e28494ea80897aadf944c0c . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + . +_:N5b2278fb3a8e4e239193a033f8b4bf04 . + "publishedBy" . + . + _:N4f6d0abf94b14a189b945346f00ba9dc . + "hasDependencyManifest" . + "Dataset may be distributed freely, without restriction."@en . + _:N0781395df11e44a6a3186f0fa8908958 . +_:N5a2b8b0073a54a3db4d6092f1c5043ed . + . + "Provides information about the primary purpose of an Element."@en . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . +_:N763c69315ee040a88ca27b5205984626 . + "Specifies the unit of energy consumption."@en . + "sensor" . + . + . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . - . - . - . -_:Ne0cb74aabc9c4794b4d9319b9a1fe42b . - _:N41aee74b0dbe4609888f3e3488e75e26 . -_:N55072cbd77a64b16b152c20236d786f7 . - . - "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . - . - . - . -_:N5332cee7bc2443a3b1d7513e03dbfdca . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . + . +_:N80dc66a1ccec469392596c5291fa2864 . +_:Nebecc80c7e4045d1b3ad15ab0c1d04ec . +_:N9b9dc778bc5c415fad7f82cf4f6047d2 _:N68767751c5f64fc1afe82f2dcbae6636 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . + "A reference to a risk assessment for a package."@en . + "A tuple of two positive integers that define a range."@en . +_:Na2b089e6c69d4697ae4de61d18f020f7 . + . + . +_:Ne820a8ec67114d53b03a71f5f7be31f5 "1"^^ . +_:N105628f6c8b040edb9db617f35f30bec . + "the dataset is publicly available and can be downloaded directly."@en . + . + "sha224" . + . +_:Ne11c75cafdb0438299216847b06716cf . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "References the Element on the left-hand side of a relationship."@en . + "Specifies the exploit catalog type."@en . +_:N7c7a260c778e4d4491ba75a0fe083ebe "1"^^ . +_:Nd6f4245b3ebe44e6b100782b191deb97 _:Nf58f6bed32c5414ca98526a5d6a7b6dc . +_:Nc0c94fed0eb041ef8c4fe70f4b1fd7c0 . . - "A distinct article or unit related to Software."@en . - . - "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . - . - _:Nf32238231fca45f1ac5221bd1ecd220c . - _:N5e77c3af3932465a99431b715d09d12e . -_:N0f7bf6e1b6a84c71b96db0ed65f445fd . -_:N5165398aea9744d49e3ba082cb6fa0d8 _:N7d3cea31b9db4418ad60cbbcd3f14b75 . - "Specifies the version of a VEX statement."@en . -_:Nf7805d1c06ba43eaa22c6043949bd567 . - "noAssertion" . - "usesTool" . -_:N62354c6ede0641c2a17958df1fce06bf _:N5165398aea9744d49e3ba082cb6fa0d8 . -_:Ne8b93e1651f84d5f8ff94e4b82012f07 . - . -_:N13b921afee3a413e9a3b06c638bf7824 . - . - . - _:Nfc79218ef172418cad1d73977bceaf78 . -_:N75afbc0eb6e646f28396b52ee0131582 . - "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . -_:Nf37cc853c16d47099115691bcb77f2e1 . - . - "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "A reference to funding information related to a package."@en . + "securityOther" . + . +_:N9ed65925a89e40e8b7faaa925d739c72 . + _:Nc51fb19223644705a84f646344b7e9d3 . +_:Na2b089e6c69d4697ae4de61d18f020f7 "1"^^ . + . + . +_:N58c62d134f5e41d78440946685ecf0cc . + . + . +_:N230a41f8c8d549b8844a37595ce56867 . + "securityFix" . +_:N13396ee366a94de388e2aff47754e81f . + . +_:Ne3b40c9739164b2eb0ae163374d9c4ac . +_:Nda71586c3c6541b4a6a907d316dca405 "1"^^ . +_:N10002d3538094764a9c6d3893234cd04 _:N037a9f94d4da4593a56a6804fca57483 . +_:N210fbcf85b384009a2cee68e4a7e6b78 . + . + "The relationship is known to be exhaustive."@en . +_:N4f6d0abf94b14a189b945346f00ba9dc . +_:N682abb8a6bbc40e9947aa2d9d66eec4d _:N4571ded3acc34f068931feecaa278a44 . +_:N2056bd91659a4260a6eb99a0cbdd9f14 . + . + . + _:N825f749765e348a0abfef75f63c1588a . + . + _:N53970517ea09401691d51549f8e0fd90 . + . +_:Naf01116eff7c4759be95f8f97c257d9c "1"^^ . +_:Nf44042158d4d4c85a5bd6a0fcb538498 . +_:N07868b0098174c478ac47f3fbc946ff0 . + . +_:N53970517ea09401691d51549f8e0fd90 "1"^^ . +_:N1314ef461724483f9bd5c56d939b17c4 _:N4dcad64fd9cf4af2b8d6ea98d6c5450a . + . + "Provides the location of an external reference."@en . + . + _:N10f5cc15b506459db381c02764d60e76 . + . + _:Nd3d538fe1cb544b5808c51dffd844c81 . + "Identifies who or what created the Element."@en . + . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd11df36dd5014f759eab790e847b9857 . + "hasVariant" . + "deployed" . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N510a0fe04f844da5bb96208d9e6a563c . + . +_:N7c7a260c778e4d4491ba75a0fe083ebe . +_:N6369a0cffc0445e888c1e30a54a5be5d . + . + . + "Describes relevant information about different steps of the training process."@en . +_:N3c8c7c06f10e44fea576f974877ed15b . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:N3c163fcab8684aa09c61e78b4cbb9b38 "1"^^ . +_:N77f1a43a35e5447c83116261ae574acc . +_:N329ecc1447f349cc968623ddffe6a2f7 . + . +_:Nae7b37ebeef141519b9f1102ae1b30c5 _:N682abb8a6bbc40e9947aa2d9d66eec4d . + _:N786a3eaa8fbe4cf0bb67c4e086fa8b5b . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . +_:N0274510beacf46b0b7cd7048ff3cbb4d _:N3b50e4323e8b4d388d8d522e18a49070 . + . +_:N4aa1ea2c440f4aecb7a6656a599fbf22 . +_:Nc704d39d408f41caa9805e140ff0016a . + "A reference to the security adversary model for a package."@en . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + "eolNotice" . +_:N954579de61d84bef909737ad4568a536 _:N48b3e9d109d34fdeaa6cbef58c05c171 . +_:Nc4156282a9c34b6190b0869cdc1793db . +_:N5ddf9ddcd2bc446f8729bd7a23566faf . +_:Nb40076de31ba4cc08826656559e10385 . +_:N91d11db27b28462b8545b78734a27503 . + . + "sha512" . +_:N8adbab8e05cf4258a0b7e9eedbd03e5f . + . + "track" . +_:N79b4dcdd054d4ca8a87fc86377c9366b _:N30d1dbbf97fb456eb18d38b76c8004d3 . + . + _:N7a66c734ced842b4913ff95c5f5cf452 . +_:N5ab248e680454bbcb3ed254de24ac49f "1"^^ . +_:N4182e8c878544ebb842682b1ece2bd3a _:Nae7b37ebeef141519b9f1102ae1b30c5 . + _:Na42e3794f624483e818646ed683c5ba2 . + "An entity that is authorized to issue identification credentials."@en . + "medium" . +_:N7f095ac56c3e4bccbcd4348b29980439 . +_:Nf142b126cd744b69be8d6c35ee1361e4 . +_:Ndbf7c5384f2242b98dd62b6a8d6a503f . + . + . + "This individual element was defined by the spec."@en . +_:N83935261300041758021c5a3fbdae6c0 _:N7368659f06844e79815bdbdeac2b73f3 . + "syntactic" . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + "graph" . +_:Na79e142094fb464da3de3ceb4108e4ff _:N28c7097edd884a9b92697ec6b6729dc9 . + . +_:N5b2e4dda703849e4933338ff0970e968 . + . +_:Naf01116eff7c4759be95f8f97c257d9c . +_:N68e2aefd82ab40c59cc6c2bfeab0adc4 "1"^^ . + . +_:N87131d5acc2b478ba16230f714aa0bb0 . +_:N27a8c8f61e944083abcc670fe4586df8 . + . + . + . +_:Na3925605d49b4db382603ae946c37f51 . + "software" . + "A reference to a certification report for a package from an accredited/independent body."@en . + . +_:Naa7e95f812804669b3e89daed8d27b21 . + "Used when someone reviews the Element."@en . +_:Nc7f12b88e8f5489dacbbfeb81192696a . + "Dataset can be shared within a community of peers and partners."@en . + . + . +_:Ndde9f898797c42b989ef522557debf64 . +_:Ncae19f1586924a439b37e75eb5b57ed4 . +_:N96120491adc84204822952240ddadf13 . + . +_:N39638ea4b52f4236b7a808cb979d2f4b . +_:Na1ce1658c3be4bc0b082944caae9ddea "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . +_:N328adb4bb1ec422084a2169890188a03 "1"^^ . +_:N507c6135f8424e8db67fe59ae93eb464 . +_:N8692a82c280845c3a6fa37c02ddae229 . + . + . + _:N3c163fcab8684aa09c61e78b4cbb9b38 . + "Provides a detailed description of the Element."@en . + . + _:N07cb32d0626a45cfbea37a7dd2a8b854 . +_:N942417ca6d844df0914d75b099a457f8 . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + . + "red" . + "swhid" . +_:N8b86dbc23a22407a9380fbd9376d3b83 . +_:N07cb32d0626a45cfbea37a7dd2a8b854 . +_:N510a0fe04f844da5bb96208d9e6a563c _:N9dbe04a2eaac4271aafe4a7650ec4e15 . . - . - "secureSoftwareAttestation" . - "the dataset is publicly available and can be downloaded directly."@en . -_:N0295e624408541b9b840c231db039610 . - "dataset" . - "data is stored in tabular format or retrieved from a relational database."@en . -_:Nf56fec24d5a44761b7a239c789c51504 . -_:Nfe1303da564e44c3ab64d0e8f83a0713 _:Nde44f9707bd34a41a8e403a4f539bb2e . - _:N896ec867378949ebbc26581fe9cf864c . - "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . - "Describes the type of the given dataset."@en . -_:Nfc79218ef172418cad1d73977bceaf78 . - "Specifies the SSVC decision type."@en . -_:Nf2495df384ef4dfe9e42259508a5f433 . - . -_:Nf05790d65f4b451781271dd86a5b4005 . +_:Nef3e82bf7eac41aa8dc101eabd0f1815 _:N4ac93d52ef544d5cb73aeaeb279b7567 . + "Property describing a parameter used in an instance of a build."@en . +_:Nfcc30e48020d4dd2b3493a0cd55ea457 "1"^^ . +_:N27a8c8f61e944083abcc670fe4586df8 . +_:N0b728d22a9674ecc87af12fde5aae61c . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . +_:Nf507b9bee5ae4254bafe4ce3c72a9f18 "1"^^ . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . + . + "A License participating in a 'with addition' model."@en . +_:Nb6e99584403541df96486fcac6d79017 . +_:Nc15495aea74e4883afce40f042a057d5 _:N58c3f747313349d396ead702e2de2953 . +_:N14d7232930234cad917631e1993d7ccd . + "Specifies the time an artifact was released."@en . +_:Ndb06ff981cef4e94bfdbec22badacd4d . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . +_:N65301d1be04341678842dfc049e2a33c "1"^^ . + . + . + . + . + _:N269b628c85f04f5d8a10fa3c500745a4 . +_:N264b55b33a4549a6a131d79763879896 _:Nc0c94fed0eb041ef8c4fe70f4b1fd7c0 . +_:Nc82d9b6d9a4a40d6b95e4cd04612ac98 _:N4ad4011b5f8c44cbb3e76f5da0885cfd . + . + . +_:N516b1b46dbb04f1c953906f0388bf8b4 . +_:N722c45f262084ffa9b063b852952397b . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . +_:N8a37deb026864cdca312209746e2caaa . + "dependsOn" . + "A reference to binary artifacts related to a package."@en . +_:N0e471571470240e5872be57bfd58fed9 . +_:Naa7e95f812804669b3e89daed8d27b21 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . +_:N45481eab750645b4929b7b63c8ca7916 _:Nf94717c65e4f4b86b4df261ecf26650d . +_:Ne820a8ec67114d53b03a71f5f7be31f5 . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:N5e678b3ba38745b58c0103b8e085d5c8 . + "The Element is a software manifest."@en . + . +_:N7f2c8d25f5df4c27b35c70d38090eab3 . + . + . +_:N1a8882804ac24104946e7afa0b36905a . + "Specifies the algorithm used for calculating the hash value."@en . + "endOfSupport" . + . + _:N85ad449141be453592e9e80c2bc379f4 . + . + "Identifies from where or whom the Element originally came."@en . +_:N328adb4bb1ec422084a2169890188a03 . + _:Ne81afbff18a74c75ac853da24ab327a0 . + "affects" . + "incomplete" . +_:Nabd40767fbd84edea7e048b911a681e4 _:Ncba4137ebcf84a728acd12bde91130e9 . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . +_:N61b9a25cae674e199ce6572456d8e72f "1"^^ . + . +_:N00d83dee7aa44a7991821a46e83e5164 "1"^^ . +_:Nc4286224070a4248ad8590c45a7c8bc6 _:N425d570f86674f7facee623f8d84a311 . +_:Na3d930b22d4f462cb8bcb86adb108e16 . +_:Nd73c69088f734dffb4cc9539c637aecf . + _:Nadd5d6fa295c47ee82d49e5fde059110 . +_:N6f8ca85700744b0e9f7a8672675d1dca "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "Captures the size of the dataset."@en . + . + _:Nf507b9bee5ae4254bafe4ce3c72a9f18 . + . +_:N1aac3c1c2ffb45d79910e133d9ec02f9 _:N3c34004e669a4f809790739b55299420 . + . + "hasAssociatedVulnerability" . +_:Ne03121e956234709bc0f8f288597ff50 _:N261c61aa119e4f4e9ce3c9387fb29c9f . +_:N40bcef929ef64825a68929a36aefa27c . + "falcon" . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + . +_:Nc82d9b6d9a4a40d6b95e4cd04612ac98 . +_:N1256cfafa26e453a9d5f8b08cc5920d7 . + _:N90cb783276d74a2881e21a08abf01e2f . +_:N61b9a25cae674e199ce6572456d8e72f . +_:N74551d5c49b94ece99a5fdec0d58d233 "1"^^ . + _:Nc3c21678fc9a459784f054a6954a9aa8 . +_:N00d83dee7aa44a7991821a46e83e5164 _:N2456bf573caa4efeab27607dfed5a451 . + . "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . - "A group of people who work together in an organized way for a shared purpose."@en . -_:Nd08114b692094bc788d0ff08c066c7fe _:N229d11f8176c4bb7acd631c6b7187287 . - "Represents the energy quantity."@en . -_:Ndf7085005814495cbc9689c68bb9683d . - "publishedBy" . -_:N1b7b0e6303e14427817b4b206ef940ce _:N3b17c87267444ae5aae5e12fc54addb6 . - . - . -_:N73c4669b1ca14351aad291112524e432 . - . -_:Nb40056258a0d4d96a453b1af72d463fc _:N9063493949754db985c6c4bb9effda34 . + "The Element is a software framework."@en . + . +_:Nda791debefe5491aa84d61433873c630 . +_:N93d2d1d1dc3e4b7ea516ee004f674bfb _:Nc71de92f1cc649fcab4d77d974dac329 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . +_:N916e8c3c85774fcd96b700a20240ca75 . +_:Nb2747510507b404f9243bfd7225f629d _:Nc9235a4485e64fff9b1298095061a58e . +_:N904326509fc04cc4be66ea123ed9fdc4 "1"^^ . +_:Nc63741a7112e471ba97ce37e05f2dac1 . +_:N50c6944cf3544d0ab17d40d70d7715c3 . . - _:Ne8b93e1651f84d5f8ff94e4b82012f07 . - "urlScheme" . -_:N5665c63b6756409c9cdaed2974ba4360 . - . - . - . -_:N1f599cc99ec04100bcd965c2ec4fdbfe "1"^^ . - _:Ne0cb74aabc9c4794b4d9319b9a1fe42b . - "Specifies the unit of energy consumption."@en . -_:Nc034445fd507418d8439a09bb2e562dc "1"^^ . -_:Ne2b61099faaa4dfeb2a1dbb6cb39c943 "1"^^ . - . - . -_:N6717b73c37f1437da67113b68f12bf12 _:N37712d80dea04088b1ab530db3aaa7fd . - "A key used in a generic key-value pair."@en . -_:Nc05797f950af44fbadd42eee2e56df6c _:N558588160dbd42e28c5618ebcbb6e00a . -_:Nab78d95787b8439db6189f9699047620 _:N1b99de6ce73e49328dc792c34798532e . - . -_:N7f27ce1812214cf08ea19bcb018764e2 "1"^^ . - . - "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . -_:N1685d66aa43c40318d7f1a9af5281dbf . -_:Nf37cc853c16d47099115691bcb77f2e1 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . -_:N896ec867378949ebbc26581fe9cf864c . -_:N7e45c1203a3548efa7e52e91b09b78f1 . -_:Nf3860ad4cc5d4d87be1f408701c9f435 "1"^^ . -_:Nc7468096abf8437e9360a8148a93acdf . -_:N21edc1b1c7c94a53a14c23900721c4b8 . -_:N3e6f3584b185432c90902e8ec47e33fd _:N5f35c1f648d4471ba9ad3e7fc90e56b7 . -_:Nb953247c1d474ff9b1190938b713a604 . - "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . - "A value used in a generic key-value pair."@en . - _:Nd73c665e4d964b40be2d12cdc7ab7fa2 . - "extension" . -_:N64aa14b2a42d49a394ae8a9d4febed04 . - . - . - . - _:Ne14b54567e794b13a34acf8718d2ccf6 . -_:N6b93f4527c92420f97b4d4d8c27840f3 . - "support" . - . - "noAssertion" . - . - _:Ne7755fef413944e6a5bd969d379e8410 . -_:N4a26fc9e687f4bfda660730718e55700 . - . - . - . - . - "The file represents a directory and all content stored in that directory."@en . - . -_:Nc642cb7cb5d441eaaa4a1fc86368d998 . - . -_:N5665c63b6756409c9cdaed2974ba4360 "1"^^ . - . - "securityPolicy" . -_:N9ee209fef169433cbe6e5201db0529b7 _:Nd4eff7d7430d4e6f98acd7f97e4910f1 . -_:N3051e5f9bfdf45b19c416045118502ef _:N6ca1589ab2b443ac91b26c54805eb352 . - "Provides information about the creation of the Element."@en . - "buildSystem" . -_:Nb040ef9136c54fc59750d17abc90a3ea . -_:Ncdb4a970c7f542688b373a1da217c447 "1"^^ . -_:N37712d80dea04088b1ab530db3aaa7fd . + . +_:N53970517ea09401691d51549f8e0fd90 . + "Specifies the type of an annotation."@en . +_:N9b79adf6684a4d328dc28ae0ee98d95d . + . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . +_:N45b62edbd5f3406dba20232288ec19fd . + . + . +_:Nf9bf03371d92462f91a54baa946fd625 . + "the element follows the SimpleLicensing profile specification"@en . + "releaseHistory" . + "none" . . -_:N950494b11f9e43fd9ce4b21264e6a0a8 . - "hasDataFile" . -_:N4dc5e2b6b5fa44d79acdc84229f675fe . - . - "Specifies the type of the content identifier."@en . -_:N784fd0e933c9417b9e11ea351159df76 . - "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . - "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . - . - _:Nb387237d7787460e8f7e72786252a39f . - . - "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . - . -_:N784fd0e933c9417b9e11ea351159df76 "1"^^ . - . - "A software agent."@en . - "A reference to a published list of releases for a package."@en . -_:N99c96394ef494f739f0ba15682e92ea3 . -_:Ndaea8b0d88324897b34af58f66f51f7c _:N9586947b2f2b402c815b61cb75a37942 . - "Specifies the algorithm used for calculating the hash value."@en . -_:N2e8a1060d29d437ba2a94908211b9554 _:N2751f527dac048b29b31dea36517c56a . -_:Ne0cb74aabc9c4794b4d9319b9a1fe42b "1"^^ . - . - . - . - "An individual human being."@en . - . -_:N0ac53be222cb49b7af09086cfaaed1db . - . -_:Nd5b3406d866f449096ede6b24376294b _:N7177e8b281d74917a500d212b7382b6b . - . -_:Nff63d22b8dc54a40a1754583641b37f3 . -_:N4fd4703e2c5d4687bed9b05563fc9cda _:Nbd9879e4dffa4f9bbdc67aa2782f06f5 . - "[Kyber](https://pq-crystals.org/kyber/)"@en . - "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . -_:Na2392fa55f5342ceaccb5f4312194416 _:N49d9ce37bbb44f77a01b48e5f2009c3f . - "A relationship has specific context implications during an element's testing phase, during development."@en . - . - . -_:Na2392fa55f5342ceaccb5f4312194416 . - . - _:Nfd60dc4acf8f405b86d3ebb119d8edeb . - "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . - "md2" . - . - . -_:Nc05797f950af44fbadd42eee2e56df6c . - "hasTest" . -_:N61bad2d32f474f829df8b09e757aec59 . -_:N2751c2ba1ffd40bda218899993caf814 . - "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . -_:Nfc8707d6d8b944508b09d8d3125e53f3 _:N3cb5c5f5df694e3aaf52da4c410b011e . -_:N9d46caf53cc94a77812c6af4cd5653dd . - "expandsTo" . - . - "hasDocumentation" . - "track" . -_:Na9d0fc4b8c454d308184549fca9959b6 "1"^^ . - . - _:Nf2495df384ef4dfe9e42259508a5f433 . -_:Nc14cc862b5494776966375d4711f1f8d _:Nfafa3bfbbc7b4ea7bd042cec31c4660f . - . -_:N866122f61ea34bdca92b963b42f6fae2 . - . - "the element follows the Software profile specification"@en . - . +_:N10f5cc15b506459db381c02764d60e76 _:Ne41f054fce23460dba46863153e67567 . + . +_:Ndaeba75fb43b4db7b777e9b00ecd7064 . + . +_:N8bdb3da6da754d98843024e1dcbe3e43 _:Ndc659c8552d54ab684aadbdacdbd7a8d . +_:Nd05558aa816f416f8c26895bb8d1d9bb . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . + . + "requirement" . +_:N97120636b11b4b158892706019486fb5 _:N89d38dc48bd64f1d894f7f8c5494c264 . +_:N96c753d614db4e7b844bcb3b5f9ff291 _:N168bcfc831bd4f85b6a82742eb7ad4f5 . + . +_:Ndb31c53559be41e0b28e79b74da0b557 . +_:N425d570f86674f7facee623f8d84a311 . + . +_:N38e1279dca3f4e53be4eb3245a0e4ec2 . +_:N916e8c3c85774fcd96b700a20240ca75 _:Ne976bc717eb6446291a939038610ee2c . + . + _:Nbc1332652da345c49ad3c948238f404b . + . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . + . + . +_:N894cee407d8747ec8adc2f05ce722a86 . + . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . +_:Ne7cb91f8739a4acdb1e220785f261efb . +_:N77f1a43a35e5447c83116261ae574acc _:N81c1c3e2bbc4470ab2eaf9e5c6c4d1f0 . +_:N94e6bbd4fb004035a4cbdb3e969a1fbb . + . + . + . + "Capture the scope of information about a specific relationship between elements."@en . . - . - . - . - _:N7e6385c5f3414e35862d986501bfff61 . - _:N320baf3ea5274f3393919c1999ded96d . - . -_:N7d98dd34e2e442ec8f9dd87a82897c1a "1"^^ . -_:N065968ff4b1d468f80d208a94f728820 . - "A probability score between 0 and 1 of a vulnerability being exploited."@en . - "email" . -_:Na168e6a25ca4415aa927f2d16152226c . -_:Nb7591bd67efe44909d92824106c3b13d "1"^^ . - . - "packagedBy" . - _:N1cfe20f0d2a049b7b751bd3aa0b4a09d . -_:N5c42defa8afb4ab59df899067c1e54af _:Ne616eaa63e1944649dd12a3061e5726a . - . - "hasPrerequisite" . - . -_:Nd698c35793ab47df8eaa1d9f6fe9f131 . - . - . -_:N13b921afee3a413e9a3b06c638bf7824 _:N35bab262301147c0b1b11e0643a659c6 . -_:N77693c7bc7954401a66962a8958fac0c . -_:N9fc754cd17fe403b9e6567ff39e96ef5 "1"^^ . - "diskImage" . -_:N107aa4617cfc41499f0678d83f303c24 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Nf0d9d94b4d9a4523a1d863217249938a . -_:N0eeb34b48dec4bf48dbba6ee4c6f829f . -_:Ne7755fef413944e6a5bd969d379e8410 . - . - . -_:N8e8fa340313748a7b459ba889204f2c1 . -_:Nc7468096abf8437e9360a8148a93acdf _:Ndee65321b0f14da3a2a5675702243602 . -_:Naee034377c334f78a3af1a4d25c3d468 . - . -_:N6dd024b62af74fb5a94391f7343f1c79 . - . -_:N6b8369d5442f4e3c902c0fd4c6ad7f11 . - . - . -_:N4379f82c1b44400197a0281504402fc5 . -_:N69fe400001ad47cbb9e616ed9d727696 "1"^^ . - "A collection of SPDX Elements that could potentially be serialized."@en . - "Specifies an AI package and its associated information."@en . - "Specified the time and date when a vulnerability was withdrawn."@en . - "Enumeration of the valid profiles."@en . - . -_:N40b61fa0587f469bb27b3e4ece9283bf _:N81774ccb63bb44f59726b12497ed50c2 . - "Dataset may be distributed freely, without restriction."@en . -_:N1288d377b72c44a58a576536a10d2030 "1"^^ . -_:N5e82508a25064d719d7bcac05ecaa033 . - "registration" . -_:Nd08114b692094bc788d0ff08c066c7fe . - _:N744e6bd4bf054480b6e284543bb79b87 . -_:Ne8efa463e51845deb9ed8d60461313c3 _:N1f248bb10ce740cc9124e394b35259ba . -_:N5ba1e97374714be89c6ce6144cda737a . -_:N1cfe20f0d2a049b7b751bd3aa0b4a09d . -_:Nda26387d9677485d8554cf33b606d465 "1"^^ . - "executable" . -_:Nb1e48771e71b47e98ac6156affc3e067 . -_:N14c84f27ec214a8aa7744493af4f1b05 . - "crystalsKyber" . -_:Nb09770ecd1d644e4aa2b0faf704a96de _:Neca5f29d67c84d0ba9ac05e9216798e8 . - . - "runtime" . - _:N0ac53be222cb49b7af09086cfaaed1db . - . - . - . -_:N29943647d0a54ed3bbf4236b7f26fed8 "1"^^ . - "hasExample" . -_:N75a4a8a0dcc14090818fdc6eade781c2 . -_:N67b0d956754a43a5b927ae155984d43e _:N597e9b8e9fea4a669873e005bac16fc5 . - "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . -_:N999ce6cccf4c43f493041f0c109b3166 "1"^^ . -_:N87f3315e965b43ebab1aa1b8deccf16f . - "Specifies the type of the external identifier."@en . - "scrapingScript" . -_:Nd3eb5f22c3be4e02942314bbb3d6fc3e . -_:N2305488d52f34ae3bd7f3de8a96329e4 . - . -_:N56d611894502410481612d5cb6016003 . - . -_:N8a37f4cffd6247e08ac9432f8447d89a . - . -_:N8373dd8071e2429e95b3b0897bdab7de "1"^^ . - "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . - "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . - . - . -_:Nbb925214ef4742999c6047ece09174ec . - "Element represents software that controls hardware devices"@en . - "The relationship is known to be exhaustive."@en . - "specification" . -_:N1af3b716f6264641976ddd0da85d3b1a . - "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . - "A reference to additional license information related to an artifact."@en . - "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . - "The version of the SPDX License List used in the license expression."@en . + . + "hasRequirement" . + "socialMedia" . +_:N328adb4bb1ec422084a2169890188a03 "1"^^ . +_:N8692a82c280845c3a6fa37c02ddae229 "1"^^ . + . +_:N825f749765e348a0abfef75f63c1588a . + . + . + . +_:Nc4156282a9c34b6190b0869cdc1793db . + . +_:N75f6c4472b7b45349200afcce0dbacef . + _:N58c62d134f5e41d78440946685ecf0cc . + . +_:N2b7fa052bf664f2a9e1923831d282602 . +_:N250a4372ab014e66ba3eec07accb85dc . + . +_:N74551d5c49b94ece99a5fdec0d58d233 . + . +_:N163fe4499b2a454a9641b23118bf53ae . +_:Ne976bc717eb6446291a939038610ee2c _:Nc5485992ed4e4cbea07fa6d87ee716ac . + "Captures a standard that is being complied with."@en . + . +_:N716ee87802fd4b6f98bfcff38ca5ff8a . + . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . +_:N4881d1614aa0403894d16c3ca276d790 "1"^^ . + . + "The software is not affected because the vulnerable component is not in the product."@en . + . +_:N53970517ea09401691d51549f8e0fd90 . +_:N461fe7f9c28b4d81a4fb17726fc9adf6 . +_:Nf5531d9c16ff4f589dff19f480634c29 . +_:N105628f6c8b040edb9db617f35f30bec "1"^^ . + "Megajoule."@en . + . +_:Nb850dda843534d3ab3ffbadf70766fef "1"^^ . + _:Ne820a8ec67114d53b03a71f5f7be31f5 . + . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . + _:Nbd47cac50394462f9015e00ec4b449a6 . + "numeric" . +_:N4d92ede494e34e51ba6eca91292dc0dc . +_:N91d11db27b28462b8545b78734a27503 _:N1a8882804ac24104946e7afa0b36905a . +_:Nf81435c80dee4c1db825f1917f62e947 _:N507c6135f8424e8db67fe59ae93eb464 . +_:Na3743aad0c334d06a729f81988609c9f _:N7f2c8d25f5df4c27b35c70d38090eab3 . +_:N82b5fa65536b400a809bd5f3104f6ec0 _:Ndfe4dc1d7d574b10a92ee8955837ad9d . + "usesTool" . + . + "A reference to an alternative download location."@en . + . + . +_:N0b353053b3cd41e89351acf39abb719c . + . + . +_:Na449b0b56e3540618b2a2698204edde9 . + "nuget" . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . +_:Nae8e63939c7c4cf4aa4ba555362d775c . +_:Nfa72871f5924444491d18910ec431abb . + "A reference build system used to create or publish the package."@en . +_:Nd77657e0b19d459c931f64f48ed7e1a6 . +_:Nd90adf23ae66491daa68ac6dd4501bdf _:N243ef6907efb40d38e00f4430d63fc19 . +_:N93d2d1d1dc3e4b7ea516ee004f674bfb . + . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:N25b71b41baf8408a91b66336f376a5b6 . + . +_:N30d5cdb21c144005b1d74c81aa0e129e . + . + . +_:Nc37985fef6884679b49d387a2ef08d3f . + _:N105628f6c8b040edb9db617f35f30bec . +_:Nd11df36dd5014f759eab790e847b9857 . + "Identifies when the Element was originally created."@en . + . + . +_:N565a78360e28494ea80897aadf944c0c _:N3d9237b249544033acbf7d94cac2b424 . + . +_:Ncc35596b6f164968b0bd35143cbc52ea _:N0dc54ccc3f8d4afe897d7be97f9f6928 . +_:Nfc3f4dc279d7471b83aa1a9df09f8d3f . +_:N4881d1614aa0403894d16c3ca276d790 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . +_:N64ae0543871444f6b7d2a497fcf55186 _:Na0242fde5c314aa599a3a00cfb01634c . +_:Nd90adf23ae66491daa68ac6dd4501bdf . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5eab3a0a527f4705bdb2f04b7c39e36c _:Nb6e99584403541df96486fcac6d79017 . + . + . +_:Nb07efffce0ba43a2bcac0e3a90a48609 _:Nb245e59ae52342bea2f1feb05bb80e79 . + . +_:N34cf4751490f48f9852ff2fa143a6321 . +_:N377b547285074591a904911ef1fc1977 . + . + . + . + . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:Ne976bc717eb6446291a939038610ee2c . + "data consists only of numeric entries."@en . +_:Ncba4137ebcf84a728acd12bde91130e9 . + . +_:Nb916f2dfc1c640bd8e0dac9bb5956172 . + "The `from` Element has been copied to each `to` Element."@en . + "operatingSystem" . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "When a CVSS score is between 7.0 - 8.9"@en . + "swid" . +_:N91adaf3024344ddcbcbf3f943faaad6b . +_:Nf6a05248229d4fe292d04534a4c4573d . +_:N7a66c734ced842b4913ff95c5f5cf452 . + _:Nad909dcc4fad4339a9eb809fabd6a871 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityDisclosureReport" . +_:N33da303c78e142a2acc0db12f3ee6686 _:Nedaa28cbd856413e95e7805cf2d255dd . + . + . +_:N8bdb3da6da754d98843024e1dcbe3e43 . +_:N8ec4229c1a674693bde766506ca93e87 _:N5f694c64068844ca80652791ca7749d9 . + . + . "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . -_:N2d1a418cbe234eceb99e5900d573b9f0 . -_:Ndc5c3acba75e4205b113623c75621c6e . -_:N2279545cee4f47fb9986df1b11a68c0f . -_:N13b921afee3a413e9a3b06c638bf7824 "1"^^ . - . -_:Ne202363026264077a74d779bbd16e04c _:Nba91218e21de428abcc29e6f6dd70951 . - . -_:Ndaecf52053104527964b081f8f6d4dfe "1"^^ . - "Class that describes a build instance of software/artifacts."@en . - . - "[Dilithium](https://pq-crystals.org/dilithium/)"@en . -_:N75afbc0eb6e646f28396b52ee0131582 "1"^^ . - _:Na40768ed7c6a40fcb01c9e8f1793b8a7 . -_:N3df9880d78624ddba1dd8e35a428b9c9 . - . - "lite" . -_:N67fc6e9fc5d24eabb8543cdc669b1145 . -_:Neecbcd12ce83469c90d8e79c41ce15e2 . - . - "Refers to any object that stores content on a computer."@en . - . -_:N208b27c07ce6469e9114d5b80dfc4f8f . -_:Nd43d5a2d7d1648598329bd2d9c226af3 . -_:Nb1e48771e71b47e98ac6156affc3e067 . - . - . -_:N3be22ea4244a43d6af104de9fed1b4fb . - . - . - . - "Specifies the time from which an element is applicable / valid."@en . -_:Na9d0fc4b8c454d308184549fca9959b6 . - . - "Indicates presence of the field."@en . -_:Neecbcd12ce83469c90d8e79c41ce15e2 . - "The `from` Element has been trained on the `to` Element(s)."@en . -_:N4a26fc9e687f4bfda660730718e55700 _:N08242c50c463457c930eba2a9659cdf9 . -_:N069fdf6673d440b8ab54670ad7906662 . -_:Nb134dbc7f13f499887fd10287bcaba2e . -_:N2e8a1060d29d437ba2a94908211b9554 . - . + "data is audio based, such as a collection of music from the 80s."@en . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Nc8b9ea4213214eccb17ccccf3790161d . +_:N4f6d0abf94b14a189b945346f00ba9dc . + . +_:N2dbc8b0a30da433a94050a3ab1190bb8 . +_:Nb4381a5cee3143a482af28cf9a364f3c "1"^^ . +_:Nd33af007bad14a4594f7039df1c5df75 . +_:Na267e7b88a344e4fbd0c59a6dc760e65 . +_:N1a0a0b40de254f55a8372bba19b60496 . + "A reference to the release notes for a package."@en . + . +_:N694be39aecbe44d49f3850275de952ec _:N29cadfcf5dfa4e73b1b0f56fa6e4352f . +_:Nfbb5f5e996be44989d31d47d46540443 . + . +_:Nc7b49cc0a08745e08e5ba42ee492184f . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . +_:Nf4609fa7f53e4898a47341b507b5e03e . + _:N91adaf3024344ddcbcbf3f943faaad6b . +_:Nd2a11bb8a1a14a82994d02e9dd610275 . + _:N4382805b6a5947d38ffcfd8b182bddbf . +_:N79e0fdc8a753446e8e1931aab90b02ae "1"^^ . + . + "the element follows the ExpandedLicensing profile specification"@en . + . + . + "An SPDX version 2.X compatible verification method for software packages."@en . + "fixedBy" . +_:Ne778a773be4f408192f2ed37c6143a5d . + _:N2a72f2e0c3d44dd5ac4c0633f336d556 . +_:N5e678b3ba38745b58c0103b8e085d5c8 . +_:Ncb6c9deb0ba44382a0b957b7ea80228c . +_:N8ad3af20ea5248df91865def0b7a98de _:Nd0d48abef81b4c44a952c0925a6e30a9 . +_:N1dd7c94072d1478ca91bee2c7af967a8 . + . +_:Nda791debefe5491aa84d61433873c630 . + "md5" . +_:N8358def5fd2b4668b759d786315e799f . + "vulnerabilityExploitabilityAssessment" . +_:Nddcc9ac569c4442b894f208d7722b4f8 . + _:N65301d1be04341678842dfc049e2a33c . + . + . + . + . +_:Na00b6f47e860415881f7e8a524a04316 _:Nf6f1751e3ea84341bdeec66f7c44a8ce . + . + . +_:N694e3d4238ff4006b46b450b91f4179a . +_:Ndc4f18efad334d78a498ea9df84fbd02 . . - . -_:Nf1326177a8f54cd38fb0d7aae60d69bf . - . - . - "noAssertion" . - . - _:N5f799594600d45d0b83461261182f275 . - . + _:N329ecc1447f349cc968623ddffe6a2f7 . +_:N261545ecf40d4f65bf47dc050598e90f _:N451bba51c46a4c9d9a2343aef3356453 . +_:Nd1b797da281643468add752e036349fd . + "A license that is listed on the SPDX License List."@en . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . +_:Nddcc9ac569c4442b894f208d7722b4f8 . +_:Nbb0a3a63cdba4f078c6de6eef7ff6579 . + . +_:N5eab3a0a527f4705bdb2f04b7c39e36c . + . + . +_:N9bd771ac02cc41519919a01d4deca105 . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:Nc63741a7112e471ba97ce37e05f2dac1 . + . + . . - . -_:Nda9579bf8aeb475c986dfda97af9e414 . - "doesNotAffect" . - "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . - "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . - "Element contains a set of changes to update, fix, or improve another Element"@en . -_:N2fd6d6c96c7b46dabc958e2ddb32657c . - . - . -_:Nd3eb5f22c3be4e02942314bbb3d6fc3e . - . - . - . -_:N1288d377b72c44a58a576536a10d2030 . -_:N4477c4b31f20446998b8dff00cd309b3 . - . - . -_:N29943647d0a54ed3bbf4236b7f26fed8 . -_:N2bae390e06fc47d4916dcf58441c0065 _:N1e4dbab89bc942d6934c8d53674bbf1b . - _:Nc642cb7cb5d441eaaa4a1fc86368d998 . +_:N315dc3dd043c41a49ffaaba74d10eeb0 . + "securityPolicy" . +_:Nb916f2dfc1c640bd8e0dac9bb5956172 . + . + "amber" . + . +_:N40f9e58aac214052a173ad93b4ed57e9 . + . +_:N29cadfcf5dfa4e73b1b0f56fa6e4352f . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Na3d930b22d4f462cb8bcb86adb108e16 _:N236307149ca247fcad8df1b0dd41fcfc . +_:Nce9a69dc19af4e1394f03174c67c5857 . +_:N10f5cc15b506459db381c02764d60e76 "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . +_:N4c8c5257e6c144099de859c3f43b1961 . +_:N963f7603cd844b03bd4631e0713b1635 "2"^^ . . - "riskAssessment" . - . -_:N62c446ad08764db680206dcd96bc8476 . - . - "data consists only of numeric entries."@en . - . -_:N2bae390e06fc47d4916dcf58441c0065 . - "The `from` Element is available from the additional supplier described by each `to` Element."@en . - "text" . - . - . - "Property describing the session in which a build is invoked."@en . -_:Ne14b54567e794b13a34acf8718d2ccf6 "1"^^ . - . - . - . - "dependsOn" . - . - . +_:Ne20cfbefa1424ba79abfc89287f1eef3 . + . +_:N07cb32d0626a45cfbea37a7dd2a8b854 "1"^^ . + . +_:N3b50e4323e8b4d388d8d522e18a49070 . + . "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . - . -_:N275d7c15ea6640618cb7cde014c0aa3e . - . -_:Nd134630c82914216aaa76b9680232c0c . -_:Ncb7110c05f9f446f887398fa2d241dd1 . - . -_:Nfc1e6fef13174b9e90d4ca817a331079 _:Na1f3d174a6d64488a8ff34be710850c5 . - "Categories of confidentiality level."@en . - . -_:N1b970adab24f43699ff9033a7892334e _:Nbb554a0d397845a2a23c335ba508c87e . - . - "Describes the anonymization methods used."@en . -_:N80091d0c87724fbf9c10267c2549575d . -_:N4c5910b87a7e4fc69577e8ccd52c8ab3 _:Nd5b3406d866f449096ede6b24376294b . -_:N3b17c87267444ae5aae5e12fc54addb6 _:Nb6697d6a50a946d9a78f5c1d507fee30 . -_:N37e9effec5ca4011a388b871588a9bfc "1"^^ . - . -_:N1f599cc99ec04100bcd965c2ec4fdbfe . - "Describes if a given file is a directory or non-directory kind of file."@en . -_:Nc416283f46f74c5ca28e42eede357fc1 "1"^^ . - _:N35cc536a7b8e4401b4f4e6b8982306e1 . -_:N70201d67aa3f481b9abefcb469f48d98 . -_:N18a257cc80b34d42949a3f99d880f84c . - "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . -_:Nff58f069db3f4f099a21fd26a1b4e17e . -_:N4b5795c987f1446dbda919350438fd0a _:N30a7d396784a431ba0eb686ae5b7e645 . -_:Nad60293878ba46b5b12652a41f9e5b9e . - . - . -_:Naee034377c334f78a3af1a4d25c3d468 "1"^^ . - . - "MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186)."@en . - . -_:N7a477b2d627c40bfbee3b6eca010b404 . - . -_:Nbe19063f503a46969af5f11469f71a33 _:N998d2725c2574c8f8344620b839e2d6f . -_:Ne8efa463e51845deb9ed8d60461313c3 . - . - "the element follows the Lite profile specification"@en . -_:N9547de9ed84145228bed37ef2d51f84f . - . -_:N3cb5c5f5df694e3aaf52da4c410b011e _:N015d97ba72604b6fa2e5fa44fa994d9a . - . -_:Nebb958f1bf4c40b2abcb1472090d7504 . -_:N26117aef00804f4b9d67298a6fd9c1de "1"^^ . - . - . -_:Nf3860ad4cc5d4d87be1f408701c9f435 . - "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . -_:N3f1a11bf8f004d80a83fff483af24469 . -_:N8d911077b7fd4e4180299a09ca29ea53 "1"^^ . -_:Ne4d0e63a8226430099ec09bd81396164 "1"^^ . - . - . -_:N6cddf83b203740bbb3558b7474a07821 . -_:Nb3c96ed9edf047408c12db5df1daaf43 . -_:Nb040ef9136c54fc59750d17abc90a3ea _:Nebb958f1bf4c40b2abcb1472090d7504 . - "Specifies the time an artifact was released."@en . +_:Ne883dfda4a7445ceb1e70f39ddd03fea . +_:Na267e7b88a344e4fbd0c59a6dc760e65 _:N89d361d3f1d94de5b28ee82b1d3da3de . . -_:N3daf4b35020144689a44f0ff15ab9244 . -_:Nd78d72bd38c34a3c804f97f9e6b927a3 . -_:N2684328da52949f091f313d918153601 _:Nbb8a5798239c4e919f8766e4ec36f99c . - . -_:N70201d67aa3f481b9abefcb469f48d98 _:N1d5173c248f14304bd9adef81206e060 . - "A reference to binary artifacts related to a package."@en . - _:N71251064642941d5a8323c552deea710 . -_:Nd5b3406d866f449096ede6b24376294b . - . - . -_:N35cc536a7b8e4401b4f4e6b8982306e1 . - . - "hasDeletedFile" . -_:N4477c4b31f20446998b8dff00cd309b3 _:Nbf34bde0e54243da9c73928c648b8ad7 . -_:N9063493949754db985c6c4bb9effda34 . -_:Na108e2b1e33249d1a7c16ae86469a51b . - . - . - . - "Provides information about the primary purpose of the software artifact."@en . - "A license or addition that is not listed on the SPDX License List."@en . - . - . - . - . +_:N91adaf3024344ddcbcbf3f943faaad6b . + . +_:N904326509fc04cc4be66ea123ed9fdc4 . +_:Nca9532c3dd0b421e95d0800b68e3442a . +_:N79e0fdc8a753446e8e1931aab90b02ae . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + _:N3ba51db196c04386ae47cb64aab6c95c . + . + "Records the biases that the dataset is known to encompass."@en . + . +_:Nd8679c5e3311467ca097a4151ac8fa54 . + "timeseries" . +_:Nc7f12b88e8f5489dacbbfeb81192696a "1"^^ . + "Indicates the type of support that is associated with an artifact."@en . + . +_:Ned1f0afb78d3460c9478383abf3da36b . + . + "A relationship has specific context implications during development phase of an element."@en . + "hasDataFile" . + . + . +_:Nf284f365ba5c4e4da40d7d7900d82744 "1"^^ . +_:Na449b0b56e3540618b2a2698204edde9 _:Ndc4add4edebe43f4821fb10dd712e481 . +_:Ndc4add4edebe43f4821fb10dd712e481 . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . +_:N28c7097edd884a9b92697ec6b6729dc9 _:N02fadd3757064be6a0b797d8675b611e . +_:Ne81afbff18a74c75ac853da24ab327a0 . + . +_:Nc63741a7112e471ba97ce37e05f2dac1 . + . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N5d195bb929fc404584503e9c9b17a526 . + . +_:Naf01116eff7c4759be95f8f97c257d9c "1"^^ . + _:N626b5ad29167479dabae9a9177315404 . +_:N3c8c7c06f10e44fea576f974877ed15b _:N79b4dcdd054d4ca8a87fc86377c9366b . + _:N87131d5acc2b478ba16230f714aa0bb0 . +_:Nf3c62ca118b94d17a1ef6b04e407421c _:N186b972a57284ae1946b3f7d8e762830 . +_:N9ed65925a89e40e8b7faaa925d739c72 . + . + . +_:N722c45f262084ffa9b063b852952397b _:Nf4609fa7f53e4898a47341b507b5e03e . + "development" . +_:N63f963c2c8a4467bb803f9af7eaafd3d "1"^^ . + . +_:Nba03adbea09d477299a596cac9fd8319 . + "The Element is an operating system."@en . +_:N024478cff6eb4ef48dc45dabdb7b0a35 "1"^^ . + _:Nff33e8337dc8421d9e74b338e35a75d5 . + _:N7c9974a53d5443c5831f3e7dc56073d0 . +_:Nbd47cac50394462f9015e00ec4b449a6 "1"^^ . +_:N8adbab8e05cf4258a0b7e9eedbd03e5f _:N7eb015d497fc4c09bb8530f59c65624d . + . + . +_:N348ad67a2abe4f9d929b1e20acc594b5 . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + "Property describing the session in which a build is invoked."@en . +_:N82b5fa65536b400a809bd5f3104f6ec0 . +_:N3bf9008e5422473bb689602da04ccca1 "1"^^ . +_:Nad909dcc4fad4339a9eb809fabd6a871 . + . + . + "altDownloadLocation" . + . + . "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . -_:N14c84f27ec214a8aa7744493af4f1b05 . -_:Ne4619e36e32c4fdc886ba17b636520a3 . -_:N1cfe20f0d2a049b7b751bd3aa0b4a09d . - . -_:N00e5d1a9fc9f4e8ea643c5dec21372c9 . -_:Nc7ccb8d419ad49ab9f18f22daf82266f . - "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3."@en . -_:Nb55dc8c91e234dedbb3dbcc141a59bc9 . - "releaseHistory" . -_:Nf0d9d94b4d9a4523a1d863217249938a . -_:N22c1a3c4c4964b7f90a94e0af7e75d87 . - "Abstract ancestor class for all vulnerability assessments"@en . -_:N4cf191c2823c4f9ba2e3124c01643d11 . - . - "Dataset can be shared within a community of peers and partners."@en . -_:Ne4d0e63a8226430099ec09bd81396164 "1"^^ . - _:Ncdb4a970c7f542688b373a1da217c447 . -_:N99c96394ef494f739f0ba15682e92ea3 _:N0eeb34b48dec4bf48dbba6ee4c6f829f . -_:N6b8369d5442f4e3c902c0fd4c6ad7f11 "1"^^ . -_:N4545916c069c4e0ab8f2f3c3e582d429 . - . - _:Nf39729cdf1294ea88879ccd16e468339 . - . -_:Na168e6a25ca4415aa927f2d16152226c "1"^^ . -_:N81a9816f437e481bb798da6e731d8252 . -_:N2757a283e93b45ad88b85a593725d092 . -_:Ncd7fa1f2b5334cd680d0c04e40453667 . -_:Nc6df8997e25c4618ad64b329bea18fa4 . -_:Ne9376f7e610a4f378d34348bf09acb82 "1"^^ . -_:N5ca015566baa49e1be7bab3e5ca1b85a . -_:N6535885322084aa986c62f1ad80b3668 "1"^^ . -_:N9d46caf53cc94a77812c6af4cd5653dd "1"^^ . -_:Neecbcd12ce83469c90d8e79c41ce15e2 "1"^^ . -_:N28c8fedea4324ffa8c41338d5fae0fe5 "1"^^ . - . - . - . - "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . -_:Nf39729cdf1294ea88879ccd16e468339 "1"^^ . - . - . -_:N7a1979daf894407dabf96d89e984ff05 . -_:N870a0a4f2a794e2aae2a22975ec6fa49 . - "Information about the relationship between two Elements."@en . - . -_:N7476374ddf7c4c82a95e5a63b60e4e0e "1"^^ . - _:N14c84f27ec214a8aa7744493af4f1b05 . -_:Nc0df3f2041aa425183862b62f02dd829 . - "When a CVSS score is between 9.0 - 10.0"@en . -_:N9dce65a406e14831b9cc10cfd6e434a6 . -_:Nec3642cffbce44abbfb1f66ffa74d5c1 . - "amendedBy" . - _:N13b921afee3a413e9a3b06c638bf7824 . -_:N7bd6e74fed5e42d29e8234d5933efd98 _:Ncb9989fa0c964e6f8d1f94c2ac8e2674 . - . -_:N9c23cd2dcd4243b996ef8897bfa8759e _:N81c3ab3c353544c9b673be7535094681 . -_:N6ca1589ab2b443ac91b26c54805eb352 . - . -_:N870a0a4f2a794e2aae2a22975ec6fa49 _:N9b270772d72b4f059b6cf8c0703f1948 . -_:N55072cbd77a64b16b152c20236d786f7 . - . -_:N9b40da1378ab4d6e80898c98996790e2 . - . -_:N62c446ad08764db680206dcd96bc8476 . -_:N66b9ee3f008340d2b9dffa814afd424b _:N6761e7f2e133401fa1a4d1f8bed0202e . -_:N4477c4b31f20446998b8dff00cd309b3 . -_:N70a01ce1edb94124ac3d6a3b187db793 . - . - . -_:N456086b235914b4f9bd89adfd54de37c . -_:Nc7ccb8d419ad49ab9f18f22daf82266f . - . -_:N443dd85c241c4fe58205e0b7c7f18034 . - "componentNotPresent" . - . - "A reference to the patch or source code that fixes a vulnerability."@en . +_:N6eb9ec15081f404a99935ff4e2aaa14b . +_:N7676f1bbd99e47659502f87b9936453e . + "Enumeration of dataset types."@en . +_:N98018fef19484e2fae944af82b21920e . +_:Nc704d39d408f41caa9805e140ff0016a . +_:N328adb4bb1ec422084a2169890188a03 . +_:N1314ef461724483f9bd5c56d939b17c4 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N7676f1bbd99e47659502f87b9936453e _:N5b2278fb3a8e4e239193a033f8b4bf04 . +_:N9a582f09d0b7426d81ae74b09a5ed252 _:N7f095ac56c3e4bccbcd4348b29980439 . +_:Nb3e77cdb9a14442eafb0659c7081c110 . + _:Nf26016059c3e414da185e30155b543f5 . +_:Ndb31c53559be41e0b28e79b74da0b557 . + "install" . + . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . +_:N72dd028519c2443b94229cfc4a2639bc . +_:N5912892962274966938ef83f3f23c015 . +_:N6f8ca85700744b0e9f7a8672675d1dca . +_:N30d1dbbf97fb456eb18d38b76c8004d3 _:Nece0b4f721a847f98727202b50f4a753 . + . + . + "Availability of dataset."@en . +_:N894cee407d8747ec8adc2f05ce722a86 . +_:Nc9ccffdec66347509395f75c9845128f "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . + . +_:N576b7fbe3ba74572a6eb065c67761847 . + . + . + . + "fixedIn" . + . + "other" . +_:N4ad4011b5f8c44cbb3e76f5da0885cfd _:N9e3f2c4f96904bddb1aa46c01701b0f6 . +_:N38aeb59117654398b393a546eaaa5fd9 _:N17c879855daa4fd7b7d7ef9da34e7ea6 . + . +_:Nce436d556d4e4606ba37d9ad32d22967 . + . +_:Nfcc30e48020d4dd2b3493a0cd55ea457 . + . + "Uniquely identifies an external element."@en . +_:N024478cff6eb4ef48dc45dabdb7b0a35 . + . + . + . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . +_:Nd951591fca6c47c2985dd159db6ad52c . +_:Na96bc2776ef4488595f136d0fbac26a6 . +_:N61b9a25cae674e199ce6572456d8e72f . + . +_:N694be39aecbe44d49f3850275de952ec . +_:N7b50bf552c054e5baab961ecc882b722 . +_:Nbd013d07f45a42d99931fe619ee4ca95 _:N7583808b54c947658126a7846ad7cc76 . +_:Nbbbec88245754e9d9390b9a11f0b67c2 . + . + . + . +_:N54d1f829ecc441b9b7d9248324cbea6b . +_:N8b86dbc23a22407a9380fbd9376d3b83 _:N4f9424fdcb0643a6b8dbd2c83de164a1 . "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . - . - . - . - _:Ne880e2c5878f4becba59cd843618c77a . - _:N8a37f4cffd6247e08ac9432f8447d89a . -_:N62354c6ede0641c2a17958df1fce06bf . -_:N1b99de6ce73e49328dc792c34798532e . -_:N13b921afee3a413e9a3b06c638bf7824 . -_:N46c1d107f9c3474aac7ed47419f9465a _:N01e0073f9d2a49f49037b8e666018bbd . - . - "SPDX Project"@en . -_:N419137dca06848e2a161d5eaadc9992f . -_:Nd0d9b8cea40d40dc91877f32f673ef66 . -_:N3cf591f215db46d1b2957c0113ce16f8 . - . -_:N0c63fb970906431f8ed02f6980609420 . - "configuration" . - "high" . - _:N6b8369d5442f4e3c902c0fd4c6ad7f11 . - "the artifact is in active development and is not considered ready for formal support from the supplier."@en . - . -_:Nda9579bf8aeb475c986dfda97af9e414 . -_:Nfc1e6fef13174b9e90d4ca817a331079 . - . - . -_:Nf2495df384ef4dfe9e42259508a5f433 . - . -_:N81a9816f437e481bb798da6e731d8252 _:Nf56fec24d5a44761b7a239c789c51504 . -_:N26117aef00804f4b9d67298a6fd9c1de . - . - . - "data is of a type not included in this list."@en . - "The product is not affected because the code underlying the vulnerability is not present in the product."@en . - _:Neecbcd12ce83469c90d8e79c41ce15e2 . - "Describes relevant information about different steps of the training process."@en . - _:N7d98dd34e2e442ec8f9dd87a82897c1a . - . -_:N069fdf6673d440b8ab54670ad7906662 . - . -_:Nffd32d595d024069b6df3a1ef8da642a . -_:N8049abc6ee7f449ebf27e3e8357bdf75 "1"^^ . - _:Nf98babca843e446f8ddf5dee59296ef5 . -_:N62c446ad08764db680206dcd96bc8476 . -_:Nc0df3f2041aa425183862b62f02dd829 . -_:Nc6df8997e25c4618ad64b329bea18fa4 . - . -_:N6731fd512ee84a2781b8140677b0161e _:Nff83286adad842f19d79a36e90df97d2 . - _:N5ba1e97374714be89c6ce6144cda737a . -_:N2684328da52949f091f313d918153601 . -_:N866122f61ea34bdca92b963b42f6fae2 . -_:Nf32238231fca45f1ac5221bd1ecd220c "1"^^ . - . -_:Nb9bfca375550473584a9365efe4f29a3 _:N77693c7bc7954401a66962a8958fac0c . - . - _:N9832a681241a4a91bd95ecdfaa05670d . - . -_:N4a639a72aca4429f900632616a34bef4 . - "A license that is not listed on the SPDX License List."@en . -_:N6afb5f6c981f4dc0b9434c037cffebfb . -_:N87f3315e965b43ebab1aa1b8deccf16f _:N6b93f4527c92420f97b4d4d8c27840f3 . -_:N5c307bac3b90460f8b755b5d46827013 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - . - _:N069fdf6673d440b8ab54670ad7906662 . -_:Nb3642a2160e24cfd8d98230c09e472be . -_:N3851673c346e4c9cacc8cf50837d6cfb _:Nb9bfca375550473584a9365efe4f29a3 . - . - . - _:Nf9cc156a3e084f8ab0ce054200c8fca7 . - . -_:N5cc19e587a4f464a9572d61b4352c919 . - _:N9dfffc9a0d064fbbb99f222927600262 . - . - . - . -_:Nee384a627c3d4a89bbf6312a1aa64aba . -_:Nf0b9c1849e524f0e8b565e2bde495ce5 . - . - . - . -_:Nb9bfca375550473584a9365efe4f29a3 . -_:N3f6ce06e6ca2446781e41b064c3d1d58 . - . - . "securityPenTestReport" . -_:N2be1468f91bc454082c8d0af333d205f . - . - "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . -_:Ndb8f89749acf4352b1d62c554af7fde6 . -_:N7d3cea31b9db4418ad60cbbcd3f14b75 . - . -_:N097b38569ab54334ba50aa2055c21bf9 . -_:N2454277637b14ff0b3c86e707c803ebf _:Nf5e9739ded9643ef8a3fe72118c28135 . -_:N9586947b2f2b402c815b61cb75a37942 . - _:N761b1b05ac5746c3b86d599c46526598 . - . - "Used when someone reviews the Element."@en . - "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . - "Indicates absence of the field."@en . - . - . - . -_:N6535885322084aa986c62f1ad80b3668 . - . - . - . - "bower" . - . - "buildMeta" . -_:N70a01ce1edb94124ac3d6a3b187db793 . - . - . - "underInvestigationFor" . - . -_:N0ac53be222cb49b7af09086cfaaed1db . -_:N29943647d0a54ed3bbf4236b7f26fed8 . - "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . - _:N8049abc6ee7f449ebf27e3e8357bdf75 . - . -_:Nb387237d7787460e8f7e72786252a39f . -_:N2d8b30121bba468383f1a52208a233a0 . - "Specifies the time an artifact was built."@en . - "data" . - "expandedLicensing" . -_:Nf4064e5c7fb84a899bffb14df5844894 "1"^^ . - . -_:Nd73c665e4d964b40be2d12cdc7ab7fa2 . -_:N082cb9b35b7b4791aa1d9debf6080789 . +_:N951ec4cbce414b3bab847840bf18d59f . +_:Na82fb3a822a04f6180f1ca7808276d8f _:Nc6bdb22311b243119db2aee3b54fabe4 . + "Abstract ancestor class for all vulnerability assessments"@en . + . +_:Nfcc30e48020d4dd2b3493a0cd55ea457 "1"^^ . +_:Nadd6173eaf8b4550a3ec8c90524cc599 _:N4d86b5ad122d431bbf443326643a51df . +_:Nabd40767fbd84edea7e048b911a681e4 . + "Specifies the time from which an element is applicable / valid."@en . + . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:N58b8de667bb54771976a5e86a8a8139a . + . +_:Nd77e569c4d2d4d2c9bb29ea462bc94cc _:N39638ea4b52f4236b7a808cb979d2f4b . + . + . +_:N4d2df683a0ea4c39be288b78f9e61ca4 _:N184c02d9c66a4e9d988d681d20c5ddc6 . + . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . +_:N3de741ac343042e6ac53564501076e44 _:Ne0ff4ba19d0a41c18c6ccfc733f2193d . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + . +_:N4278c3d777ea4ebd81cd23af80459c2d . +_:N73833299f42a4f78b3a3379f9d2302d7 _:N38e1279dca3f4e53be4eb3245a0e4ec2 . +_:N30a10bdc909f4c4bb84f02821147b416 _:Nf6a05248229d4fe292d04534a4c4573d . + . +_:Nb2747510507b404f9243bfd7225f629d . + . +_:Nf81435c80dee4c1db825f1917f62e947 . +_:N61753ca6fa484199b143356d20b0476e . +_:N5a2b8b0073a54a3db4d6092f1c5043ed . + "manifest" . +_:N7b5b4ad7f9a54d91a292ac0738539050 . + . "metrics" . -_:Na34b98cc7abc4ac2bb5b1ba9777ec6a0 . - "deviceDriver" . - "Used to associate a `from` Artifact with each `to` Vulnerability."@en . - . + . + . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "noAssertion" . + . + "The `from` Element is documented by each `to` Element."@en . +_:Nc2ac7680f26b40408ebfc2b4bb40def7 . + . +_:Nc6bdb22311b243119db2aee3b54fabe4 . + . + "Low/no risk is posed by an AI system."@en . + . + "hasOptionalDependency" . +_:N963f7603cd844b03bd4631e0713b1635 . +_:N70cf024bfa9e40a08de101b510631f60 _:N4f925ef656b840928e22aa51252c2976 . +_:Na3b27046864941989a486e5a70e0edb4 "1"^^ . +_:Ndc659c8552d54ab684aadbdacdbd7a8d _:Nf142b126cd744b69be8d6c35ee1361e4 . + . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . +_:Ncff880d9e9c24887adcf512cbce2a444 . + . + _:Na1ce1658c3be4bc0b082944caae9ddea . +_:N74551d5c49b94ece99a5fdec0d58d233 . +_:N0e4d30a5dd60459dbbb5efc7333deb37 . +_:N73e74213eec84d8daaa36a51dab963d6 . +_:Nf3c62ca118b94d17a1ef6b04e407421c . +_:N8692a82c280845c3a6fa37c02ddae229 . +_:N7091d1b764924e4db3551e0b422e61ba "1"^^ . +_:N1d4668e7f12244a7a9407b898c9b0534 . + "A value used in a generic key-value pair."@en . + . +_:N28c7097edd884a9b92697ec6b6729dc9 . + "A relationship has specific context implications during an element's testing phase, during development."@en . + . + "hasDynamicLink" . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + "Identifies the tooling that was used during the creation of the Element."@en . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . +_:N453a2981f56c4d3a943752e7740f87fd "1"^^ . +_:N6e913b09266e498887238fae6898e289 _:N6bd3d2cfd9cd4f248e354deb40a851ff . + . +_:N072d6f5c7eee40859e3a93d05034536f _:N4a3178783c58491bb646a056a8dbb37a . "A reference to an alternative web page."@en . -_:N04f6ef255f0f45e0843face78e6af32f _:Nf854d2bed3524a08aa85d987a15ae3b4 . -_:N15fc27df69c64453aa991097a3de803a . +_:Nc71de92f1cc649fcab4d77d974dac329 _:Nfc3f4dc279d7471b83aa1a9df09f8d3f . +_:N4f7ca95fbfad4d20810e92ab09220394 . + "reportedBy" . +_:Ne883dfda4a7445ceb1e70f39ddd03fea . +_:Nbd0d551be201428eb241c70d0e315cfa . + . + . +_:N79b4dcdd054d4ca8a87fc86377c9366b . + . +_:N8115c0678af046f9bb8fe56f1541b92b . +_:N2456bf573caa4efeab27607dfed5a451 _:Nb40076de31ba4cc08826656559e10385 . +_:N5912892962274966938ef83f3f23c015 . + . + . +_:Nd3d538fe1cb544b5808c51dffd844c81 . +_:N269b628c85f04f5d8a10fa3c500745a4 . +_:N95c7a63c89e94f8d9ceb0dd0c34ac9e3 _:N348ad67a2abe4f9d929b1e20acc594b5 . + "noSupport" . +_:Nef3e82bf7eac41aa8dc101eabd0f1815 . +_:Nadd5d6fa295c47ee82d49e5fde059110 . + . +_:N0dc54ccc3f8d4afe897d7be97f9f6928 _:N6946aaeee89545da9d91b8527c54139a . + "hasTestCase" . +_:N8eab6125211e4549a03d744617823ad5 . + . + . + "hasDeletedFile" . + _:Na92e8ceda7e548bb9a144c2e9c857639 . + _:N74551d5c49b94ece99a5fdec0d58d233 . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . +_:Nd385c846dfa14371a0a3697f7168b4c1 . +_:N91adaf3024344ddcbcbf3f943faaad6b "1"^^ . +_:N8f24e4128c124ec08b9e80f45a43dd1e . + "A software agent."@en . +_:N951ec4cbce414b3bab847840bf18d59f . +_:N451bba51c46a4c9d9a2343aef3356453 . +_:N4e6142c3e2dd4f3f9e2aed1df9452bc7 _:N716ee87802fd4b6f98bfcff38ca5ff8a . +_:Nc37985fef6884679b49d387a2ef08d3f "1"^^ . +_:Na3b27046864941989a486e5a70e0edb4 . + . + . + "crystalsKyber" . + "hasOptionalComponent" . +_:Nc1bb7a1b7d034342906511e27e066abc _:Nf21725c3245f4286b67bd679d3351c59 . +_:Nd05558aa816f416f8c26895bb8d1d9bb . + "Specifies a vulnerability and its associated information."@en . + . +_:N4382805b6a5947d38ffcfd8b182bddbf . + . +_:Ne3b40c9739164b2eb0ae163374d9c4ac . + "Property describing the start time of a build."@en . + "medium" . +_:N7a66c734ced842b4913ff95c5f5cf452 "1"^^ . +_:Nf0752cee7bef48efaa39267516a6b21a . + . + "Describes the type of the given dataset."@en . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + . +_:N7091d1b764924e4db3551e0b422e61ba . +_:Nf41c7f62f52f4c10b14344ec13dfe1e5 . +_:Nb6e99584403541df96486fcac6d79017 _:N4538304380bf48b895869aa8dbea3275 . +_:Ne223bb746dc9463bbbe16ca844619e98 _:N45481eab750645b4929b7b63c8ca7916 . +_:N06465237afe4406eb4803558f7a57c08 . + "noAssertion" . + . +_:N024478cff6eb4ef48dc45dabdb7b0a35 . +_:Nce9a69dc19af4e1394f03174c67c5857 . + . + . +_:N9e3f2c4f96904bddb1aa46c01701b0f6 . + . + "low" . +_:N453a2981f56c4d3a943752e7740f87fd . + "support" . +_:Ne11c75cafdb0438299216847b06716cf . + . + . +_:N2c7697a923534e9988689746f1d03e41 . + "hasDistributionArtifact" . +_:Nb28702ad1ccc478ba7b8aa42bc12985d _:Na3d930b22d4f462cb8bcb86adb108e16 . +_:N4b7945a329d940d7a4167237a4e60e53 . + "high" . +_:N2056bd91659a4260a6eb99a0cbdd9f14 "1"^^ . +_:Nf94717c65e4f4b86b4df261ecf26650d . + _:N576b7fbe3ba74572a6eb065c67761847 . + . + "design" . + . +_:N6eb9ec15081f404a99935ff4e2aaa14b . + . + "Agent represents anything with the potential to act on a system."@en . +_:Na42e3794f624483e818646ed683c5ba2 . +_:N734a831b529349fb969fd328dc6dcb1c . + . +_:Ne03121e956234709bc0f8f288597ff50 . + . + _:N78c7513398064da1a55c5df1b3c96444 . +_:Nf44042158d4d4c85a5bd6a0fcb538498 "1"^^ . + . + "Refers to any object that stores content on a computer."@en . + . + _:N61753ca6fa484199b143356d20b0476e . + . +_:Nc22ee04d695b4582bd604f6206900620 . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "hasDeclaredLicense" . +_:N187a93895c7b43bea96131212a0ba3f5 . +_:Nce6e2333750a40619f2e93e40be35d7e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "Specified the time and date when a vulnerability was withdrawn."@en . + . + . +_:Nc37985fef6884679b49d387a2ef08d3f . + "hasEvidence" . +_:Nd6ca1bcbdc494e39a9c1a4da0c52a0b3 _:Nb81407b76fc94f228f1f5ad011d931a5 . +_:Nf0752cee7bef48efaa39267516a6b21a . + . +_:Na1ce1658c3be4bc0b082944caae9ddea . + "A relationship has specific context implications during an element's build phase, during development."@en . + . +_:N7a66c734ced842b4913ff95c5f5cf452 . +_:Nadc18a90b6ca4cc3af0fb2aa7418dda8 _:Nc2ac7680f26b40408ebfc2b4bb40def7 . +_:Nd8679c5e3311467ca097a4151ac8fa54 "1"^^ . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + . + . + . +_:N0e4d30a5dd60459dbbb5efc7333deb37 _:N10ab85203a394bd3ba6ef86074d64233 . +_:N95b6da49b56e4298924cd2f153f00905 . + "Describes what the given dataset should be used for."@en . + . +_:Nf507b9bee5ae4254bafe4ce3c72a9f18 . + . +_:N7c9974a53d5443c5831f3e7dc56073d0 . + . + "trackStar" . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:Ndc4f18efad334d78a498ea9df84fbd02 . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + "extension" . + "Information about the relationship between two Elements."@en . +_:N61753ca6fa484199b143356d20b0476e . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . +_:Nbd14f0a1267744e89f6930e710689414 . +_:Ndfe4dc1d7d574b10a92ee8955837ad9d . +_:Na96bc2776ef4488595f136d0fbac26a6 "1"^^ . + "hasHost" . + . +_:N4c8c5257e6c144099de859c3f43b1961 _:N97120636b11b4b158892706019486fb5 . +_:N45481eab750645b4929b7b63c8ca7916 . +_:N87131d5acc2b478ba16230f714aa0bb0 "1"^^ . + . + _:N2056bd91659a4260a6eb99a0cbdd9f14 . +_:N30d5cdb21c144005b1d74c81aa0e129e _:Nbffaba2351c747ef8e380b89888a5f14 . +_:N80dac4ea19f44488ae2dc09ba1429116 . +_:N2b94274553ab4bc2bbc78307f39b3327 . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . +_:Naa7e95f812804669b3e89daed8d27b21 "1"^^ . +_:N451bba51c46a4c9d9a2343aef3356453 _:N731241b6024d4e109893eb1354404ec5 . + . + . + . +_:Nbd14f0a1267744e89f6930e710689414 "1"^^ . +_:N25b71b41baf8408a91b66336f376a5b6 _:N29e8eb1e03be45ae92093e6937585f14 . + . +_:N954579de61d84bef909737ad4568a536 . + "2024-11-22T03:00:01Z"^^ . +_:N16cb468a2dcd423bb3654b71a6f00062 . +_:Ndb50eefe33ac4feda6cfb13073b5324e . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N94e6bbd4fb004035a4cbdb3e969a1fbb _:Ncf68ed04ac534a92808a38217fa55530 . + . +_:N453a2981f56c4d3a943752e7740f87fd . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + . +_:N072d6f5c7eee40859e3a93d05034536f . +_:N02fadd3757064be6a0b797d8675b611e . + . + . +_:Ne7cb91f8739a4acdb1e220785f261efb _:N38aeb59117654398b393a546eaaa5fd9 . + . + . + . + "file" . + _:Nc704d39d408f41caa9805e140ff0016a . + . +_:N47d32bc3b4e04c9ab083ec76d4f22585 . +_:N6f8ca85700744b0e9f7a8672675d1dca "1"^^ . + . +_:N30a10bdc909f4c4bb84f02821147b416 . + . + . + . +_:N03140b327b9d4620b37b847528c7140b _:N4d2df683a0ea4c39be288b78f9e61ca4 . +_:Nd1b797da281643468add752e036349fd _:N40bcef929ef64825a68929a36aefa27c . +_:Nb0ab9a298e9845b1b1b770398def929d _:Nabd40767fbd84edea7e048b911a681e4 . + . + . +_:Nc704d39d408f41caa9805e140ff0016a . + "The Element is configuration data."@en . +_:Nbd45f3e248c84b27b2e1a0da67d47a71 . + "A name used in a CdxPropertyEntry name-value pair."@en . + "amendedBy" . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . +_:N8adbab8e05cf4258a0b7e9eedbd03e5f "1"^^ . +_:Nc7f12b88e8f5489dacbbfeb81192696a . +_:N80dac4ea19f44488ae2dc09ba1429116 "1"^^ . + . + _:N2b94274553ab4bc2bbc78307f39b3327 . +_:N23a349d7f4a14351adf4c70293152926 _:N6e913b09266e498887238fae6898e289 . + . +_:N0b353053b3cd41e89351acf39abb719c . +_:Ndcdb30d7deca45a8bc3e563144933f0e _:N6be5db9035a14b779b13bfa0a5a51c3e . +_:Na96bc2776ef4488595f136d0fbac26a6 . + . + . + "Describes a mechanism to update the dataset."@en . +_:N8711a8ae5ca942d1bbd795a0144ca9a7 _:N13f4d81403034faaa93ea1abc3bd3d91 . +_:N32f50a51e84f4a2499a5d17f54bbed6b _:N694be39aecbe44d49f3850275de952ec . +_:Na5a538a0052340c0ba01747cca3d3da8 . + . + . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + "other" . + . +_:N8f24e4128c124ec08b9e80f45a43dd1e . + "productMetadata" . + . +_:N4466be96ec5a4942b916c3f1fad2d3ee . + . +_:N904326509fc04cc4be66ea123ed9fdc4 . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . +_:N48b3e9d109d34fdeaa6cbef58c05c171 _:N220b4463e39147e99e8eeeb9974c5370 . +_:N7d2dbee05b72455c995a675186de5fd1 "1"^^ . + . +_:Nf028d12b2d0f4f6cb20747b6b39a8b5b _:Ncb6c9deb0ba44382a0b957b7ea80228c . + . + . +_:Nd6f4245b3ebe44e6b100782b191deb97 . +_:N1358bfc70dc14db6aa3a799228bc2fdd _:N4091b2fb3d5c417fad7305927740d1d5 . +_:Nbd0d551be201428eb241c70d0e315cfa _:Nd0cfba2a98544626a8566f29105598e9 . +_:Nc9235a4485e64fff9b1298095061a58e _:N05edbc4959e844438800e546abaebaea . +_:N68e2aefd82ab40c59cc6c2bfeab0adc4 . + . + . + . +_:N0c49370c41124d50ac6081418cb2432d _:N511c01e1b6a146c3bf99fe3e88272f2e . + . +_:N00fcf1f501a749fc9cbbdbdf23a7aaa8 . + . +_:Nfbd5a9c0923c423a84d0bb8fef89f4a3 . + . . - . - . - . - . -_:Nff83286adad842f19d79a36e90df97d2 _:Ndaea8b0d88324897b34af58f66f51f7c . -_:N9dfffc9a0d064fbbb99f222927600262 . -_:Neb11974d792545bab359067d0609d8ef . - _:N4379f82c1b44400197a0281504402fc5 . - "MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/)."@en . -_:Ne4619e36e32c4fdc886ba17b636520a3 "1"^^ . -_:N9177e2ee3c054acba6cd2b8f4d78e4f3 . -_:N3f6ce06e6ca2446781e41b064c3d1d58 . -_:N4545916c069c4e0ab8f2f3c3e582d429 _:N2279545cee4f47fb9986df1b11a68c0f . - . -_:Nb7591bd67efe44909d92824106c3b13d . - "A collection of Elements that have a shared context."@en . - "Identifies the tooling that was used during the creation of the Element."@en . -_:N9f2f4966ca1442de8457e4f8329d0710 . -_:N2fa63ba2278342bb9c50f3eea6a8c45f . -_:N835bfbd04e26414fa4e0357251d9e6c7 . - "Specifies the type of an annotation."@en . - . -_:N97777d3f00c44071a9af1cf1e9b8d4bd . - . - . -_:N71c5c74023cf4a52a8b457b1547df6f4 . -_:Nc6df8997e25c4618ad64b329bea18fa4 "1"^^ . - . - "When a CVSS score is between 7.0 - 8.9"@en . -_:N7f27ce1812214cf08ea19bcb018764e2 . - "Used when there is a security related identifier of unspecified type."@en . -_:N75afbc0eb6e646f28396b52ee0131582 . -_:N7884508b0c584d0288f2250c1ee3bc89 . - "Provides additional purpose information of the software artifact."@en . -_:N00f0f016bff441178fb3b14b0f1ba310 . -_:Nb387237d7787460e8f7e72786252a39f . -_:Nf6a8366ab85b4074b187672b593f3e6e . - . - "Describes a relationship between one or more elements."@en . -_:Nff63d22b8dc54a40a1754583641b37f3 . -_:N40997879b8144df69163822d2df5baef _:Nc05797f950af44fbadd42eee2e56df6c . -_:N3f1a11bf8f004d80a83fff483af24469 _:N7884508b0c584d0288f2250c1ee3bc89 . -_:N094c19bcead34504bd0d0b85f8ba1078 . - "Describes the type of annotation."@en . - . + . + . + . + _:N58b8de667bb54771976a5e86a8a8139a . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:N6f8ca85700744b0e9f7a8672675d1dca . +_:N3d9237b249544033acbf7d94cac2b424 . +_:N64a80dfe5e954cf59753ab8a96e4eff3 . +_:Na1cdda0a73e94e598b769cac4a5a5cb8 "1"^^ . + "A license that is not listed on the SPDX License List."@en . + . + . +_:N9c1ccbc2b86f454395a450f736b67eec _:N0f4d0a9a8e7d46a0b9cf255274bcce6b . +_:Nbc8ae53aacf942ca88840a6c1d655d6c . + . + "Specifies the type of an external identifier."@en . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + . + . + . + . +_:N243ef6907efb40d38e00f4430d63fc19 . + . +_:N81c1c3e2bbc4470ab2eaf9e5c6c4d1f0 . + "Provides an exploit assessment of a vulnerability."@en . + . + "Provides an EPSS assessment for a vulnerability."@en . + . +_:Nfa72871f5924444491d18910ec431abb . +_:Nbdc672a90df4480da8648bd31507d48e . +_:Nf142b126cd744b69be8d6c35ee1361e4 _:N5b2e4dda703849e4933338ff0970e968 . + . +_:N2b94274553ab4bc2bbc78307f39b3327 . + . "A reference to related security information of unspecified type."@en . - . -_:N8b959a4ad4834d5a96d17ac52b3571cf _:N553eab502b9344dfa8c5091d3acb923d . -_:N124216cccbad47f486b33fd9dce70c06 . -_:N4707a6558f8643199e75a488fd156a09 _:N3ed90f3640954f3cb8ac8478cc923b35 . - . - . -_:Na62fed341d814dc8ac95b17410dd06e9 "1"^^ . - "Describes a mechanism to update the dataset."@en . -_:Ndecce5d991454f63835a411ad5c3d25f . -_:Na108e2b1e33249d1a7c16ae86469a51b "1"^^ . - "patch" . - "the Element is a plan, guideline or strategy how to create, perform or analyse an application"@en . -_:N393d2d53bef34fe0846e87c7df91588d _:Na1ab85fdd72146cfb0eb275a20aed6fb . -_:N61bad2d32f474f829df8b09e757aec59 "1"^^ . -_:Neecbcd12ce83469c90d8e79c41ce15e2 "1"^^ . - "license" . -_:N9832a681241a4a91bd95ecdfaa05670d . - _:N75afbc0eb6e646f28396b52ee0131582 . -_:N998d2725c2574c8f8344620b839e2d6f . - "sensor" . - . +_:N72dd028519c2443b94229cfc4a2639bc _:N0a961d271f304c8cbb2e0a1307a9d8ad . +_:N89d361d3f1d94de5b28ee82b1d3da3de . +_:Ndaeba75fb43b4db7b777e9b00ecd7064 "1"^^ . + . + . + "library" . +_:N4b7945a329d940d7a4167237a4e60e53 . + . + . +_:Nc6d18260ddfa478b84c2dc19c2059aa2 "1"^^ . +_:N3c163fcab8684aa09c61e78b4cbb9b38 . + . +_:Nb28702ad1ccc478ba7b8aa42bc12985d . + "availableFrom" . + . +_:N7d2dbee05b72455c995a675186de5fd1 . +_:Nccde3ac271484f91b83ed5fb2e1d70c9 _:N0f568f8825144082a14a0e000b8ff13f . +_:N619e2a32fb994ed69f916340e12ed7f3 _:N315dc3dd043c41a49ffaaba74d10eeb0 . + . +_:Nddcc9ac569c4442b894f208d7722b4f8 . + . +_:Ndaeba75fb43b4db7b777e9b00ecd7064 . + . + . +_:Nc22ee04d695b4582bd604f6206900620 . +_:N4a56b875349e44729e9aca40972c86cd . +_:N4538304380bf48b895869aa8dbea3275 . + "text" . + "sha384" . +_:Ne4baf3becb8740a79f8bceb49f40679f _:Nd91122440e7149a28656eb9394e082b2 . +_:N6bd3d2cfd9cd4f248e354deb40a851ff _:N618f8c59ed9345ca8692a68f777a0fb0 . +_:N6ac0694afb0c40c1bb0988b0569f0cb4 . +_:Na449b0b56e3540618b2a2698204edde9 "1"^^ . +_:Na1cdda0a73e94e598b769cac4a5a5cb8 . + . + . + "altWebPage" . "Used when the type does not match any of the other options."@en . - "Provides information about the completeness of relationships."@en . -_:Ndf7085005814495cbc9689c68bb9683d "1"^^ . - . - . - "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . - . - . - . -_:N896ec867378949ebbc26581fe9cf864c . -_:Ne0cb74aabc9c4794b4d9319b9a1fe42b "1"^^ . -_:N41aee74b0dbe4609888f3e3488e75e26 . - "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . - "A relationship has specific context implications during the execution phase of an element."@en . -_:N8d911077b7fd4e4180299a09ca29ea53 _:N443dd85c241c4fe58205e0b7c7f18034 . - . -_:N8e8fa340313748a7b459ba889204f2c1 "1"^^ . - . -_:N4707a6558f8643199e75a488fd156a09 . - "eolNotice" . - . - "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . -_:N2fa63ba2278342bb9c50f3eea6a8c45f . - . - _:Ne1476e00df5f4847a5f13d26ed774a56 . - . - . - "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . -_:Na341e2127b1c4da9b7a2c521b48ba61d . - . - "the Element is used to install software on disk"@en . -_:Nd217b5feb10442a4b50049ba66de62ed . -_:N8d911077b7fd4e4180299a09ca29ea53 . -_:N9a36e08577374de4a5b5818cbd4e6583 . -_:Nfdf2a70978294bcebad4f299b134dc99 "1"^^ . - "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . - _:Na168e6a25ca4415aa927f2d16152226c . -_:Nbe2a417f2d204fcb9bb60e5d58b0044f _:Nca5f3f2dadbd4839a75e31645149c809 . -_:Nb95a1dba72b847409cd9eab4ed5e0033 . -_:Ncd7fa1f2b5334cd680d0c04e40453667 . - "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . - _:Nd677bc1745684cf98fb92f17a75ebd52 . - . - "Describes what the given dataset should be used for."@en . -_:Nb95a1dba72b847409cd9eab4ed5e0033 . - "A value used in a CdxExtension name-value pair."@en . + . + . + . +_:Nc8b9ea4213214eccb17ccccf3790161d . +_:N132cde65c9b14a1694d400388aecf0cc . + "A license exception that is listed on the SPDX Exceptions list."@en . + "copiedTo" . +_:N9bd771ac02cc41519919a01d4deca105 _:N96c753d614db4e7b844bcb3b5f9ff291 . "runtime" . - . - . -_:N1dc8357fca8043ee86196ff6f1400d3f _:N8411f84580e2497da97dab50dc3b4df3 . - _:N97819d7a350747339be471fc904dd3e6 . -_:Nd677bc1745684cf98fb92f17a75ebd52 . - "image" . - "Specifies the safety risk level."@en . - "timeseries" . -_:N81774ccb63bb44f59726b12497ed50c2 . -_:N7d98dd34e2e442ec8f9dd87a82897c1a "1"^^ . - . - . -_:Nb7591bd67efe44909d92824106c3b13d "1"^^ . - "A reference to the documentation for a package."@en . -_:N3be22ea4244a43d6af104de9fed1b4fb . - . -_:Ndaea8b0d88324897b34af58f66f51f7c . -_:Nca5f3f2dadbd4839a75e31645149c809 . - "Defines the line range in the original host file that the snippet information\napplies to."@en . - . -_:Nf7e356ac5a1044be99fd42634fb81f7d . - . - "References an Element on the right-hand side of a relationship."@en . - "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . - _:Nc034445fd507418d8439a09bb2e562dc . -_:N6197d862963b45bb806101e5df0a51a7 . - "Defines the original host file that the snippet information applies to."@en . -_:N3df9880d78624ddba1dd8e35a428b9c9 . - "Abstract class representing a license combination consisting of one or more licenses."@en . -_:N28c8fedea4324ffa8c41338d5fae0fe5 _:N100bd4537cc64a3c9da777da1eb0ce8e . -_:Nf5e9739ded9643ef8a3fe72118c28135 . - . - . -_:Nf6aee0ab31d04453b5b92d210b1ad859 . - . - . -_:Ndee65321b0f14da3a2a5675702243602 _:N65e7526ffa224998af69bd3d4082b522 . -_:Nada0379a8e6840aeab21269255f5c588 . - . - . -_:Ne1476e00df5f4847a5f13d26ed774a56 "1"^^ . - _:N28c546d9833444d7b7370a64f4274b1b . - . - "A reference to the software support channel or other support information for a package."@en . - "clear" . -_:Nbb8a5798239c4e919f8766e4ec36f99c _:Ne84bb159066e48a1a884cceaa3854438 . -_:N744e6bd4bf054480b6e284543bb79b87 . -_:Ne2f51219aefd476d89347b0e1c485369 _:Nb6e9515340134630a513fd38825c064d . - . - . -_:N320baf3ea5274f3393919c1999ded96d . - . - "hasProvidedDependency" . - . -_:Nad1212fd5ed241c891f8afc9235f406c . -_:N87ef2338681b493982fdd6660c334933 . + "3.0.1" . +_:N763c69315ee040a88ca27b5205984626 "1"^^ . + "sha1" . + _:N2b7fa052bf664f2a9e1923831d282602 . + . +_:N236307149ca247fcad8df1b0dd41fcfc . +_:N269b628c85f04f5d8a10fa3c500745a4 . +_:N4538304380bf48b895869aa8dbea3275 _:Ne223bb746dc9463bbbe16ca844619e98 . +_:N163b018b3d984833a5523252ed920c58 . +_:N511c01e1b6a146c3bf99fe3e88272f2e _:Nd0ec388aab40469ab0a4297c30e0c906 . + . + "Specifies an AI package and its associated information."@en . +_:N1256cfafa26e453a9d5f8b08cc5920d7 _:N4182e8c878544ebb842682b1ece2bd3a . +_:N9b79adf6684a4d328dc28ae0ee98d95d _:N5eab3a0a527f4705bdb2f04b7c39e36c . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + "A concrete subclass of Element used by Individuals in the\nCore profile."@en . + _:N0b728d22a9674ecc87af12fde5aae61c . +_:N2f8145031850475ba01bc466221debed . +_:Nf9bf03371d92462f91a54baa946fd625 "1"^^ . + . +_:N7b50bf552c054e5baab961ecc882b722 _:Nf593d6da70614e2581430bd37d9cd4ef . +_:N4278c3d777ea4ebd81cd23af80459c2d _:N82b5fa65536b400a809bd5f3104f6ec0 . +_:N4e4b35788e1b4064b856bcd8d2cc6670 . + "kev" . + . + _:Nd2a11bb8a1a14a82994d02e9dd610275 . + . +_:N0753f471dae945e885cde15702c705bb _:N619e2a32fb994ed69f916340e12ed7f3 . +_:N2b7fa052bf664f2a9e1923831d282602 "1"^^ . + "The Element is a module of a piece of software."@en . + "cpe23" . +_:Na92e8ceda7e548bb9a144c2e9c857639 . + . +_:N9dbe04a2eaac4271aafe4a7650ec4e15 . + . . -_:N885913019f4b4fe7afcd38cc847f9ef6 . - . -_:N04c56aaa0702449d89c679a6ae2d509e _:Nfc1e6fef13174b9e90d4ca817a331079 . -_:Ne3895908b9eb4cf68888a0b70d8088ff . - . - . +_:Ncb6c9deb0ba44382a0b957b7ea80228c _:Ne7cb91f8739a4acdb1e220785f261efb . +_:N96c753d614db4e7b844bcb3b5f9ff291 . + "mavenCentral" . + "md6" . + "blake2b512" . +_:N8b5253826157456ba3297cf9f4f8db15 . +_:N516b1b46dbb04f1c953906f0388bf8b4 . + . + "critical" . . -_:N8049abc6ee7f449ebf27e3e8357bdf75 . -_:Nab408dbbfc0f4711b251486cdcbf2168 . - _:N62c446ad08764db680206dcd96bc8476 . -_:N4c5910b87a7e4fc69577e8ccd52c8ab3 . -_:Nfdf2a70978294bcebad4f299b134dc99 . - "no" . - . - . - . -_:Nb6e9515340134630a513fd38825c064d . - . -_:N89f5ced0d2b44da98e135f5754616ccc . -_:N727e38139bfa40d9b56e586cf9ac5bdb _:Nb040ef9136c54fc59750d17abc90a3ea . - . - "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . - "Identifies from where or whom the Element originally came."@en . -_:N3cfc6c76a3744d609a80a0095af2dcad _:Nbe19063f503a46969af5f11469f71a33 . - "invokedBy" . - "Agent represents anything with the potential to act on a system."@en . - . -_:N2d1a418cbe234eceb99e5900d573b9f0 _:N2454277637b14ff0b3c86e707c803ebf . -_:N8373dd8071e2429e95b3b0897bdab7de "1"^^ . - . - . - . -_:N7f66313069b94a1386353f07d06a8ce2 . -_:N596d74921771447c9b35785007e34f1c . - . -_:Nab408dbbfc0f4711b251486cdcbf2168 _:Nad0e6f0b63fa454384d0c495911f493e . - . -_:N31d0b150d561413c9ecc2d72bfc66683 _:N8b959a4ad4834d5a96d17ac52b3571cf . - . - "crystalsDilithium" . - . -_:Nf854d2bed3524a08aa85d987a15ae3b4 . - . - "componentAnalysisReport" . - _:N6e7150c4286149b7aa27ddf655625b5e . - . -_:N16549d2169e94a4d8d291368d2d9f71b _:N315a049473324a5d82678153bc504c4b . -_:N2c65a23cf781468598b84d1456d825fb . - . - _:Ne4619e36e32c4fdc886ba17b636520a3 . -_:N8c0c4aa1f1ae4f7485a88627cfbc1631 _:N3cf591f215db46d1b2957c0113ce16f8 . -_:N13b921afee3a413e9a3b06c638bf7824 "1"^^ . - "Enumeration of dataset types."@en . - . - . - . - . -_:N9d46caf53cc94a77812c6af4cd5653dd . - "Describes if any sensitive personal information is present in the dataset."@en . -_:N46c1d107f9c3474aac7ed47419f9465a . - "Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element)."@en . -_:N75afbc0eb6e646f28396b52ee0131582 "1"^^ . -_:Nefe7cf242fd84f90a4f3cc6062e671c8 _:Nd217b5feb10442a4b50049ba66de62ed . - . - . -_:N9063493949754db985c6c4bb9effda34 _:Nd08114b692094bc788d0ff08c066c7fe . -_:Ne8b93e1651f84d5f8ff94e4b82012f07 . -_:Nff58f069db3f4f099a21fd26a1b4e17e _:Ne202363026264077a74d779bbd16e04c . -_:N0da978c5d15a4e0ca2abb1d9a336eba1 "1"^^ . - . +_:N83935261300041758021c5a3fbdae6c0 . +_:Ne20cfbefa1424ba79abfc89287f1eef3 . + . + . +_:N3ba51db196c04386ae47cb64aab6c95c . +_:N1d4668e7f12244a7a9407b898c9b0534 . + _:Naa7e95f812804669b3e89daed8d27b21 . +_:Nc3c21678fc9a459784f054a6954a9aa8 "1"^^ . +_:N5011f0cdb4544a70b796520ecd436a25 "1"^^ . +_:N4f925ef656b840928e22aa51252c2976 . + _:Nce6e2333750a40619f2e93e40be35d7e . +_:N91d11db27b28462b8545b78734a27503 . +_:N626b5ad29167479dabae9a9177315404 . +_:N96120491adc84204822952240ddadf13 _:Nb0ab9a298e9845b1b1b770398def929d . +_:Nb3e77cdb9a14442eafb0659c7081c110 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "generates" . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "secureSoftwareAttestation" . + . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . +_:Nc5485992ed4e4cbea07fa6d87ee716ac _:Nc85a3a5deac54465a32d993ba5434b00 . +_:Nf6a05248229d4fe292d04534a4c4573d _:N83935261300041758021c5a3fbdae6c0 . +_:N737b3d5b3c8f4cb7b5fb665b52f1dd96 . +_:Ne820a8ec67114d53b03a71f5f7be31f5 "1"^^ . +_:N80dc66a1ccec469392596c5291fa2864 . + . +_:N81c1c3e2bbc4470ab2eaf9e5c6c4d1f0 _:N461fe7f9c28b4d81a4fb17726fc9adf6 . +_:N763c69315ee040a88ca27b5205984626 . + _:Nf7fd042770064703a84cd9039273e4f7 . +_:Ne03121e956234709bc0f8f288597ff50 . +_:N3b695bebf32746039b555b8460ffe552 . + "doesNotAffect" . +_:Nbffaba2351c747ef8e380b89888a5f14 _:N288949a61054447689377b531414e0b7 . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N2b94274553ab4bc2bbc78307f39b3327 . + "A key used in a generic key-value pair."@en . +_:Nad909dcc4fad4339a9eb809fabd6a871 . + . + . + . + . +_:Nccde3ac271484f91b83ed5fb2e1d70c9 . +_:N4e4b35788e1b4064b856bcd8d2cc6670 . + _:Ndb31c53559be41e0b28e79b74da0b557 . + _:N942417ca6d844df0914d75b099a457f8 . + "Specifies the level of support associated with an artifact."@en . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:Na42e3794f624483e818646ed683c5ba2 . + . +_:Nf9bf03371d92462f91a54baa946fd625 . +_:Nc6d18260ddfa478b84c2dc19c2059aa2 "1"^^ . + . + _:N377b547285074591a904911ef1fc1977 . +_:N78c7513398064da1a55c5df1b3c96444 . "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . -_:N6ca1589ab2b443ac91b26c54805eb352 _:Nfc8707d6d8b944508b09d8d3125e53f3 . - "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . - . -_:Ne0cb74aabc9c4794b4d9319b9a1fe42b . - . -_:N8049abc6ee7f449ebf27e3e8357bdf75 . -_:Nb3c96ed9edf047408c12db5df1daaf43 . - "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . - "No assertion can be made about the completeness of the relationship."@en . - "A property name with an associated value."@en . -_:N5e77c3af3932465a99431b715d09d12e . -_:Nc14cc862b5494776966375d4711f1f8d . - . - "Provides an indication of where to retrieve an external Element."@en . - . - "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . -_:N1fcc6df939fe4ff6b57639467f64eff7 . - . -_:N5a18c93b836b4c75887455a2be533616 "1"^^ . - _:N96ab198cab814dceb4dc205e80f644d6 . - . - "Identifies the full text of a License or Addition."@en . - "sha1" . -_:N092e19c1eb954e979b39018f62ba840a . - "Indicates the amount of energy consumption incurred by an AI model."@en . - "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . - "the Element is a module of a piece of software"@en . - "A distinct article or unit within the digital domain."@en . -_:N9c88962fdf0e47f99a0477fe51b4207d . -_:N9a4f2ea8112e48b18e9aaa109a1e02b3 . -_:N150b1880a8e64af2af56beec5b8f629e . - "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . -_:N2c65a23cf781468598b84d1456d825fb . -_:N999ce6cccf4c43f493041f0c109b3166 . -_:N659a17727ec34fe487d556cc5ed935fa . -_:N8746b43004e5422e8a87906a64680ef4 . -_:Ne8307a3d6a8a433fad20e9cf2bd69327 . -_:N5a9be7ba8fdb49af9acd6f2e114fd2b8 _:N0f7bf6e1b6a84c71b96db0ed65f445fd . - "the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . - . -_:N5e82508a25064d719d7bcac05ecaa033 _:N66b9ee3f008340d2b9dffa814afd424b . -_:N3cd13df3eb014a37bb535428e0c037e6 _:N275d7c15ea6640618cb7cde014c0aa3e . - _:N293889ce0f674698af83932fc5a7b302 . - "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . -_:Ne1476e00df5f4847a5f13d26ed774a56 . +_:N0b728d22a9674ecc87af12fde5aae61c . +_:N73e74213eec84d8daaa36a51dab963d6 . +_:N75f6c4472b7b45349200afcce0dbacef _:N91fee785616543dd9952683d70d387bf . + "Specifies the VEX justification type."@en . +_:N06465237afe4406eb4803558f7a57c08 . + . +_:N4ac93d52ef544d5cb73aeaeb279b7567 . +_:N00fcf1f501a749fc9cbbdbdf23a7aaa8 . +_:Ndbf7c5384f2242b98dd62b6a8d6a503f . +_:Nf71f6300b14a4726a20ffad899bed919 . +_:Nc9ddcdf86e874968aa8f5ba821975eb4 "1"^^ . +_:N105628f6c8b040edb9db617f35f30bec . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:Nfbb5f5e996be44989d31d47d46540443 "1"^^ . + "other" . + . +_:N163fe4499b2a454a9641b23118bf53ae "1"^^ . + . +_:N5011f0cdb4544a70b796520ecd436a25 . +_:N0bf807da343b4645904db560abf69583 . +_:Nadd5d6fa295c47ee82d49e5fde059110 . +_:Ne778a773be4f408192f2ed37c6143a5d "1"^^ . + _:Na1cdda0a73e94e598b769cac4a5a5cb8 . + . + . + "The Element is a single or a collection of source files."@en . + _:Nc63741a7112e471ba97ce37e05f2dac1 . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "source" . + . + "complete" . +_:Nf71f6300b14a4726a20ffad899bed919 . + . + . + "2024-11-22T03:00:01Z"^^ . +_:Nb916f2dfc1c640bd8e0dac9bb5956172 . +_:Nbc1332652da345c49ad3c948238f404b . + . +_:Nce9a69dc19af4e1394f03174c67c5857 . +_:N64a80dfe5e954cf59753ab8a96e4eff3 . + . +_:Nfe1814d375d7456e843deb8cde1cf341 . + . + . + "This individual element was defined by the spec."@en . +_:Nbbe9948554644fd8b49899d278739242 . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + _:N8adbab8e05cf4258a0b7e9eedbd03e5f . + . + "Describes a relationship between one or more elements."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:N73f9586a8a7d4b978afcb9cfe998050b "1"^^ . + . + . +_:N897df0f6e23b488988a2d2db8aad5bc4 _:Nfa72871f5924444491d18910ec431abb . +_:N7b5b4ad7f9a54d91a292ac0738539050 _:Nb28702ad1ccc478ba7b8aa42bc12985d . +_:N70cf024bfa9e40a08de101b510631f60 . + "md4" . +_:Nc9ddcdf86e874968aa8f5ba821975eb4 . +_:Na267e7b88a344e4fbd0c59a6dc760e65 . +_:N66b43817d95d4468bf805207af159230 . + "Records the type of the model used in the AI software."@en . + . +_:N90cb783276d74a2881e21a08abf01e2f "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . + "The name of a relevant standard that may apply to an artifact."@en . +_:Na92e8ceda7e548bb9a144c2e9c857639 "1"^^ . +_:N288949a61054447689377b531414e0b7 . + . +_:Nca9532c3dd0b421e95d0800b68e3442a "1"^^ . + . + "Other exploit catalogs"@en . +_:Nbd47cac50394462f9015e00ec4b449a6 . + . + . + "securityAdvisory" . +_:N675847984777421d9fb9b171cdf0bb53 . + . + "A reference to a purchase order for a package."@en . + "securityAdversaryModel" . + . + "Class that describes a build instance of software/artifacts."@en . +_:N261c61aa119e4f4e9ce3c9387fb29c9f _:Nb9165bd1d4e8406eb56e237a892cfba4 . + . +_:N80dc66a1ccec469392596c5291fa2864 . +_:Nc6d18260ddfa478b84c2dc19c2059aa2 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:N5d195bb929fc404584503e9c9b17a526 . + "sha3_384" . + . +_:N5912892962274966938ef83f3f23c015 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:N5e678b3ba38745b58c0103b8e085d5c8 "1"^^ . + . + . + . + . + . + _:Nc22ee04d695b4582bd604f6206900620 . + . + "Makes no assertion about the field."@en . +_:N59f692071bb64860ab9f02cfb4670088 _:N27a8c8f61e944083abcc670fe4586df8 . +_:N05edbc4959e844438800e546abaebaea . +_:Nff8e6ed55f604249b913b2bbc6d8411d . + . + . + "The field describes the availability of a dataset."@en . +_:Nfbb5f5e996be44989d31d47d46540443 . + . + . + "A key with an associated value."@en . + "The Element is used to install software on disk."@en . +_:N7c7a260c778e4d4491ba75a0fe083ebe . + . +_:N73f9586a8a7d4b978afcb9cfe998050b . + . + "Property that describes the time at which a build stops."@en . + . +_:N58c62d134f5e41d78440946685ecf0cc "1"^^ . + . + . + . + . +_:N88e97455b377466daa24bff58cde8f0d . + . + "attend" . + . +_:Nfc8b91023a9e4e08ae989e08b6c0b9ec _:Nf7e1508801cf4398b830fad84fe53388 . + . +_:Nae8e63939c7c4cf4aa4ba555362d775c "1"^^ . +_:Ndfe4dc1d7d574b10a92ee8955837ad9d _:N0e31c4b45c4b442e9f1d32ab917a76ae . + . +_:N168bcfc831bd4f85b6a82742eb7ad4f5 . +_:Nad909dcc4fad4339a9eb809fabd6a871 "1"^^ . + . +_:Na92e8ceda7e548bb9a144c2e9c857639 . +_:N45b62edbd5f3406dba20232288ec19fd . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + . +_:Nc9ddcdf86e874968aa8f5ba821975eb4 "1"^^ . + "directDownload" . + . +_:Nfe1814d375d7456e843deb8cde1cf341 . + _:N5e678b3ba38745b58c0103b8e085d5c8 . + "ai" . + . + . + . + "build" . + "A reference to a version control system related to a software artifact."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:N5b2278fb3a8e4e239193a033f8b4bf04 _:Nf3c62ca118b94d17a1ef6b04e407421c . + "A string in the license expression format."@en . +_:Naf01116eff7c4759be95f8f97c257d9c . +_:N2b94274553ab4bc2bbc78307f39b3327 _:Nadd6173eaf8b4550a3ec8c90524cc599 . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . +_:N79e0fdc8a753446e8e1931aab90b02ae . +_:N9e3f2c4f96904bddb1aa46c01701b0f6 _:N8ad3af20ea5248df91865def0b7a98de . + _:Na3925605d49b4db382603ae946c37f51 . +_:N7c9974a53d5443c5831f3e7dc56073d0 "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . +_:N0f4d0a9a8e7d46a0b9cf255274bcce6b _:N70cf024bfa9e40a08de101b510631f60 . +_:Nf10e65ca64f84003827c23ef339743e5 . + . +_:Nbbe9948554644fd8b49899d278739242 _:N7b50bf552c054e5baab961ecc882b722 . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + "Specifies the type of the content identifier."@en . + . +_:Ne81afbff18a74c75ac853da24ab327a0 . + . + "Timestamp of impact statement."@en . +_:N4dda90621fe746a2972ace6f1e26f9c9 _:Na00b6f47e860415881f7e8a524a04316 . +_:N91fee785616543dd9952683d70d387bf _:N94e6bbd4fb004035a4cbdb3e969a1fbb . + . + . +_:N47d32bc3b4e04c9ab083ec76d4f22585 . +_:N58c3f747313349d396ead702e2de2953 . +_:N0cac787ed3f3421fa6687df4da790a0c _:N44928392b4d8458f847c7fd69533d2ee . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:Ne68051bb209048da9a57bc5dbaf28bf0 . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . +_:Nbac401e4be1249dd86dd149952baf59b _:N5bda6a3731444310990a06326743f6aa . + "A group of people who work together in an organized way for a shared purpose."@en . +_:N0d2bee57931544d786ff3bc0afb223b0 _:N8f1dd8dbe42e46fb934adf94515048b1 . +_:Nc22ee04d695b4582bd604f6206900620 . +_:Nd385c846dfa14371a0a3697f7168b4c1 . +_:N8a37deb026864cdca312209746e2caaa _:Nf3dfbb7f98e84c61b58f5b17e3ae9f19 . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:Ne820a8ec67114d53b03a71f5f7be31f5 . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . +_:Na82fb3a822a04f6180f1ca7808276d8f . + . +_:N13acbf7806c648f19f147c9073a04385 . + "noAssertion" . +_:N0d09683a42354debacdd0b0625119609 . + . +_:N8f1dd8dbe42e46fb934adf94515048b1 . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . +_:N991d42b910e64656b45d7c4ce9e7f5e3 . +_:Nae8e63939c7c4cf4aa4ba555362d775c . + . + . +_:N0f4d0a9a8e7d46a0b9cf255274bcce6b . + . + . +_:N5ab248e680454bbcb3ed254de24ac49f . + _:Nbd14f0a1267744e89f6930e710689414 . +_:Na267e7b88a344e4fbd0c59a6dc760e65 . + . +_:Nbb0a3a63cdba4f078c6de6eef7ff6579 "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . + . + "file" . +_:Nb81407b76fc94f228f1f5ad011d931a5 _:Nc82d9b6d9a4a40d6b95e4cd04612ac98 . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + . +_:N1a0a0b40de254f55a8372bba19b60496 . + _:N61b9a25cae674e199ce6572456d8e72f . + _:N63f963c2c8a4467bb803f9af7eaafd3d . . - "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + . + _:Nddcc9ac569c4442b894f208d7722b4f8 . + "qualityAssessmentReport" . + . +_:N4382805b6a5947d38ffcfd8b182bddbf . +_:Nf7fd042770064703a84cd9039273e4f7 . +_:Nac0a6f045e7e4efd9dbaf01201286a14 _:N2c7697a923534e9988689746f1d03e41 . + "gitoid" . + _:Nf5531d9c16ff4f589dff19f480634c29 . + . + "other" . + . +_:N2b7fa052bf664f2a9e1923831d282602 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + _:N9bd771ac02cc41519919a01d4deca105 . +_:N4f6d0abf94b14a189b945346f00ba9dc "1"^^ . + . +_:N72a328f4b7e14cb194d99b35236c3430 "1"^^ . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + _:N3b695bebf32746039b555b8460ffe552 . +_:N6f8ca85700744b0e9f7a8672675d1dca . +_:N17c879855daa4fd7b7d7ef9da34e7ea6 . +_:Nd91122440e7149a28656eb9394e082b2 . + "development" . +_:N1647e706f6764e7d9ec4e0aa8979d0c6 . + . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:N53970517ea09401691d51549f8e0fd90 . +_:Nc15495aea74e4883afce40f042a057d5 . + . + "A license expression participating in a license set."@en . + . +_:N89d641eef49d4a5f9ef42bfe5c4221bd . + . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . + . + . + . + "A reference to additional license information related to an artifact."@en . +_:N8bdb3da6da754d98843024e1dcbe3e43 . +_:Nf6541e98d99947d9a7ccb49088b43ea0 . + . +_:N230a41f8c8d549b8844a37595ce56867 . "A reference to the mailing list used by the maintainer for a package."@en . - "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . - . - . -_:N349d882683524e14ae98f62402cadf06 . - _:Nad60293878ba46b5b12652a41f9e5b9e . - "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . - "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . -_:N6731fd512ee84a2781b8140677b0161e . + "Defines the beginning of a range."@en . +_:N618f8c59ed9345ca8692a68f777a0fb0 _:N36b7d391e5cf402199bf454d82f5735c . + "A reference build metadata related to a published package."@en . +_:N13acbf7806c648f19f147c9073a04385 . +_:N7a48123f699948b5867af1fec0d7b88e . +_:Ne11c75cafdb0438299216847b06716cf . +_:N4881d1614aa0403894d16c3ca276d790 "1"^^ . +_:N9bd771ac02cc41519919a01d4deca105 . +_:N65301d1be04341678842dfc049e2a33c . + . + . + . + . + "Specifies the time an artifact was built."@en . +_:N85ad449141be453592e9e80c2bc379f4 . +_:N7676f1bbd99e47659502f87b9936453e "1"^^ . + . + "A property name with an associated value."@en . +_:Ne4baf3becb8740a79f8bceb49f40679f . + _:Nb916f2dfc1c640bd8e0dac9bb5956172 . +_:N8ec4229c1a674693bde766506ca93e87 . + "An SPDX Element containing an SPDX license expression string."@en . +_:N88e97455b377466daa24bff58cde8f0d . "query" . - . - . - "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . - "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . -_:N6a4847abbdd84dbb8e43386c5d710563 _:Ndc5c3acba75e4205b113623c75621c6e . - . -_:N18ed9985cff84e34807e6aa0a780a707 . -_:Ncd7fa1f2b5334cd680d0c04e40453667 . - . - "the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc)"@en . - "A reference to a export control assessment for a package."@en . - . - "Captures the size of the dataset."@en . - . -_:N8373dd8071e2429e95b3b0897bdab7de . - . - . - . - "container" . -_:N69fe400001ad47cbb9e616ed9d727696 . -_:N96ab198cab814dceb4dc205e80f644d6 "1"^^ . -_:Nda26387d9677485d8554cf33b606d465 . - _:N2757a283e93b45ad88b85a593725d092 . - . + _:Nc38c872821b548ee8f430a027b2d711f . +_:N3ba51db196c04386ae47cb64aab6c95c . +_:N80dac4ea19f44488ae2dc09ba1429116 . + . + . +_:N64ae0543871444f6b7d2a497fcf55186 . . - _:N6cddf83b203740bbb3558b7474a07821 . -_:N058b8decd10442dc9da66c8ec337fe89 _:Nfd92f942c5e84eb79e459f1d3f1ac4a6 . - "Identifies the full text of a LicenseAddition."@en . - _:N5cc19e587a4f464a9572d61b4352c919 . - "Specifies an Extension characterization of some aspect of an Element."@en . -_:N9547de9ed84145228bed37ef2d51f84f . -_:Nc416283f46f74c5ca28e42eede357fc1 "1"^^ . - . -_:N5ba1e97374714be89c6ce6144cda737a . - "Defines the end of a range."@en . - . - . -_:N60e06f4852a44b05b3dfdbd769a39b3a _:Ne4c7d5c25b2f46f3b980935a3b7858e2 . -_:Na4175476fbca48768ff989c226c9a147 . - . -_:N5e376019b0684f24bf032cb891f1c491 . -_:N97777d3f00c44071a9af1cf1e9b8d4bd . -_:N700fb510f2d245d387b84b64f59e834a _:N489ddf1400ed455cbb0fe6a27f318011 . - . - "A reference to a Software Composition Analysis (SCA) report."@en . - . -_:N79f0bab894254f7aa8a118661d65f476 _:Ndb8f89749acf4352b1d62c554af7fde6 . - . -_:Nbd9879e4dffa4f9bbdc67aa2782f06f5 . - "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . - . - . -_:N8d911077b7fd4e4180299a09ca29ea53 . - . -_:N7f27ce1812214cf08ea19bcb018764e2 . - . - "review" . -_:N3e6f3584b185432c90902e8ec47e33fd . - . -_:N8d911077b7fd4e4180299a09ca29ea53 "1"^^ . - . -_:Ndfeaf41c217c4e0c8c442c54949d7e6a . - . - "staticAnalysisReport" . -_:N6a3cf2ffe9b9430390c5ce23bd48fce4 _:N2b4ba84d3c35422383f41faeffab544e . -_:Ncdb4a970c7f542688b373a1da217c447 . -_:Nbed681e4050a4ed381ead86181284b9d _:N87f3315e965b43ebab1aa1b8deccf16f . -_:Ne6082a08d51b4476b3a983aafaf1d69e _:N6d28e1bd9c9f4454b0cd19fce2d51a40 . - . -_:N3e048db4a4e747afb8dbf69ebcfef3c7 . - . -_:N4d420b10df2e48ec90b7a163f5e7774c . -_:Ne5992967c6784ac0a64f460548c9c73c . - . - _:N9d46caf53cc94a77812c6af4cd5653dd . - . -_:N301f290b72884ba28b9bf8cee6c7d12e . - . - "hasTestCase" . -_:N35bab262301147c0b1b11e0643a659c6 _:Nf1326177a8f54cd38fb0d7aae60d69bf . - "purchaseOrder" . - . - _:Nb95a1dba72b847409cd9eab4ed5e0033 . -_:N6a5bd79f035f4d7c9d036bc4a4d9990a . - . - "Provides information about the creation of the Element."@en . -_:Nb6697d6a50a946d9a78f5c1d507fee30 _:N3f1a11bf8f004d80a83fff483af24469 . - "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . -_:N4fd4703e2c5d4687bed9b05563fc9cda . - "other" . - "delegatedTo" . - "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . -_:Nc2c6dbe5330f4b17ae33727e45f3e9d4 _:N04f6ef255f0f45e0843face78e6af32f . - "mailingList" . - . - . - . -_:N5665c63b6756409c9cdaed2974ba4360 . - . -_:Nec3642cffbce44abbfb1f66ffa74d5c1 . - . -_:N04c144f227684ce48b50371ca423d8ee . -_:Na108e2b1e33249d1a7c16ae86469a51b . - _:N9fc754cd17fe403b9e6567ff39e96ef5 . - "the Element is a file system image that can be written to a disk (or virtual) partition"@en . -_:N353611490d3c430e8e861c3a903369fb . - "The Element is a test used to verify functionality on an software element"@en . - . -_:N67a7c2de8c574fb991ccc64346e1de56 "1"^^ . -_:N21d7410f6a994075adab308941db7bcd . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N763c69315ee040a88ca27b5205984626 . + . +_:N41fda4edc0294fce84cdb5688d8ef9ef . + . + . + _:N13396ee366a94de388e2aff47754e81f . + . +_:N06465237afe4406eb4803558f7a57c08 "1"^^ . +_:Nd3d538fe1cb544b5808c51dffd844c81 "1"^^ . +_:N4f6d0abf94b14a189b945346f00ba9dc . + . + . +_:N72a328f4b7e14cb194d99b35236c3430 . +_:Ncf68ed04ac534a92808a38217fa55530 . + _:N250a4372ab014e66ba3eec07accb85dc . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "firmware" . +_:N13f4d81403034faaa93ea1abc3bd3d91 _:Ncff880d9e9c24887adcf512cbce2a444 . + _:Na5a538a0052340c0ba01747cca3d3da8 . + . +_:N0cac787ed3f3421fa6687df4da790a0c . +_:N2456bf573caa4efeab27607dfed5a451 . +_:Nc8b9ea4213214eccb17ccccf3790161d . + . + _:N5912892962274966938ef83f3f23c015 . +_:Nc51fb19223644705a84f646344b7e9d3 "1"^^ . +_:N675847984777421d9fb9b171cdf0bb53 . + . + _:N68e2aefd82ab40c59cc6c2bfeab0adc4 . +_:Ne70b85feb564419597741ca637d61d03 . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . +_:N5d195bb929fc404584503e9c9b17a526 "1"^^ . + . +_:N5a2b8b0073a54a3db4d6092f1c5043ed "1"^^ . + "Enumeration of the valid profiles."@en . + _:N72a328f4b7e14cb194d99b35236c3430 . + . +_:Nc4286224070a4248ad8590c45a7c8bc6 . + "The Element provides a requirement needed as input for another Element."@en . + . + "An Organization representing the SPDX Project."@en . +_:N13396ee366a94de388e2aff47754e81f . +_:Nf7fd042770064703a84cd9039273e4f7 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + _:Ncae19f1586924a439b37e75eb5b57ed4 . + . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . + . +_:Nce9a69dc19af4e1394f03174c67c5857 "1"^^ . + "Provides information about the creation of the Element."@en . + _:N91d11db27b28462b8545b78734a27503 . + . + "green" . + "The Element is an Artifact that can be run on a computer."@en . +_:N4d86b5ad122d431bbf443326643a51df . + . +_:N88e97455b377466daa24bff58cde8f0d . +_:N4571ded3acc34f068931feecaa278a44 _:N1aac3c1c2ffb45d79910e133d9ec02f9 . + "evidence" . + _:N4e4b35788e1b4064b856bcd8d2cc6670 . + "urlScheme" . + . + "low" . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . +_:N7f095ac56c3e4bccbcd4348b29980439 _:Na461e12485ec495f9d16f08504499025 . +_:N61753ca6fa484199b143356d20b0476e . + _:N72dd028519c2443b94229cfc4a2639bc . + "limitedSupport" . + "descendantOf" . +_:Nd8679c5e3311467ca097a4151ac8fa54 . +_:N06465237afe4406eb4803558f7a57c08 . + "The Element is a container image which can be used by a container runtime application."@en . + . +_:N763c69315ee040a88ca27b5205984626 "1"^^ . + . + "The percentile of the current probability score."@en . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . +_:N5ab248e680454bbcb3ed254de24ac49f "^[^\\/]+\\/[^\\/]+$" . + . +_:N32f50a51e84f4a2499a5d17f54bbed6b . +_:N716ee87802fd4b6f98bfcff38ca5ff8a _:Nd951591fca6c47c2985dd159db6ad52c . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + . +_:N8ad3af20ea5248df91865def0b7a98de . + "The file represents a directory and all content stored in that directory."@en . +_:Na00b6f47e860415881f7e8a524a04316 . +_:N14d2ccc3ee7749088945c0ba96e7a88a _:N2dbc8b0a30da433a94050a3ab1190bb8 . + . +_:Na44640dae5c34e6ab6f3759a75426eb0 . + "2024-11-22T03:00:01Z"^^ . +_:Nbdc672a90df4480da8648bd31507d48e . +_:N963f7603cd844b03bd4631e0713b1635 . + . + . + . +_:N5ab248e680454bbcb3ed254de24ac49f . +_:N034bf868068348fb92f2f33976cad5ae "1"^^ . + _:N6eb9ec15081f404a99935ff4e2aaa14b . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . +_:Ne0ff4ba19d0a41c18c6ccfc733f2193d _:N4e1bd25f594a483ab492b4c24a5748eb . + "hasInput" . + . +_:Nd385c846dfa14371a0a3697f7168b4c1 "1"^^ . + . + "The Element is documentation."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . +_:Ne81afbff18a74c75ac853da24ab327a0 . + . + . + . + . + . + "dataset" . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . +_:N7d2dbee05b72455c995a675186de5fd1 . + "cpe22" . +_:Nf26016059c3e414da185e30155b543f5 . +_:Nfbd5a9c0923c423a84d0bb8fef89f4a3 _:Nadc18a90b6ca4cc3af0fb2aa7418dda8 . + _:Nc4156282a9c34b6190b0869cdc1793db . +_:N954579de61d84bef909737ad4568a536 . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . +_:Nd0d48abef81b4c44a952c0925a6e30a9 _:N9bb1cced9aa14e08b36ebf9f952b1d01 . + "privacyAssessment" . +_:N4881d1614aa0403894d16c3ca276d790 . + _:Nd05558aa816f416f8c26895bb8d1d9bb . +_:Nb07efffce0ba43a2bcac0e3a90a48609 . +_:Nc1bb7a1b7d034342906511e27e066abc . + "Describes potentially noisy elements of the dataset."@en . +_:Ne5e123ab8f7d4aa4b35a7442690fe19d _:N072d6f5c7eee40859e3a93d05034536f . +_:Nfbd3df443088485abe551fc6374a3c4c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + "The Element is a software application."@en . + . +_:Nb850dda843534d3ab3ffbadf70766fef . +_:N7eb015d497fc4c09bb8530f59c65624d . +_:N4091b2fb3d5c417fad7305927740d1d5 . +_:Ne1917fc7b2894ab7a09e78e8e8b21989 _:Nbc8ae53aacf942ca88840a6c1d655d6c . +_:Nc3c21678fc9a459784f054a6954a9aa8 "1"^^ . +_:Nb345ac20ec3244e480ec30eee26dc06e . + . + _:N187a93895c7b43bea96131212a0ba3f5 . + . +_:N904326509fc04cc4be66ea123ed9fdc4 . . - "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . -_:Ncdb4a970c7f542688b373a1da217c447 . - "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . - "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . -_:N990faf2e9bde43ab98201c748005987c _:Na2392fa55f5342ceaccb5f4312194416 . -_:N2fa63ba2278342bb9c50f3eea6a8c45f . - . - _:N4c5910b87a7e4fc69577e8ccd52c8ab3 . -_:N9dce65a406e14831b9cc10cfd6e434a6 _:N9c23cd2dcd4243b996ef8897bfa8759e . - "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . -_:N21d7410f6a994075adab308941db7bcd . -_:N784fd0e933c9417b9e11ea351159df76 . -_:Ne9376f7e610a4f378d34348bf09acb82 "1"^^ . - . -_:N9d46caf53cc94a77812c6af4cd5653dd "1"^^ . -_:N150b1880a8e64af2af56beec5b8f629e . -_:N045868218fe84846bfd5a8efe73f5f05 _:N3393c7f385f241039c50705b72f15549 . - . + . +_:Na3925605d49b4db382603ae946c37f51 . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + _:N024478cff6eb4ef48dc45dabdb7b0a35 . +_:Nf028d12b2d0f4f6cb20747b6b39a8b5b . + . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . +_:Nd77657e0b19d459c931f64f48ed7e1a6 . + _:Nd33af007bad14a4594f7039df1c5df75 . +_:N694e3d4238ff4006b46b450b91f4179a _:N9a582f09d0b7426d81ae74b09a5ed252 . + . + . + _:Ne11c75cafdb0438299216847b06716cf . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + "archive" . + "kilowattHour" . + "hasProvidedDependency" . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . +_:N0781395df11e44a6a3186f0fa8908958 "1"^^ . + . + . + . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + . + _:Nc37985fef6884679b49d387a2ef08d3f . + "A collection of SPDX Elements that could potentially be serialized."@en . + _:N0d09683a42354debacdd0b0625119609 . + . + . +_:Nb9165bd1d4e8406eb56e237a892cfba4 . + . + "expandsTo" . +_:Nf10e65ca64f84003827c23ef339743e5 _:Ne1917fc7b2894ab7a09e78e8e8b21989 . +_:N833dac5833c24d35a16d11f2e318aeef _:Nd90adf23ae66491daa68ac6dd4501bdf . +_:Nece0b4f721a847f98727202b50f4a753 . +_:Na5a538a0052340c0ba01747cca3d3da8 "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . + . + . + "componentAnalysisReport" . +_:Nd83655f2100e4025b2eefd465fc154ab _:N0c3b30ca2bdf4cb1839bdc608bc41186 . + . + . + "serializedInArtifact" . + "packageUrl" . +_:N168bcfc831bd4f85b6a82742eb7ad4f5 _:Ned1f0afb78d3460c9478383abf3da36b . +_:N2f8145031850475ba01bc466221debed _:Nfb655ff9dcc6442baa6046d411f0624c . + "Specifies the exploit catalog type."@en . + _:N8f24e4128c124ec08b9e80f45a43dd1e . +_:Nf4609fa7f53e4898a47341b507b5e03e . +_:N210fbcf85b384009a2cee68e4a7e6b78 _:N02daaf1ea3874989948c16e26274de9f . +_:Ne68051bb209048da9a57bc5dbaf28bf0 "1"^^ . +_:N97120636b11b4b158892706019486fb5 . +_:N8186b6d9dc534ac1b7a906d040a88d6a _:N9b79adf6684a4d328dc28ae0ee98d95d . + _:N73e74213eec84d8daaa36a51dab963d6 . + . + . +_:Ne94d7f462c66468a8c52086b6b54de89 . +_:N682abb8a6bbc40e9947aa2d9d66eec4d . +_:N10ab85203a394bd3ba6ef86074d64233 . +_:Ne778a773be4f408192f2ed37c6143a5d "1"^^ . + "An assertion made in relation to one or more elements."@en . + "A reference to an artifact containing the sources for a package."@en . +_:N7c9974a53d5443c5831f3e7dc56073d0 _:N8358def5fd2b4668b759d786315e799f . + . + "Specifies the type of the external identifier."@en . +_:N5e678b3ba38745b58c0103b8e085d5c8 . + _:Nebecc80c7e4045d1b3ad15ab0c1d04ec . + _:Na3b27046864941989a486e5a70e0edb4 . + "An Element an annotator has made an assertion about."@en . +_:N4e4b35788e1b4064b856bcd8d2cc6670 _:Nce436d556d4e4606ba37d9ad32d22967 . +_:Ne06f01bddfb24f69a9e1c0ba9694b11d . + "underInvestigationFor" . + "A reference to the software support channel or other support information for a package."@en . +_:Na3925605d49b4db382603ae946c37f51 "1"^^ . +_:N90cb783276d74a2881e21a08abf01e2f _:N986501d57648498ea8ed156092baf32c . +_:Nd73c69088f734dffb4cc9539c637aecf . + . +_:N58c3f747313349d396ead702e2de2953 _:N5ddf9ddcd2bc446f8729bd7a23566faf . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + . + "Specifies the safety risk level."@en . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . + "A reference to the documentation for a package."@en . + "Conveys information about how VEX status was determined."@en . +_:Nb9165bd1d4e8406eb56e237a892cfba4 _:N0753f471dae945e885cde15702c705bb . + . +_:N88ce0438020d4326924db53dec9bd6b5 . +_:Nb4381a5cee3143a482af28cf9a364f3c . +_:Nbbbec88245754e9d9390b9a11f0b67c2 . + . + "Specifies the time when a vulnerability was published."@en . + _:Nbbbec88245754e9d9390b9a11f0b67c2 . + "application" . + "documentation" . + . + "Specifies the type of the external reference."@en . + . +_:Nf7fd042770064703a84cd9039273e4f7 "1"^^ . + . +_:N98018fef19484e2fae944af82b21920e . + . + . + . +_:N7676f1bbd99e47659502f87b9936453e . + "deployed" . +_:Nccde3ac271484f91b83ed5fb2e1d70c9 "1"^^ . +_:N4e4b35788e1b4064b856bcd8d2cc6670 "1"^^ . + _:N00fcf1f501a749fc9cbbdbdf23a7aaa8 . +_:N79e0fdc8a753446e8e1931aab90b02ae . +_:Naa7e95f812804669b3e89daed8d27b21 . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + . +_:Ne68051bb209048da9a57bc5dbaf28bf0 . + "A collection of SPDX Elements describing a single package."@en . + "Information about the relationship between two Elements."@en . +_:Nf7e1508801cf4398b830fad84fe53388 . + . + _:Nccde3ac271484f91b83ed5fb2e1d70c9 . + . + . +_:N40bcef929ef64825a68929a36aefa27c _:N4d92ede494e34e51ba6eca91292dc0dc . +_:Na461e12485ec495f9d16f08504499025 _:N73833299f42a4f78b3a3379f9d2302d7 . + "The Element represents a runtime environment."@en . +_:N6aa0e623203745d7b1fb18b485918354 _:Nc4286224070a4248ad8590c45a7c8bc6 . . - . - "hasAddedFile" . - "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . -_:Nfd92f942c5e84eb79e459f1d3f1ac4a6 _:N094c19bcead34504bd0d0b85f8ba1078 . - _:N18ed9985cff84e34807e6aa0a780a707 . -_:N597e9b8e9fea4a669873e005bac16fc5 _:N5e82508a25064d719d7bcac05ecaa033 . - . -_:Nc5bf40e3b2584e2eaa4becc473bed079 "1"^^ . -_:N7f27ce1812214cf08ea19bcb018764e2 "^[^\\/]+\\/[^\\/]+$" . - _:Nc416283f46f74c5ca28e42eede357fc1 . -_:N1685d66aa43c40318d7f1a9af5281dbf _:N62048f401c7a408d8e6074d8172edd5b . -_:Nf9ea823dce8b4178968bb583746dda07 _:N7a477b2d627c40bfbee3b6eca010b404 . -_:N30c0e029fe894fb8809a14d4f50d81cb _:N1af3b716f6264641976ddd0da85d3b1a . -_:Ne4d0e63a8226430099ec09bd81396164 . - . - . - . - . - _:N4d420b10df2e48ec90b7a163f5e7774c . -_:N301f290b72884ba28b9bf8cee6c7d12e _:N79f0bab894254f7aa8a118661d65f476 . - . - "sourceArtifact" . -_:N1b790cf0ad524fad8d4f129ccda94fa6 . - "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . - . -_:N65e7526ffa224998af69bd3d4082b522 . -_:Nfdf2a70978294bcebad4f299b134dc99 . -_:Nbf51d2fce0c449ca8df0fa964ec48e89 "1"^^ . -_:Nb6e9515340134630a513fd38825c064d _:N88066f14b8624768ac4e2ef3ea08df92 . - "A reference to a version control system related to a software artifact."@en . - _:N4477c4b31f20446998b8dff00cd309b3 . -_:N26117aef00804f4b9d67298a6fd9c1de . - _:N6535885322084aa986c62f1ad80b3668 . - . -_:N9d46caf53cc94a77812c6af4cd5653dd . -_:Nf385f0cc22b44164be25837552539b1c _:N456086b235914b4f9bd89adfd54de37c . - _:N67fc6e9fc5d24eabb8543cdc669b1145 . -_:N5e77c3af3932465a99431b715d09d12e "1"^^ . -_:Nf56fec24d5a44761b7a239c789c51504 _:N393d2d53bef34fe0846e87c7df91588d . - "reportedBy" . - "Categories of presence or absence."@en . - . -_:N2e7af3d6eac3464eafe353090d745bf8 . -_:N7d98dd34e2e442ec8f9dd87a82897c1a . - . - _:N2c65a23cf781468598b84d1456d825fb . - . - "the element follows the Build profile specification"@en . +_:N7c7a260c778e4d4491ba75a0fe083ebe . +_:Ne1917fc7b2894ab7a09e78e8e8b21989 . +_:Nc51fb19223644705a84f646344b7e9d3 . +_:N576b7fbe3ba74572a6eb065c67761847 . + "Provides the location for more information regarding an external identifier."@en . +_:N1a8882804ac24104946e7afa0b36905a _:Nc7b49cc0a08745e08e5ba42ee492184f . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + . + . + "When a CVSS score is between 4.0 - 6.9"@en . +_:N619e2a32fb994ed69f916340e12ed7f3 . + _:N98018fef19484e2fae944af82b21920e . +_:N68767751c5f64fc1afe82f2dcbae6636 . +_:Nb2f2a5ddadbe4718954d50737f92e201 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . + "vulnerableCodeNotPresent" . +_:N5d195bb929fc404584503e9c9b17a526 . "Property that describes the URI of the build configuration source file."@en . -_:Nfa63aaf3414846a894fd74b0e16b27ef . -_:N596d74921771447c9b35785007e34f1c "1"^^ . - "operatingSystem" . - . -_:N3daabc6c6db94e5596afc49544cf4f73 _:Ne6082a08d51b4476b3a983aafaf1d69e . - "build" . - . - . -_:Ne9348ee72a18435bbcdf5bb338a3fcb6 _:N885913019f4b4fe7afcd38cc847f9ef6 . - . -_:N7476374ddf7c4c82a95e5a63b60e4e0e . - . - . -_:N489ddf1400ed455cbb0fe6a27f318011 . -_:N4b5795c987f1446dbda919350438fd0a . - . - . -_:Nbb14891b173645c4a19f0f952441b988 . - . - "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . - . - "falcon" . -_:Nbfec05fc44f6435dbdeeb9f608a28e4c _:N3ef3340b9a594445b7754965e6a0adaf . - . -_:Nad1212fd5ed241c891f8afc9235f406c "1"^^ . - . - "filesystemImage" . - . - "securityOther" . -_:Nda26387d9677485d8554cf33b606d465 . -_:N1cfe20f0d2a049b7b751bd3aa0b4a09d . -_:N42dac2d2cbe6407596e2fb585812097d _:N341003cfbb2341dc85b4e126aedddb6f . -_:N3393c7f385f241039c50705b72f15549 _:N52a5c2aa05cb4f3da33bc1a69bc054d3 . - . -_:N097b38569ab54334ba50aa2055c21bf9 . -_:N18ed9985cff84e34807e6aa0a780a707 "1"^^ . - "Specifies the time when a vulnerability was published."@en . - . -_:N8049abc6ee7f449ebf27e3e8357bdf75 "1"^^ . - . - "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . - . -_:Ne880e2c5878f4becba59cd843618c77a "1"^^ . -_:N6535885322084aa986c62f1ad80b3668 . -_:N61bad2d32f474f829df8b09e757aec59 . - . - "The name of a relevant standard that may apply to an artifact."@en . - _:N01b77c997a784a81856bfe55a59f0d26 . - . - "endOfSupport" . - _:N89f5ced0d2b44da98e135f5754616ccc . - "Any other units of energy measurement."@en . -_:N3be22ea4244a43d6af104de9fed1b4fb . - . -_:N9177e2ee3c054acba6cd2b8f4d78e4f3 _:N40b61fa0587f469bb27b3e4ece9283bf . -_:Nc5839c1a42cb4cbf8b8f389491a2b604 . - "fixedIn" . - "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . - . - . -_:N0ffbbdd15b364d55bc0212ba5c32739b . -_:Nc5839c1a42cb4cbf8b8f389491a2b604 "1"^^ . -_:N00e5d1a9fc9f4e8ea643c5dec21372c9 . -_:Nbb14891b173645c4a19f0f952441b988 . - . - . -_:N01b77c997a784a81856bfe55a59f0d26 . - . - "development" . -_:Nf7805d1c06ba43eaa22c6043949bd567 _:Nbc63e97d65ef4f38936c3be4f51c6827 . - . -_:N6a9c7fd96f82444aac9a3bae9894656b . -_:N60de5e93a2424ac08a6d0747c85f5699 _:N46b3ee96a83c4a44bb51112e0ca4621c . -_:N8373dd8071e2429e95b3b0897bdab7de . -_:Nca5f3f2dadbd4839a75e31645149c809 _:N18a257cc80b34d42949a3f99d880f84c . -_:N659a17727ec34fe487d556cc5ed935fa . - . -_:N3f6ce06e6ca2446781e41b064c3d1d58 . - _:N9a4f2ea8112e48b18e9aaa109a1e02b3 . -_:N97819d7a350747339be471fc904dd3e6 . -_:Nd0989d19000249b7b6abdfee096c9f41 . - "other" . - "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . - . -_:N4dc5e2b6b5fa44d79acdc84229f675fe _:N60de5e93a2424ac08a6d0747c85f5699 . - . -_:Na34b98cc7abc4ac2bb5b1ba9777ec6a0 . -_:N107aa4617cfc41499f0678d83f303c24 . - . -_:N89f5ced0d2b44da98e135f5754616ccc "1"^^ . - . - . -_:N1dc8357fca8043ee86196ff6f1400d3f . -_:Nc26fe6b1cfc54bc6811b7d4724089f96 _:Ncdcdce99937a4256a16f3f88605197d9 . -_:N3b17c87267444ae5aae5e12fc54addb6 . - "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . - "megajoule" . -_:N76180350f15e4fd0be60faa3412ed1fa . -_:N96ab198cab814dceb4dc205e80f644d6 . - . - "The software is not affected because the vulnerable component is not in the product."@en . - "Property describes the invocation entrypoint of a build."@en . -_:N1d5173c248f14304bd9adef81206e060 . - . - . - "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . -_:N419137dca06848e2a161d5eaadc9992f _:N3e048db4a4e747afb8dbf69ebcfef3c7 . - "blake2b256" . - . - . - . - . - "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . - "Asbtract ancestor class for all VEX relationships"@en . - "The field describes the availability of a dataset."@en . - "directory" . - _:Nea611e5c42f94004b40d78331b3f6977 . - "affects" . -_:N21edc1b1c7c94a53a14c23900721c4b8 _:N3e6f3584b185432c90902e8ec47e33fd . -_:Nf9cc156a3e084f8ab0ce054200c8fca7 . - . - _:Nd1e13d5c3983406c938eabee95860c0e . - . - "Specifies the exploit catalog type."@en . - . - "hasInput" . - "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . -_:N2fd6d6c96c7b46dabc958e2ddb32657c . - . - . -_:N74164e072d8147ca808c451ad6b5d980 _:N7cdb8eb1992246f785b58b577320b504 . - "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + "hasAddedFile" . +_:N5a2b8b0073a54a3db4d6092f1c5043ed . + . + . +_:N186b972a57284ae1946b3f7d8e762830 . +_:N45b62edbd5f3406dba20232288ec19fd . + . + "A reference to a static analysis report for a package."@en . +_:N66b43817d95d4468bf805207af159230 "1"^^ . + . +_:N4e4b35788e1b4064b856bcd8d2cc6670 . +_:Nc38c872821b548ee8f430a027b2d711f . + . + . +_:N516b1b46dbb04f1c953906f0388bf8b4 . +_:N58021835a49a4b959f9428f8df7f7198 . + "Indicates presence of the field."@en . + . +_:N1d4668e7f12244a7a9407b898c9b0534 "1"^^ . +_:Nff33e8337dc8421d9e74b338e35a75d5 "1"^^ . + "other" . +_:N07cb32d0626a45cfbea37a7dd2a8b854 . + . +_:N250a4372ab014e66ba3eec07accb85dc . + . + . "The relationship is known not to be exhaustive."@en . -_:N137d0a75fd374daeb077f228da53897d . - _:N8e8fa340313748a7b459ba889204f2c1 . -_:N7e6385c5f3414e35862d986501bfff61 . -_:N489ddf1400ed455cbb0fe6a27f318011 _:N32c6410af083493aa3238362e1cbd67e . - "amber" . - _:N3daf4b35020144689a44f0ff15ab9244 . -_:N835351dfbca44416893704268470fac2 _:N4a26fc9e687f4bfda660730718e55700 . - "video" . - _:N22c1a3c4c4964b7f90a94e0af7e75d87 . -_:Ncdeee899859040f3903c3212d22c1507 . - "Defines the byte range in the original host file that the snippet information\napplies to."@en . -_:N107aa4617cfc41499f0678d83f303c24 . - "A reference to a quality assessment for a package."@en . -_:N8373dd8071e2429e95b3b0897bdab7de . -_:N80a219d388944c2c9272a65ce39a65d4 . -_:N100bd4537cc64a3c9da777da1eb0ce8e . - "Property that describes the time at which a build stops."@en . - . - "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . -_:N3b3c65b750eb401889ee9800adc1da9c "1"^^ . - . - . - "A license addition that is not listed on the SPDX Exceptions List."@en . - _:N70a01ce1edb94124ac3d6a3b187db793 . - . - . -_:Nf4064e5c7fb84a899bffb14df5844894 . - _:N69674ef0cb504722bc20bd3195026b39 . - _:Na108e2b1e33249d1a7c16ae86469a51b . - . -_:Ne880e2c5878f4becba59cd843618c77a . -_:Ne14b54567e794b13a34acf8718d2ccf6 . - _:N2895a64ec18c48e68dbf01572a5d0cc8 . - . -_:N0eeb34b48dec4bf48dbba6ee4c6f829f _:Nd43d5a2d7d1648598329bd2d9c226af3 . - . - . -_:N8e8fa340313748a7b459ba889204f2c1 "1"^^ . -_:Ncf36f0c937574a40957458e67ccab9cc . - . -_:N57470b62e6a142f9928ab5bfe4606b0a . - "Provide context for a relationship that occurs in the lifecycle."@en . -_:N9b52daafec44429186724a6d9a846793 . - . -_:N52a5c2aa05cb4f3da33bc1a69bc054d3 . -_:Nf4064e5c7fb84a899bffb14df5844894 . -_:N315a049473324a5d82678153bc504c4b . -_:N293889ce0f674698af83932fc5a7b302 . -_:N6a9c7fd96f82444aac9a3bae9894656b . -_:Nc5839c1a42cb4cbf8b8f389491a2b604 . - "A canonical, unique, immutable identifier"@en . - . +_:N7091d1b764924e4db3551e0b422e61ba . + "the element follows the Software profile specification"@en . + _:N963f7603cd844b03bd4631e0713b1635 . + . + _:Nc8b9ea4213214eccb17ccccf3790161d . + . + . +_:Ne21f363965114243b81ce67f76575de3 _:Nf6541e98d99947d9a7ccb49088b43ea0 . +_:N3de741ac343042e6ac53564501076e44 . + . + "hasStaticLink" . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + _:Ne778a773be4f408192f2ed37c6143a5d . +_:N0dc54ccc3f8d4afe897d7be97f9f6928 . + "The `from` Element generates each `to` Element."@en . + . + . +_:Nc8b9ea4213214eccb17ccccf3790161d "1"^^ . + . +_:N8e672d95ff7d48e68c1ed7ecf019b269 "1"^^ . +_:N5bda6a3731444310990a06326743f6aa . +_:N942417ca6d844df0914d75b099a457f8 . + _:N4881d1614aa0403894d16c3ca276d790 . + . +_:N8b5253826157456ba3297cf9f4f8db15 _:Nff9c0c2a18f24f76bfa32806ec48ce59 . + . +_:Nadd5d6fa295c47ee82d49e5fde059110 "1"^^ . + . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . +_:Nbd45f3e248c84b27b2e1a0da67d47a71 _:N54d1f829ecc441b9b7d9248324cbea6b . +_:N7583808b54c947658126a7846ad7cc76 . + . +_:Nf71f6300b14a4726a20ffad899bed919 . + _:N50c6944cf3544d0ab17d40d70d7715c3 . + . + . +_:N00d83dee7aa44a7991821a46e83e5164 . +_:Ne20cfbefa1424ba79abfc89287f1eef3 . +_:Nc2ac7680f26b40408ebfc2b4bb40def7 _:Nfd592b5830bc43009e433a4172fb036b . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:Nff9c0c2a18f24f76bfa32806ec48ce59 _:N64ae0543871444f6b7d2a497fcf55186 . +_:N4e1bd25f594a483ab492b4c24a5748eb _:N1314ef461724483f9bd5c56d939b17c4 . +_:Ncedd59bf4f1a4436ac8325d34d020df5 . + "Categories of confidentiality level."@en . +_:N618f8c59ed9345ca8692a68f777a0fb0 . + "System Package Data Exchange (SPDX) Ontology"@en . + . +_:Neff5f08fa9fd4aaeb51026e2484443c7 . +_:N63f963c2c8a4467bb803f9af7eaafd3d . +_:N931294357284457f9a6f643757b29e72 _:N687efc23ea2c4c0b9a09c9ca45dc49b3 . + . +_:N66b43817d95d4468bf805207af159230 . + . + . + . + . + "categorical" . + . +_:N2061c93cd5774c61823bf76c952d5242 . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . +_:Nff33e8337dc8421d9e74b338e35a75d5 . +_:Ncae19f1586924a439b37e75eb5b57ed4 . + . +_:N453a2981f56c4d3a943752e7740f87fd "1"^^ . + . + . + "2024-11-22T03:00:01Z"^^ . "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . - . - _:N3be22ea4244a43d6af104de9fed1b4fb . -_:Nd7c9818a72e64d35a203d1b243e90dd6 _:Nf1c469cfa41644dd9f4cafc8ea99bad5 . -_:N2bdf11c1b85e405a835c07e19f150556 _:N1685d66aa43c40318d7f1a9af5281dbf . - "The `from` Element is an ancestor of each `to` Element."@en . - _:Ndf7085005814495cbc9689c68bb9683d . - _:Naee034377c334f78a3af1a4d25c3d468 . - "Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3."@en . - . - "MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321)."@en . - . -_:N04c144f227684ce48b50371ca423d8ee _:Nb134dbc7f13f499887fd10287bcaba2e . -_:Nf37cc853c16d47099115691bcb77f2e1 "1"^^ . - . - "low" . -_:N6b93f4527c92420f97b4d4d8c27840f3 _:N42775851ecec45ee90ee1fe5c1071993 . - . -_:Nad1212fd5ed241c891f8afc9235f406c . -_:Necfb795205bb49a69ffa1a569c48717a . -_:N8a37f4cffd6247e08ac9432f8447d89a . - . - . - "Provides an ExternalMap of Element identifiers."@en . - "The percentile of the current probability score."@en . - . - "file" . - . - . -_:N1af3b716f6264641976ddd0da85d3b1a _:Nbe2a417f2d204fcb9bb60e5d58b0044f . -_:Nbed681e4050a4ed381ead86181284b9d . -_:N71c5c74023cf4a52a8b457b1547df6f4 _:N0ffbbdd15b364d55bc0212ba5c32739b . - . - . - "clickthrough" . - . -_:Nf7e356ac5a1044be99fd42634fb81f7d _:N8c0c4aa1f1ae4f7485a88627cfbc1631 . -_:Nad1212fd5ed241c891f8afc9235f406c . -_:N9f5fcae561fb42dbaa23d4b2cbedef0a . - . -_:N1b970adab24f43699ff9033a7892334e . - "hasOptionalComponent" . - . - . - . - . -_:N41aee74b0dbe4609888f3e3488e75e26 . - "Specifies the VEX justification type."@en . -_:N9c88962fdf0e47f99a0477fe51b4207d _:N1dc8357fca8043ee86196ff6f1400d3f . -_:Nd78d72bd38c34a3c804f97f9e6b927a3 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - "other" . -_:N60e06f4852a44b05b3dfdbd769a39b3a . - . - "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . -_:Nea5cd277bd75414183676bf891a32527 . - . - "medium" . - _:N441c940eb087403188d7f17bd5a55a61 . - . -_:N28c8fedea4324ffa8c41338d5fae0fe5 . - "An entity that is authorized to issue identification credentials."@en . -_:N18ed9985cff84e34807e6aa0a780a707 . - . -_:Na4175476fbca48768ff989c226c9a147 . - . - _:N3b3c65b750eb401889ee9800adc1da9c . - . - . -_:Nf3860ad4cc5d4d87be1f408701c9f435 . - . - . -_:N01b77c997a784a81856bfe55a59f0d26 "1"^^ . - . -_:N124216cccbad47f486b33fd9dce70c06 . -_:Nf0d9d94b4d9a4523a1d863217249938a "1"^^ . - "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . - . -_:Ndf7085005814495cbc9689c68bb9683d . -_:N56d611894502410481612d5cb6016003 . - . - . - "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . - . - "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . - . - . -_:Nfc73e3099ed6465bb089df33bbf469ff _:N1b790cf0ad524fad8d4f129ccda94fa6 . -_:Ne2b61099faaa4dfeb2a1dbb6cb39c943 . -_:N9dfffc9a0d064fbbb99f222927600262 "1"^^ . -_:Ncb7110c05f9f446f887398fa2d241dd1 _:N9a2ece59dbaf463a9c858ceb00db829f . - . +_:Nedaa28cbd856413e95e7805cf2d255dd _:N2f8145031850475ba01bc466221debed . +_:Nf7fd042770064703a84cd9039273e4f7 . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . + . + "documentation" . + . + . + "video" . + . +_:N0e471571470240e5872be57bfd58fed9 _:Ndbf7c5384f2242b98dd62b6a8d6a503f . + . + "timestamp" . +_:N377b547285074591a904911ef1fc1977 . +_:Nd83655f2100e4025b2eefd465fc154ab . +_:N73f9586a8a7d4b978afcb9cfe998050b . + . +_:N904326509fc04cc4be66ea123ed9fdc4 _:N10002d3538094764a9c6d3893234cd04 . + . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:Nfb655ff9dcc6442baa6046d411f0624c _:N8711a8ae5ca942d1bbd795a0144ca9a7 . +_:N72a328f4b7e14cb194d99b35236c3430 . + _:Nf44042158d4d4c85a5bd6a0fcb538498 . +_:N461fe7f9c28b4d81a4fb17726fc9adf6 . +_:Ndb50eefe33ac4feda6cfb13073b5324e _:N8b86dbc23a22407a9380fbd9376d3b83 . + "Copyright (C) 2024 SPDX Project"@en . +_:Nb345ac20ec3244e480ec30eee26dc06e . +_:Nf9bf03371d92462f91a54baa946fd625 . + . + . + _:Nb4381a5cee3143a482af28cf9a364f3c . +_:N187a93895c7b43bea96131212a0ba3f5 "1"^^ . +_:N236307149ca247fcad8df1b0dd41fcfc _:N88ce0438020d4326924db53dec9bd6b5 . +_:N82be0a238ea44c658a60ca20e0c8c6fa . + _:N4b7945a329d940d7a4167237a4e60e53 . + _:Ne03121e956234709bc0f8f288597ff50 . +_:N50c6944cf3544d0ab17d40d70d7715c3 . + . +_:N1647e706f6764e7d9ec4e0aa8979d0c6 . +_:N73e74213eec84d8daaa36a51dab963d6 . + _:Nf0752cee7bef48efaa39267516a6b21a . + . + . + . + . + . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . +_:N8f1dd8dbe42e46fb934adf94515048b1 . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:Nadd6173eaf8b4550a3ec8c90524cc599 . +_:N4ac93d52ef544d5cb73aeaeb279b7567 _:N07868b0098174c478ac47f3fbc946ff0 . +_:Nd33af007bad14a4594f7039df1c5df75 . +_:N74551d5c49b94ece99a5fdec0d58d233 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Ne94d7f462c66468a8c52086b6b54de89 _:Nb07efffce0ba43a2bcac0e3a90a48609 . + . + . +_:N14d2ccc3ee7749088945c0ba96e7a88a . + "A reference to a quality assessment for a package."@en . + . + _:Nb850dda843534d3ab3ffbadf70766fef . + . + "3.0.1" . + . + . + . + . +_:Nf5531d9c16ff4f589dff19f480634c29 . + _:Ne3b40c9739164b2eb0ae163374d9c4ac . + . +_:N187a93895c7b43bea96131212a0ba3f5 . +_:N65301d1be04341678842dfc049e2a33c . +_:N825f749765e348a0abfef75f63c1588a . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "contains" . + . +_:N0d09683a42354debacdd0b0625119609 . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . +_:N0c49370c41124d50ac6081418cb2432d . + . +_:Nd0cfba2a98544626a8566f29105598e9 . + "2024-04-05"^^ . +_:N16cb468a2dcd423bb3654b71a6f00062 _:N7b5b4ad7f9a54d91a292ac0738539050 . +_:Nc9ccffdec66347509395f75c9845128f _:N8eab6125211e4549a03d744617823ad5 . +_:Nf71f6300b14a4726a20ffad899bed919 _:N2aa73eafba6f4d55938fb60c96ff2379 . + "exploitCreatedBy" . + . + _:Nfe1814d375d7456e843deb8cde1cf341 . + "A reference to additional product metadata such as reference within organization's product catalog."@en . + . +_:Nb345ac20ec3244e480ec30eee26dc06e . +_:N511c01e1b6a146c3bf99fe3e88272f2e . +_:Nbf6c9a626dad41fa8a0422cb3ddab7a3 . + . +_:Na1ce1658c3be4bc0b082944caae9ddea _:Nff8e6ed55f604249b913b2bbc6d8411d . +_:Nda791debefe5491aa84d61433873c630 _:N1a0279389d714631b1d12935e9f2b014 . +_:N07cb32d0626a45cfbea37a7dd2a8b854 "^[^\\/]+\\/[^\\/]+$" . + "container" . +_:Nd2a11bb8a1a14a82994d02e9dd610275 "1"^^ . +_:N0781395df11e44a6a3186f0fa8908958 . + "structured" . + . +_:Na267e7b88a344e4fbd0c59a6dc760e65 "1"^^ . +_:N184c02d9c66a4e9d988d681d20c5ddc6 . + "Provide context for a relationship that occurs in the lifecycle."@en . + . + . + . + . +_:Nb245e59ae52342bea2f1feb05bb80e79 _:N6aa0e623203745d7b1fb18b485918354 . +_:Na3b27046864941989a486e5a70e0edb4 . +_:N90cb783276d74a2881e21a08abf01e2f . + . + . + _:Na449b0b56e3540618b2a2698204edde9 . +_:Nd05558aa816f416f8c26895bb8d1d9bb . "Provides information about the content type of an Element or a Property."@en . -_:N835351dfbca44416893704268470fac2 . - "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . - "Specifies the CVSS vector string for a vulnerability."@en . - . - . - "graph" . - . - . - "incomplete" . - "npm" . - "library" . - . - . -_:N9a2ece59dbaf463a9c858ceb00db829f _:Nbb14891b173645c4a19f0f952441b988 . - . -_:N31d0b150d561413c9ecc2d72bfc66683 . -_:N4cf191c2823c4f9ba2e3124c01643d11 _:N419137dca06848e2a161d5eaadc9992f . - "yes" . -_:Ne4d0e63a8226430099ec09bd81396164 . - . - . - . +_:Ne81afbff18a74c75ac853da24ab327a0 "2"^^ . + . + . +_:Ne0ff4ba19d0a41c18c6ccfc733f2193d . +_:Nf0752cee7bef48efaa39267516a6b21a . + "Provides additional purpose information of the software artifact."@en . + . . - . - . - . -_:N6535885322084aa986c62f1ad80b3668 . -_:N20563c47790549c1a3121000a834c4cb . - . - . -_:Ne8b93e1651f84d5f8ff94e4b82012f07 "1"^^ . - . -_:N62048f401c7a408d8e6074d8172edd5b _:N21edc1b1c7c94a53a14c23900721c4b8 . - . - _:Ndfeaf41c217c4e0c8c442c54949d7e6a . -_:N5f35c1f648d4471ba9ad3e7fc90e56b7 . - . -_:Neecbcd12ce83469c90d8e79c41ce15e2 . - "describes" . -_:N52a5c2aa05cb4f3da33bc1a69bc054d3 _:N30c0e029fe894fb8809a14d4f50d81cb . - . -_:Nf5e9739ded9643ef8a3fe72118c28135 _:N866122f61ea34bdca92b963b42f6fae2 . - . - "Specifies a time when a vulnerability assessment was modified"@en . - "System Package Data Exchange (SPDX) Ontology"@en . -_:Nf98babca843e446f8ddf5dee59296ef5 "2"^^ . - _:N61bad2d32f474f829df8b09e757aec59 . -_:Nb37183f337474d0d8058f31577954cf8 _:N6197d862963b45bb806101e5df0a51a7 . -_:Nf6aee0ab31d04453b5b92d210b1ad859 _:N04c144f227684ce48b50371ca423d8ee . - . - . + _:N45b62edbd5f3406dba20232288ec19fd . +_:Nc51fb19223644705a84f646344b7e9d3 "1"^^ . +_:Nf284f365ba5c4e4da40d7d7900d82744 . +_:N7676f1bbd99e47659502f87b9936453e . +_:Nf26016059c3e414da185e30155b543f5 . + . +_:N105628f6c8b040edb9db617f35f30bec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Ncff880d9e9c24887adcf512cbce2a444 _:Ne3e1ac11e78640fab50085207414679f . +_:N4571ded3acc34f068931feecaa278a44 . + . . - "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . - "A reference to funding information related to a package."@en . -_:N931242be4ac14a95b8ef51122ba2cf40 . -_:N67a7c2de8c574fb991ccc64346e1de56 . - . - . - . -_:N0f509a18a72e4662a7e7fc2fe485c3ac "1"^^ . - . -_:Nda26387d9677485d8554cf33b606d465 . -_:N5c42defa8afb4ab59df899067c1e54af . - _:N75a4a8a0dcc14090818fdc6eade781c2 . -_:N556a43c641024cdb92f4ef30ad62ff89 _:Nd7c9818a72e64d35a203d1b243e90dd6 . -_:Na9d7622cd7e94569b9540b0dc94308f3 . -_:N6717b73c37f1437da67113b68f12bf12 . - _:N67a7c2de8c574fb991ccc64346e1de56 . - "manifest" . - . - . - . - . -_:N2305488d52f34ae3bd7f3de8a96329e4 . -_:N3b3c65b750eb401889ee9800adc1da9c . - _:Nada0379a8e6840aeab21269255f5c588 . - . -_:N801bb08e2f0f4a8b9b2e9e8d3a406ffd "1"^^ . - "Copyright (C) 2024 SPDX Project"@en . - . - . -_:Necfb795205bb49a69ffa1a569c48717a . - . - _:N3f6ce06e6ca2446781e41b064c3d1d58 . - . - _:Ne4d0e63a8226430099ec09bd81396164 . - . - "A reference to a purchase order for a package."@en . -_:N6197d862963b45bb806101e5df0a51a7 . -_:N7cdb8eb1992246f785b58b577320b504 . - _:Nd0d9b8cea40d40dc91877f32f673ef66 . - "numeric" . -_:N71251064642941d5a8323c552deea710 "1"^^ . -_:N6a5bd79f035f4d7c9d036bc4a4d9990a _:N3851673c346e4c9cacc8cf50837d6cfb . - . - . - . -_:Nf98babca843e446f8ddf5dee59296ef5 . -_:Nd1e13d5c3983406c938eabee95860c0e . - . - "A LicenseAddition participating in a 'with addition' model."@en . - "altDownloadLocation" . - _:Ne5992967c6784ac0a64f460548c9c73c . - "data type is not known."@en . -_:N69674ef0cb504722bc20bd3195026b39 . -_:N6349b0f36b7f449faa1d73050fbde88f _:Nf0b9c1849e524f0e8b565e2bde495ce5 . -_:Nbb925214ef4742999c6047ece09174ec _:Nb09770ecd1d644e4aa2b0faf704a96de . - . -_:N950494b11f9e43fd9ce4b21264e6a0a8 "1"^^ . -_:N0809050b78e64f1c8f5666cc9ffc92a6 . -_:Ndfeaf41c217c4e0c8c442c54949d7e6a . - . - _:Na34b98cc7abc4ac2bb5b1ba9777ec6a0 . -_:Nf9cc156a3e084f8ab0ce054200c8fca7 "1"^^ . - . - . - . - . - "A relationship has specific context implications during development phase of an element."@en . - . - "Defines the beginning of a range."@en . - _:Nad1212fd5ed241c891f8afc9235f406c . -_:N7a1979daf894407dabf96d89e984ff05 . - . -_:N596d74921771447c9b35785007e34f1c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - . + . + . +_:Nce436d556d4e4606ba37d9ad32d22967 _:Ne5e123ab8f7d4aa4b35a7442690fe19d . + "Indicates the amount of energy consumption incurred by an AI model."@en . + "bom" . + . + . + . +_:Na79e142094fb464da3de3ceb4108e4ff . +_:Nc71de92f1cc649fcab4d77d974dac329 . +_:N47d32bc3b4e04c9ab083ec76d4f22585 "1"^^ . + . +_:N30d1dbbf97fb456eb18d38b76c8004d3 . +_:N9bd771ac02cc41519919a01d4deca105 "1"^^ . + . +_:Nc51fb19223644705a84f646344b7e9d3 . +_:N0c3b30ca2bdf4cb1839bdc608bc41186 _:N0713bbcf2b1f4e23b912a81e12b5d270 . + "blake3" . +_:N3bf9008e5422473bb689602da04ccca1 . + . + "describes" . + . + . +_:Ne70b85feb564419597741ca637d61d03 . +_:N4a3178783c58491bb646a056a8dbb37a _:N615be2b8b7174608b24884d12a2039ad . + . +_:N58c62d134f5e41d78440946685ecf0cc . + . + "Describes the anonymization methods used."@en . + "hasSpecification" . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + _:N516b1b46dbb04f1c953906f0388bf8b4 . + "A reference to a privacy assessment for a package."@en . +_:Nc6d7eec7a63445c8a64113d0e59ce02c . +_:Nfd592b5830bc43009e433a4172fb036b . + . +_:Ne93ae5d0cb664d7ab2554eaa72a23f25 _:Ne94d7f462c66468a8c52086b6b54de89 . +_:N50c6944cf3544d0ab17d40d70d7715c3 . + . + . + _:N3bf9008e5422473bb689602da04ccca1 . + . +_:Na449b0b56e3540618b2a2698204edde9 . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . + . + . +_:N45b62edbd5f3406dba20232288ec19fd _:N0eb0fa7732fb4a2db7455731d6a1ce53 . + . +_:N7a66c734ced842b4913ff95c5f5cf452 . +_:N3c163fcab8684aa09c61e78b4cbb9b38 . +_:N4a56b875349e44729e9aca40972c86cd _:N3de741ac343042e6ac53564501076e44 . +_:Nc6bdb22311b243119db2aee3b54fabe4 . + . +_:Na3b27046864941989a486e5a70e0edb4 . + . + . +_:N91adaf3024344ddcbcbf3f943faaad6b "1"^^ . +_:Ne883dfda4a7445ceb1e70f39ddd03fea . +_:N4d92ede494e34e51ba6eca91292dc0dc _:Nfc8b91023a9e4e08ae989e08b6c0b9ec . + . +_:N931294357284457f9a6f643757b29e72 . + "A relationship has specific context implications during the execution phase of an element."@en . + _:Nbb0a3a63cdba4f078c6de6eef7ff6579 . +_:Nc6d7eec7a63445c8a64113d0e59ce02c _:N30a10bdc909f4c4bb84f02821147b416 . +_:Nbd013d07f45a42d99931fe619ee4ca95 . + . . - _:Ndaecf52053104527964b081f8f6d4dfe . - . -_:N7bd6e74fed5e42d29e8234d5933efd98 . - "other" . -_:Ne9376f7e610a4f378d34348bf09acb82 _:Nbed681e4050a4ed381ead86181284b9d . -_:Nf0d9d94b4d9a4523a1d863217249938a . -_:Na4175476fbca48768ff989c226c9a147 . -_:N556a43c641024cdb92f4ef30ad62ff89 . -_:Ndf7f8e578ea545babb3686ec4ccbd3ad . -_:Ne92d6e989fde455e8e2dd493a67d27bd _:N2d1a418cbe234eceb99e5900d573b9f0 . -_:Nc034445fd507418d8439a09bb2e562dc . - . - . -_:N596d74921771447c9b35785007e34f1c . - . - . -_:N9f2f4966ca1442de8457e4f8329d0710 _:Nab78d95787b8439db6189f9699047620 . - "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . - "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . -_:Nb134dbc7f13f499887fd10287bcaba2e _:Nb55dc8c91e234dedbb3dbcc141a59bc9 . - "analyzed" . - . - . - _:Na9d0fc4b8c454d308184549fca9959b6 . -_:Nea611e5c42f94004b40d78331b3f6977 "1"^^ . - . - . -_:N3cd13df3eb014a37bb535428e0c037e6 . - "blake2b384" . - "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . - . - . -_:N8d911077b7fd4e4180299a09ca29ea53 . -_:N3e048db4a4e747afb8dbf69ebcfef3c7 _:N6a4847abbdd84dbb8e43386c5d710563 . - "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . - "the element follows the expanded Licensing profile specification"@en . - . + . +_:N0bf807da343b4645904db560abf69583 _:N1bd597d8851e43b79e3bde3fb6388627 . + . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N7091d1b764924e4db3551e0b422e61ba . + . + "Used when the type does not match any of the other options."@en . + . +_:Nd3d538fe1cb544b5808c51dffd844c81 . + . + "The `from` Element has been tested on the `to` Element(s)."@en . + . + "This individual element was defined by the spec."@en . +_:N2056bd91659a4260a6eb99a0cbdd9f14 . + . + . + . +_:Nf21725c3245f4286b67bd679d3351c59 _:N916e8c3c85774fcd96b700a20240ca75 . + . + . +_:Nfc8b91023a9e4e08ae989e08b6c0b9ec . + . + . +_:N453a2981f56c4d3a943752e7740f87fd . + . +_:N17c879855daa4fd7b7d7ef9da34e7ea6 _:N8ff2b7ece321489a9ff262a2c697c89c . + . +_:N73e74213eec84d8daaa36a51dab963d6 _:Ne93ae5d0cb664d7ab2554eaa72a23f25 . +_:Nf284f365ba5c4e4da40d7d7900d82744 "1"^^ . + . + "A canonical, unique, immutable identifier"@en . + . + . + "security" . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + _:N737b3d5b3c8f4cb7b5fb665b52f1dd96 . + . + . + . + . +_:Ne41f054fce23460dba46863153e67567 . +_:Na5ef7f1675b84ce99e4f4ca36d200a91 . + _:Na2b089e6c69d4697ae4de61d18f020f7 . + _:Ne883dfda4a7445ceb1e70f39ddd03fea . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + . + . +_:N47d32bc3b4e04c9ab083ec76d4f22585 . + . + _:N13acbf7806c648f19f147c9073a04385 . +_:Ndb06ff981cef4e94bfdbec22badacd4d . +_:Nbbbec88245754e9d9390b9a11f0b67c2 . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . +_:Nd77e569c4d2d4d2c9bb29ea462bc94cc . + . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "hasOutput" . + . + . + . + . +_:N7d2dbee05b72455c995a675186de5fd1 . + . + . +_:Ne7777394524c4639973161dd3aff2db3 _:N33da303c78e142a2acc0db12f3ee6686 . + . +_:Nc85a3a5deac54465a32d993ba5434b00 . +_:Ne3e1ac11e78640fab50085207414679f . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + "other" . + . +_:N4182e8c878544ebb842682b1ece2bd3a . + . + . +_:Nd6f4245b3ebe44e6b100782b191deb97 "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . + . +_:N87131d5acc2b478ba16230f714aa0bb0 . +_:N80dac4ea19f44488ae2dc09ba1429116 "1"^^ . + . + "Property describes the invocation entrypoint of a build."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . + "The Element represents software that controls hardware devices."@en . +_:Nd951591fca6c47c2985dd159db6ad52c _:N4f7ca95fbfad4d20810e92ab09220394 . +_:N1a0279389d714631b1d12935e9f2b014 . +_:N91adaf3024344ddcbcbf3f943faaad6b . +_:Ndc4add4edebe43f4821fb10dd712e481 _:N8a37deb026864cdca312209746e2caaa . + . +_:N3b695bebf32746039b555b8460ffe552 "https://spdx.org/rdf/3.0.1/terms/Extension/Extension is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:Nf94717c65e4f4b86b4df261ecf26650d . +_:N825f749765e348a0abfef75f63c1588a . +_:N0b728d22a9674ecc87af12fde5aae61c _:N3899f43be1b142148dc7af5c1cd6a1b9 . + "other" . + "The Element is a test used to verify functionality on an software element."@en . +_:N250a4372ab014e66ba3eec07accb85dc . +_:Na96bc2776ef4488595f136d0fbac26a6 "1"^^ . + . +_:N0bf807da343b4645904db560abf69583 . . - . -_:N96ab198cab814dceb4dc205e80f644d6 "1"^^ . - "certificationReport" . - _:Nb1e48771e71b47e98ac6156affc3e067 . -_:Neca5f29d67c84d0ba9ac05e9216798e8 _:N682a1c11ac5b4e2ea369c111bf3c01c7 . - . - . - "Provides the location of an exploit catalog."@en . -_:N48e045eccfb146548852b6d7274d180e . - . -_:N6dd024b62af74fb5a94391f7343f1c79 _:N56b887d449ac42dcac573916474bbce1 . -_:Nfd60dc4acf8f405b86d3ebb119d8edeb . - . -_:N5c4503ba9d8a43719f83795d17b3c7a7 . - . - . -_:N443dd85c241c4fe58205e0b7c7f18034 _:N9f5fcae561fb42dbaa23d4b2cbedef0a . - "releaseNotes" . -_:N5ca015566baa49e1be7bab3e5ca1b85a _:N835351dfbca44416893704268470fac2 . - . + _:N7a48123f699948b5867af1fec0d7b88e . + . . - "A relationship has specific context implications during an element's build phase, during development."@en . - . -_:N4477c4b31f20446998b8dff00cd309b3 . -_:Nf32238231fca45f1ac5221bd1ecd220c . - . - . -_:Nf9ea823dce8b4178968bb583746dda07 . -_:Nb7591bd67efe44909d92824106c3b13d . - . -_:N56d611894502410481612d5cb6016003 "1"^^ . - _:Ne3abaf912f304b1bbda537f0c9866ce8 . -_:N74164e072d8147ca808c451ad6b5d980 . -_:N0f509a18a72e4662a7e7fc2fe485c3ac . -_:N46b3ee96a83c4a44bb51112e0ca4621c _:Nf6a8366ab85b4074b187672b593f3e6e . - . - . -_:N08242c50c463457c930eba2a9659cdf9 _:N2be1468f91bc454082c8d0af333d205f . -_:Nb05234e65ed34c2e86c4abf63f02725c . - "the Element is a software manifest"@en . - "green" . - "securityOther" . - "When a CVSS score is between 4.0 - 6.9"@en . - . - "patchedBy" . - . - "A reference to the security adversary model for a package."@en . -_:N1288d377b72c44a58a576536a10d2030 . -_:Naa8dde945f86469da5292aed6e8c1634 . - . - . -_:Ndfeaf41c217c4e0c8c442c54949d7e6a . - "cpe22" . - "Provides a CVSS version 3 assessment for a vulnerability."@en . -_:Ncb9989fa0c964e6f8d1f94c2ac8e2674 _:N81a9816f437e481bb798da6e731d8252 . - . -_:N7a477b2d627c40bfbee3b6eca010b404 . - . -_:N28c546d9833444d7b7370a64f4274b1b . - . - "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . - "the Element is an operating system"@en . - . -_:N784fd0e933c9417b9e11ea351159df76 . - "the Element is a software library"@en . - . -_:N150b1880a8e64af2af56beec5b8f629e . - . - . - . - . -_:N2757a283e93b45ad88b85a593725d092 . -_:N2279545cee4f47fb9986df1b11a68c0f _:Naa8dde945f86469da5292aed6e8c1634 . - . + _:Ndb06ff981cef4e94bfdbec22badacd4d . + . +_:N1d4668e7f12244a7a9407b898c9b0534 . +_:N0b3155ddb4cc46678a8dadb3eb9e5e43 . + _:Nfcc30e48020d4dd2b3493a0cd55ea457 . +_:N2aa73eafba6f4d55938fb60c96ff2379 _:N8b5253826157456ba3297cf9f4f8db15 . +_:N833dac5833c24d35a16d11f2e318aeef . +_:N63f963c2c8a4467bb803f9af7eaafd3d . +_:N7a48123f699948b5867af1fec0d7b88e "1"^^ . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . + . +_:Nebecc80c7e4045d1b3ad15ab0c1d04ec . + . + . +_:N33da303c78e142a2acc0db12f3ee6686 . + . +_:N02fadd3757064be6a0b797d8675b611e _:Nef3e82bf7eac41aa8dc101eabd0f1815 . +_:N904326509fc04cc4be66ea123ed9fdc4 "1"^^ . + "bower" . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . +_:N4e4b35788e1b4064b856bcd8d2cc6670 "1"^^ . + . +_:Nd2a11bb8a1a14a82994d02e9dd610275 . +_:N615be2b8b7174608b24884d12a2039ad . +_:Nbc1332652da345c49ad3c948238f404b "1"^^ . + "Provides an SSVC assessment for a vulnerability."@en . + . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + . + "The Element is a bill of materials."@en . + "Describes if a given file is a directory or non-directory kind of file."@en . +_:Nba03adbea09d477299a596cac9fd8319 _:Ndbfe3b48ba714fb990a0e903863ea1ed . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + "hasDocumentation" . + . +_:N2847f93323fd468eab2b926c5715c994 _:N4a56b875349e44729e9aca40972c86cd . + . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + . +_:Nadd5d6fa295c47ee82d49e5fde059110 . +_:N80dac4ea19f44488ae2dc09ba1429116 . +_:Nf507b9bee5ae4254bafe4ce3c72a9f18 . + . + . + "any hashing algorithm that does not exist in this list of entries"@en . +_:Ne03121e956234709bc0f8f288597ff50 . + . + "npm" . +_:N7583808b54c947658126a7846ad7cc76 _:N4466be96ec5a4942b916c3f1fad2d3ee . +_:N10f5cc15b506459db381c02764d60e76 . + "the element follows the Lite profile specification"@en . + . +_:Nbc8ae53aacf942ca88840a6c1d655d6c _:N58021835a49a4b959f9428f8df7f7198 . + "A distinct article or unit within the digital domain."@en . + "Provides a map of a property names to a values."@en . +_:N29cadfcf5dfa4e73b1b0f56fa6e4352f _:Nb2747510507b404f9243bfd7225f629d . + . + . + . +_:Nb916f2dfc1c640bd8e0dac9bb5956172 _:N57e86c05425144f4a08e64395a0d5e1d . + "The `from` Element is amended by each `to` Element."@en . + . + . +_:N942417ca6d844df0914d75b099a457f8 . +_:N2aa14aff363e4fc1ab2ed86f71eb8873 . + "lite" . +_:N3bf9008e5422473bb689602da04ccca1 . +_:N37829b662873490d9964f7bbbc300fce . + . + _:Nf71f6300b14a4726a20ffad899bed919 . + _:Naf01116eff7c4759be95f8f97c257d9c . +_:Ndb31c53559be41e0b28e79b74da0b557 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "source" . + . + _:Nca9532c3dd0b421e95d0800b68e3442a . + "An individual human being."@en . + "license" . + "A mathematically calculated representation of a grouping of data."@en . +_:Nc7f12b88e8f5489dacbbfeb81192696a . +_:Nc22ee04d695b4582bd604f6206900620 "1"^^ . + . + "Indicates absence of the field."@en . +_:N78c7513398064da1a55c5df1b3c96444 . +_:N13396ee366a94de388e2aff47754e81f "1"^^ . +_:N53970517ea09401691d51549f8e0fd90 _:N77f1a43a35e5447c83116261ae574acc . + _:N7091d1b764924e4db3551e0b422e61ba . + . +_:Nbc1332652da345c49ad3c948238f404b . "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . - . +_:Naf01116eff7c4759be95f8f97c257d9c . +_:N5a0ed5449f124c1e9ea7b05f0826cabd _:Ne64dea82135241279d97934d928f2d35 . +_:Na449b0b56e3540618b2a2698204edde9 "1"^^ . +_:N05edbc4959e844438800e546abaebaea . +_:N825f749765e348a0abfef75f63c1588a "1"^^ . +_:N89d38dc48bd64f1d894f7f8c5494c264 _:N0d2bee57931544d786ff3bc0afb223b0 . +_:N98018fef19484e2fae944af82b21920e "1"^^ . + _:Nb345ac20ec3244e480ec30eee26dc06e . +_:N6aa0e623203745d7b1fb18b485918354 . +_:N675847984777421d9fb9b171cdf0bb53 . +_:Nc9ddcdf86e874968aa8f5ba821975eb4 . +_:N786a3eaa8fbe4cf0bb67c4e086fa8b5b . +_:Nd91122440e7149a28656eb9394e082b2 _:Nb2f2a5ddadbe4718954d50737f92e201 . +_:N23a349d7f4a14351adf4c70293152926 . +_:Ndaeba75fb43b4db7b777e9b00ecd7064 . + . + . + . +_:N187a93895c7b43bea96131212a0ba3f5 . +_:N4dcad64fd9cf4af2b8d6ea98d6c5450a . + "The second-highest level of risk posed by an AI system."@en . + . "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . -_:Nf1326177a8f54cd38fb0d7aae60d69bf . - _:N5c307bac3b90460f8b755b5d46827013 . -_:N04c56aaa0702449d89c679a6ae2d509e . -_:Nb1e48771e71b47e98ac6156affc3e067 . - "build" . -_:Nd3eb5f22c3be4e02942314bbb3d6fc3e "1"^^ . - . -_:N6b8369d5442f4e3c902c0fd4c6ad7f11 . -_:N6a4847abbdd84dbb8e43386c5d710563 . - . -_:Nfa5229038d564307aa21cdf1f0981a70 . -_:N7e6385c5f3414e35862d986501bfff61 . -_:Ncdeee899859040f3903c3212d22c1507 _:N349d882683524e14ae98f62402cadf06 . - . - . -_:Ne202363026264077a74d779bbd16e04c . -_:Na108e2b1e33249d1a7c16ae86469a51b . -_:Nf9cc156a3e084f8ab0ce054200c8fca7 . - . - _:N5a18c93b836b4c75887455a2be533616 . - _:N6a9c7fd96f82444aac9a3bae9894656b . - . - "Captures a limitation of the AI software."@en . - "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . -_:Na8a357017cea4aaf8263bb41e69ff340 . - "Provides an SSVC assessment for a vulnerability."@en . - "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . - "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + . + "staticAnalysisReport" . +_:Ne06f01bddfb24f69a9e1c0ba9694b11d . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . +_:Nc6d18260ddfa478b84c2dc19c2059aa2 . + . + . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + . +_:N7eb015d497fc4c09bb8530f59c65624d _:Nbd0d551be201428eb241c70d0e315cfa . + . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:N95b6da49b56e4298924cd2f153f00905 . + _:N7c7a260c778e4d4491ba75a0fe083ebe . +_:N87131d5acc2b478ba16230f714aa0bb0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . +_:N10002d3538094764a9c6d3893234cd04 . + _:Nbdc672a90df4480da8648bd31507d48e . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + . + _:N951ec4cbce414b3bab847840bf18d59f . + . + . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . +_:N220b4463e39147e99e8eeeb9974c5370 _:N75f6c4472b7b45349200afcce0dbacef . + "Describes how the dataset was collected."@en . +_:N87131d5acc2b478ba16230f714aa0bb0 . + . + . +_:N163b018b3d984833a5523252ed920c58 . + . + . +_:N626b5ad29167479dabae9a9177315404 . + . +_:N00d83dee7aa44a7991821a46e83e5164 . + . + . +_:Nce6e2333750a40619f2e93e40be35d7e . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:N786a3eaa8fbe4cf0bb67c4e086fa8b5b . + . +_:N0713bbcf2b1f4e23b912a81e12b5d270 _:Nbd013d07f45a42d99931fe619ee4ca95 . + . + . +_:N0781395df11e44a6a3186f0fa8908958 . + "vulnerableCodeNotInExecutePath" . +_:Neff5f08fa9fd4aaeb51026e2484443c7 _:N16cb468a2dcd423bb3654b71a6f00062 . + . +_:N2aa14aff363e4fc1ab2ed86f71eb8873 _:N6ac0694afb0c40c1bb0988b0569f0cb4 . + _:Nd6f4245b3ebe44e6b100782b191deb97 . + . +_:N5a0ed5449f124c1e9ea7b05f0826cabd . +_:Nbffaba2351c747ef8e380b89888a5f14 . + . + . + "certificationReport" . +_:Na3925605d49b4db382603ae946c37f51 "1"^^ . +_:N683c5b7b252949bda929dd4befe8bb50 . + . + . +_:N5a2b8b0073a54a3db4d6092f1c5043ed _:Nc1bb7a1b7d034342906511e27e066abc . +_:N95c7a63c89e94f8d9ceb0dd0c34ac9e3 . + _:N4278c3d777ea4ebd81cd23af80459c2d . +_:N8711a8ae5ca942d1bbd795a0144ca9a7 . + . +_:N4f9424fdcb0643a6b8dbd2c83de164a1 . +_:N1a0a0b40de254f55a8372bba19b60496 "1"^^ . + "executable" . + . +_:N6369a0cffc0445e888c1e30a54a5be5d _:Ncc35596b6f164968b0bd35143cbc52ea . +_:N10ab85203a394bd3ba6ef86074d64233 _:N0b353053b3cd41e89351acf39abb719c . + . + . + . +_:N315dc3dd043c41a49ffaaba74d10eeb0 _:N4e6142c3e2dd4f3f9e2aed1df9452bc7 . +_:Naa7e95f812804669b3e89daed8d27b21 . + . + . + . + . + . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . +_:N03140b327b9d4620b37b847528c7140b . + . + _:N1a0a0b40de254f55a8372bba19b60496 . + . + "hasMetadata" . + . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N5011f0cdb4544a70b796520ecd436a25 . +_:Nf4e0c03b381d4fb584571d8fdd2ca0a7 _:Nc15495aea74e4883afce40f042a057d5 . + _:Nf9bf03371d92462f91a54baa946fd625 . + . + _:N80dac4ea19f44488ae2dc09ba1429116 . +_:Na2b089e6c69d4697ae4de61d18f020f7 "1"^^ . +_:N731241b6024d4e109893eb1354404ec5 . + . +_:N184c02d9c66a4e9d988d681d20c5ddc6 _:N32f50a51e84f4a2499a5d17f54bbed6b . + . + "core" . + . + . +_:N9eda1b52fa264730ab0b383d300e1726 . + . +_:Na0242fde5c314aa599a3a00cfb01634c _:N694e3d4238ff4006b46b450b91f4179a . +_:N68e2aefd82ab40c59cc6c2bfeab0adc4 "1"^^ . +_:N897df0f6e23b488988a2d2db8aad5bc4 . +_:N2dbc8b0a30da433a94050a3ab1190bb8 _:Nf10e65ca64f84003827c23ef339743e5 . + "Describes a sensor used for collecting the data."@en . +_:N4382805b6a5947d38ffcfd8b182bddbf . + . + . + . + . + "A type of extension consisting of a list of name value pairs."@en . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:N5b2e4dda703849e4933338ff0970e968 . + . +_:N037a9f94d4da4593a56a6804fca57483 . + "When a CVSS score is 0.0"@en . + "trainedOn" . + . +_:Nda791debefe5491aa84d61433873c630 . + . +_:N89d641eef49d4a5f9ef42bfe5c4221bd _:N230a41f8c8d549b8844a37595ce56867 . +_:N8f24e4128c124ec08b9e80f45a43dd1e . +_:Nbac401e4be1249dd86dd149952baf59b "https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . + . + "model" . +_:N036299b1f2af44eeb966da8a1217ac9e . + . + "the element follows the Dataset profile specification"@en . +_:Ncc35596b6f164968b0bd35143cbc52ea . + . + "The version of the SPDX License List used in the license expression."@en . + "securityOther" . + _:Nd77657e0b19d459c931f64f48ed7e1a6 . +_:Nf58f6bed32c5414ca98526a5d6a7b6dc . + . + . +_:Nf593d6da70614e2581430bd37d9cd4ef . + . +_:Ne64dea82135241279d97934d928f2d35 _:Nbf6c9a626dad41fa8a0422cb3ddab7a3 . +_:Ncf68ed04ac534a92808a38217fa55530 . + . + . +_:Na2b089e6c69d4697ae4de61d18f020f7 . + "high" . + "3.0.1" . +_:Nfbb5f5e996be44989d31d47d46540443 . + . +_:N73e74213eec84d8daaa36a51dab963d6 "1"^^ . + "Provides an ExternalMap of Element identifiers."@en . + . +_:Nf593d6da70614e2581430bd37d9cd4ef _:N132cde65c9b14a1694d400388aecf0cc . +_:N0e31c4b45c4b442e9f1d32ab917a76ae _:N0e471571470240e5872be57bfd58fed9 . + _:Nbac401e4be1249dd86dd149952baf59b . +_:Ndb06ff981cef4e94bfdbec22badacd4d _:N0e4d30a5dd60459dbbb5efc7333deb37 . + . +_:N02daaf1ea3874989948c16e26274de9f _:N06a4b77ca26e4742a10723dc3349c395 . . + . + "Identifies the name of an Element as designated by the creator."@en . +_:N59f692071bb64860ab9f02cfb4670088 . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "data type is not known."@en . + . + _:N5a2b8b0073a54a3db4d6092f1c5043ed . +_:N54d1f829ecc441b9b7d9248324cbea6b _:N96120491adc84204822952240ddadf13 . +_:N70cbc4a60eda4e648df0df882fab278d _:N4c8c5257e6c144099de859c3f43b1961 . +_:Nf21725c3245f4286b67bd679d3351c59 . +_:Ne778a773be4f408192f2ed37c6143a5d . + . + . + _:N904326509fc04cc4be66ea123ed9fdc4 . +_:N261545ecf40d4f65bf47dc050598e90f . + "Records the results of general safety risk assessment of the AI system."@en . + . + . +_:Ncba4137ebcf84a728acd12bde91130e9 _:N8ec4229c1a674693bde766506ca93e87 . + . + . +_:Nccde3ac271484f91b83ed5fb2e1d70c9 . +_:N4278c3d777ea4ebd81cd23af80459c2d . +_:Nac0a6f045e7e4efd9dbaf01201286a14 . +_:N38e1279dca3f4e53be4eb3245a0e4ec2 . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:Nc9ccffdec66347509395f75c9845128f . + . + . +_:N4382805b6a5947d38ffcfd8b182bddbf "1"^^ . + . + . + _:Nae8e63939c7c4cf4aa4ba555362d775c . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . +_:Nfd592b5830bc43009e433a4172fb036b _:N9b9dc778bc5c415fad7f82cf4f6047d2 . +_:N3899f43be1b142148dc7af5c1cd6a1b9 _:N0274510beacf46b0b7cd7048ff3cbb4d . +_:N9b9dc778bc5c415fad7f82cf4f6047d2 . + . +_:Nce6e2333750a40619f2e93e40be35d7e . + "md2" . +_:Nd8679c5e3311467ca097a4151ac8fa54 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2b7fa052bf664f2a9e1923831d282602 . +_:Nd0d48abef81b4c44a952c0925a6e30a9 . + "other" . + "deviceDriver" . + . + . +_:N0b3155ddb4cc46678a8dadb3eb9e5e43 _:N1dd7c94072d1478ca91bee2c7af967a8 . + . +_:N3ba51db196c04386ae47cb64aab6c95c . +_:Nd8679c5e3311467ca097a4151ac8fa54 . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N0e31c4b45c4b442e9f1d32ab917a76ae . + . +_:Nc9235a4485e64fff9b1298095061a58e . +_:N73f9586a8a7d4b978afcb9cfe998050b . + "sha3_512" . + _:N7d2dbee05b72455c995a675186de5fd1 . + . +_:Nece0b4f721a847f98727202b50f4a753 _:N210fbcf85b384009a2cee68e4a7e6b78 . + . + . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + . +_:Nda71586c3c6541b4a6a907d316dca405 . +_:N1647e706f6764e7d9ec4e0aa8979d0c6 . + . + "module" . +_:Nbdc672a90df4480da8648bd31507d48e . +_:N4a3178783c58491bb646a056a8dbb37a . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . + . + . + . +_:N034bf868068348fb92f2f33976cad5ae . + _:N47d32bc3b4e04c9ab083ec76d4f22585 . + "Specifies the SSVC decision type."@en . +_:Na92e8ceda7e548bb9a144c2e9c857639 . +_:N8ff2b7ece321489a9ff262a2c697c89c _:N542022ab56194a2184bd872572ca204b . +_:N1aac3c1c2ffb45d79910e133d9ec02f9 . +_:Nca9532c3dd0b421e95d0800b68e3442a . +_:N986501d57648498ea8ed156092baf32c . + "A License participating in an 'or later' model."@en . +_:Ne70b85feb564419597741ca637d61d03 "1"^^ . +_:N13acbf7806c648f19f147c9073a04385 . + _:N30d5cdb21c144005b1d74c81aa0e129e . + "mailingList" . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . +_:N9eda1b52fa264730ab0b383d300e1726 . + "Provides an indication of where to retrieve an external Element."@en . + . + "packagedBy" . +_:N542022ab56194a2184bd872572ca204b _:N036299b1f2af44eeb966da8a1217ac9e . +_:Nf5531d9c16ff4f589dff19f480634c29 "1"^^ . +_:N48b3e9d109d34fdeaa6cbef58c05c171 . +_:N0eb0fa7732fb4a2db7455731d6a1ce53 . + . +_:N91d11db27b28462b8545b78734a27503 "1"^^ . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + _:N8bdb3da6da754d98843024e1dcbe3e43 . + . +_:N02daaf1ea3874989948c16e26274de9f . +_:Na92e8ceda7e548bb9a144c2e9c857639 "1"^^ . + . +_:N1bd597d8851e43b79e3bde3fb6388627 _:Neff5f08fa9fd4aaeb51026e2484443c7 . + . +_:Nd11df36dd5014f759eab790e847b9857 "1"^^ . + . +_:N0d2bee57931544d786ff3bc0afb223b0 . +_:N942417ca6d844df0914d75b099a457f8 "1"^^ . + . + . + . + "design" . +_:N88ce0438020d4326924db53dec9bd6b5 _:N722c45f262084ffa9b063b852952397b . + . +_:Nf6f1751e3ea84341bdeec66f7c44a8ce . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . "build" . -_:N744e6bd4bf054480b6e284543bb79b87 _:Nc14cc862b5494776966375d4711f1f8d . -_:N32c6410af083493aa3238362e1cbd67e . -_:N5c307bac3b90460f8b755b5d46827013 . - _:Nda9579bf8aeb475c986dfda97af9e414 . +_:N91fee785616543dd9952683d70d387bf . + _:N95b6da49b56e4298924cd2f153f00905 . + "Identifies the full text of a LicenseAddition."@en . + . + "the element follows the Extension profile specification"@en . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . + . + "A collection of Elements, not necessarily with unifying context."@en . +_:N4dda90621fe746a2972ace6f1e26f9c9 . + "Captures a limitation of the AI software."@en . + . + . + . +_:Nb916f2dfc1c640bd8e0dac9bb5956172 "1"^^ . +_:N8692a82c280845c3a6fa37c02ddae229 "1"^^ . +_:N58c62d134f5e41d78440946685ecf0cc . + . + "SPDX Project"@en . + _:N894cee407d8747ec8adc2f05ce722a86 . +_:Nd2a11bb8a1a14a82994d02e9dd610275 . + . + "adler32" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . +_:Ndde9f898797c42b989ef522557debf64 . + "Kilowatt-hour."@en . + . +_:Nd6ca1bcbdc494e39a9c1a4da0c52a0b3 . + "build" . + . +_:Nad909dcc4fad4339a9eb809fabd6a871 . +_:Nf4e0c03b381d4fb584571d8fdd2ca0a7 . +_:N57e86c05425144f4a08e64395a0d5e1d _:N833dac5833c24d35a16d11f2e318aeef . +_:N7f2c8d25f5df4c27b35c70d38090eab3 _:N8186b6d9dc534ac1b7a906d040a88d6a . + "funding" . + . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + . + . + . + "other" . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . +_:Ne70b85feb564419597741ca637d61d03 . + "clickthrough" . + "Represents the energy quantity."@en . + . +_:N737b3d5b3c8f4cb7b5fb665b52f1dd96 . +_:N06a4b77ca26e4742a10723dc3349c395 _:N03140b327b9d4620b37b847528c7140b . +_:Nf6f1751e3ea84341bdeec66f7c44a8ce _:N0c49370c41124d50ac6081418cb2432d . + "analyzed" . +_:Nc0c94fed0eb041ef8c4fe70f4b1fd7c0 . +_:N5f694c64068844ca80652791ca7749d9 _:N4dda90621fe746a2972ace6f1e26f9c9 . +_:Nf5531d9c16ff4f589dff19f480634c29 . + "platform" . + . + . + . + . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N377b547285074591a904911ef1fc1977 "1"^^ . + . + _:N4aa1ea2c440f4aecb7a6656a599fbf22 . + . + . + . +_:N82be0a238ea44c658a60ca20e0c8c6fa . +_:N85ad449141be453592e9e80c2bc379f4 . +_:N9a582f09d0b7426d81ae74b09a5ed252 . +_:N1a0a0b40de254f55a8372bba19b60496 . + _:Nb3e77cdb9a14442eafb0659c7081c110 . + . +_:N57e86c05425144f4a08e64395a0d5e1d . + . +_:N3bf9008e5422473bb689602da04ccca1 . + "A short description of an Element."@en . + . +_:Nfc3f4dc279d7471b83aa1a9df09f8d3f _:N64a80dfe5e954cf59753ab8a96e4eff3 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + "The `from` Element contains each `to` Element."@en . + "swhid" . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "scrapingScript" . + . + . +_:Na3743aad0c334d06a729f81988609c9f . +_:N8e672d95ff7d48e68c1ed7ecf019b269 . . - . -_:N0f7bf6e1b6a84c71b96db0ed65f445fd _:Ne0a4093971cc4c949d28cdad8bdcb48d . - "Identifies the full text of a License, in SPDX templating format."@en . - "A reference to metrics related to package such as OpenSSF scorecards."@en . - "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . - "md4" . -_:Ne4c7d5c25b2f46f3b980935a3b7858e2 . - . -_:Nf0b9c1849e524f0e8b565e2bde495ce5 _:N27a589ebe1bb40c483985fcde9a2d5f2 . - . - "The `from` Element has been tested on the `to` Element(s)."@en . - . - . -_:Nc5bf40e3b2584e2eaa4becc473bed079 "1"^^ . -_:Ne9376f7e610a4f378d34348bf09acb82 . -_:N3df9880d78624ddba1dd8e35a428b9c9 "1"^^ . - . -_:N553eab502b9344dfa8c5091d3acb923d . + "The third-highest level of risk posed by an AI system."@en . + . + . + . +_:N024478cff6eb4ef48dc45dabdb7b0a35 . +_:N29e8eb1e03be45ae92093e6937585f14 . + . + "Used when there is a security related identifier of unspecified type."@en . +_:N786a3eaa8fbe4cf0bb67c4e086fa8b5b . +_:N037a9f94d4da4593a56a6804fca57483 _:N163b018b3d984833a5523252ed920c58 . + . + . +_:Nd33af007bad14a4594f7039df1c5df75 "1"^^ . + . +_:Nce6e2333750a40619f2e93e40be35d7e "1"^^ . +_:N30d5cdb21c144005b1d74c81aa0e129e "1"^^ . +_:N91d11db27b28462b8545b78734a27503 . + . + . + "configures" . +_:N61b9a25cae674e199ce6572456d8e72f . +_:Nb3e77cdb9a14442eafb0659c7081c110 . + . + . + . + "the element follows the Security profile specification"@en . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:N72dd028519c2443b94229cfc4a2639bc "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N44928392b4d8458f847c7fd69533d2ee _:N0b3155ddb4cc46678a8dadb3eb9e5e43 . +_:N4f925ef656b840928e22aa51252c2976 _:Ndb50eefe33ac4feda6cfb13073b5324e . +_:N4ad4011b5f8c44cbb3e76f5da0885cfd . +_:Ndcdb30d7deca45a8bc3e563144933f0e . + . + "hasPrerequisite" . +_:N47d32bc3b4e04c9ab083ec76d4f22585 "1"^^ . + . +_:N261c61aa119e4f4e9ce3c9387fb29c9f . +_:N507c6135f8424e8db67fe59ae93eb464 _:Nc6d7eec7a63445c8a64113d0e59ce02c . +_:N2a72f2e0c3d44dd5ac4c0633f336d556 . +_:Nf6541e98d99947d9a7ccb49088b43ea0 _:N931294357284457f9a6f643757b29e72 . +_:N220b4463e39147e99e8eeeb9974c5370 . +_:Na1cdda0a73e94e598b769cac4a5a5cb8 . + . + _:Nba03adbea09d477299a596cac9fd8319 . +_:Ne70b85feb564419597741ca637d61d03 "1"^^ . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . +_:Nff9c0c2a18f24f76bfa32806ec48ce59 . + . + . + "issueTracker" . + . + _:Nd385c846dfa14371a0a3697f7168b4c1 . + "Describes methods that can be used to explain the results from the AI model."@en . + "Describes a certain part of a file."@en . + . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N72a328f4b7e14cb194d99b35236c3430 . + . + . + _:N763c69315ee040a88ca27b5205984626 . +_:Nd11df36dd5014f759eab790e847b9857 "1"^^ . + "2024-11-22T03:00:01Z"^^ . + _:N5011f0cdb4544a70b796520ecd436a25 . +_:N288949a61054447689377b531414e0b7 _:N41fda4edc0294fce84cdb5688d8ef9ef . +_:Nca9532c3dd0b421e95d0800b68e3442a . + "hasAssessmentFor" . +_:Nb8a14d0c45314542aa2d6a98232399be . + . +_:Nb0ab9a298e9845b1b1b770398def929d . + "device" . + . + "inlineMitigationsAlreadyExist" . + . + . +_:N2c7697a923534e9988689746f1d03e41 _:Nf4e0c03b381d4fb584571d8fdd2ca0a7 . + . + . +_:N70cbc4a60eda4e648df0df882fab278d . + "Captures the domain in which the AI package can be used."@en . + "securityThreatModel" . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . + . +_:N6e913b09266e498887238fae6898e289 . +_:N4aa1ea2c440f4aecb7a6656a599fbf22 . + . +_:N269b628c85f04f5d8a10fa3c500745a4 . +_:Nce6e2333750a40619f2e93e40be35d7e . +_:N3b50e4323e8b4d388d8d522e18a49070 _:Nac0a6f045e7e4efd9dbaf01201286a14 . + . + . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + "diskImage" . + "vulnerableCodeCannotBeControlledByAdversary" . +_:N348ad67a2abe4f9d929b1e20acc594b5 _:N52399fdf517c416ebb2e470463b71b5d . . -_:N9a4f2ea8112e48b18e9aaa109a1e02b3 . - . - "An assertion made in relation to one or more elements."@en . - . - . -_:Nbc63e97d65ef4f38936c3be4f51c6827 _:N556a43c641024cdb92f4ef30ad62ff89 . -_:Ne3abaf912f304b1bbda537f0c9866ce8 "1"^^ . - . - "source" . - "ai" . -_:N9fc754cd17fe403b9e6567ff39e96ef5 . - . - _:N065968ff4b1d468f80d208a94f728820 . -_:Ne9376f7e610a4f378d34348bf09acb82 . - . - . - "altWebPage" . -_:N49a4e0f670334d2cbe90cca23083d0ad _:N97777d3f00c44071a9af1cf1e9b8d4bd . - "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . - . -_:N2b4ba84d3c35422383f41faeffab544e . - . - "the element follows the Dataset profile specification"@en . - "Provides information about the type of an SBOM."@en . -_:Nff83286adad842f19d79a36e90df97d2 . -_:N76180350f15e4fd0be60faa3412ed1fa _:N3cd13df3eb014a37bb535428e0c037e6 . - "the Element is a container image which can be used by a container runtime application"@en . - "A reference to an artifact containing the sources for a package."@en . -_:N15fc27df69c64453aa991097a3de803a . -_:N1fcc6df939fe4ff6b57639467f64eff7 _:Ncdeee899859040f3903c3212d22c1507 . - "other" . -_:N2757a283e93b45ad88b85a593725d092 "^[^\\/]+\\/[^\\/]+$" . - . -_:Nd677bc1745684cf98fb92f17a75ebd52 . -_:N16549d2169e94a4d8d291368d2d9f71b . -_:N1288d377b72c44a58a576536a10d2030 . - . - "Provide consumers with comments by the creator of the Element about the\nElement."@en . - "the Element is a single or a collection of source files"@en . - . - "Describes potentially noisy elements of the dataset."@en . - . - "Availability of dataset."@en . -_:Nf32238231fca45f1ac5221bd1ecd220c _:Nbb925214ef4742999c6047ece09174ec . -_:N229d11f8176c4bb7acd631c6b7187287 . - _:N87ef2338681b493982fdd6660c334933 . - . -_:Ndaecf52053104527964b081f8f6d4dfe . -_:N01b77c997a784a81856bfe55a59f0d26 . - "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . -_:N6a9c7fd96f82444aac9a3bae9894656b . - _:N56d611894502410481612d5cb6016003 . - . -_:Nf0d9d94b4d9a4523a1d863217249938a . -_:N8411f84580e2497da97dab50dc3b4df3 . -_:Nf7805d1c06ba43eaa22c6043949bd567 . - "structured" . -_:N37e9effec5ca4011a388b871588a9bfc . -_:N558588160dbd42e28c5618ebcbb6e00a _:N1b970adab24f43699ff9033a7892334e . - . - . - "An element of hardware and/or software utilized to carry out a particular function."@en . - "System Package Data Exchange (SPDX) Ontology"@en . -_:N7177e8b281d74917a500d212b7382b6b . - "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . -_:Ne4619e36e32c4fdc886ba17b636520a3 . -_:Naee034377c334f78a3af1a4d25c3d468 . - . - "Element is data"@en . - "securityFix" . - . - . -_:Na62fed341d814dc8ac95b17410dd06e9 . - . - "Specifies the value of the content identifier."@en . - . - "simpleLicensing" . -_:Neca5f29d67c84d0ba9ac05e9216798e8 . - . +_:N8692a82c280845c3a6fa37c02ddae229 . + . + . + _:N80dc66a1ccec469392596c5291fa2864 . + "A substitute for a URI."@en . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + . +_:N2a72f2e0c3d44dd5ac4c0633f336d556 . +_:N3b695bebf32746039b555b8460ffe552 _:Nb8a14d0c45314542aa2d6a98232399be . +_:N4d2df683a0ea4c39be288b78f9e61ca4 . +_:N66b43817d95d4468bf805207af159230 . +_:Nd33af007bad14a4594f7039df1c5df75 . + . + . + . + . + . + "No assertion can be made about the completeness of the relationship."@en . + . + . +_:N8bdb3da6da754d98843024e1dcbe3e43 "1"^^ . +_:N2aa73eafba6f4d55938fb60c96ff2379 . + . + . +_:Nfe1814d375d7456e843deb8cde1cf341 "1"^^ . + _:Ne68051bb209048da9a57bc5dbaf28bf0 . +_:Nc38c872821b548ee8f430a027b2d711f "1"^^ . +_:Nd3d538fe1cb544b5808c51dffd844c81 . +_:N98018fef19484e2fae944af82b21920e . +_:N39638ea4b52f4236b7a808cb979d2f4b . +_:Nbd47cac50394462f9015e00ec4b449a6 "1"^^ . +_:N8ff2b7ece321489a9ff262a2c697c89c . +_:N9eda1b52fa264730ab0b383d300e1726 . +_:Ne820a8ec67114d53b03a71f5f7be31f5 . + . +_:Ne11c75cafdb0438299216847b06716cf "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + . + "3.0.1" . + . + . + _:Nd8679c5e3311467ca097a4151ac8fa54 . +_:N951ec4cbce414b3bab847840bf18d59f . + _:N9eda1b52fa264730ab0b383d300e1726 . + . + . +_:Nebecc80c7e4045d1b3ad15ab0c1d04ec "1"^^ . + _:N163fe4499b2a454a9641b23118bf53ae . + _:Ne70b85feb564419597741ca637d61d03 . + . +_:Nfbd3df443088485abe551fc6374a3c4c _:N1256cfafa26e453a9d5f8b08cc5920d7 . + . + . + _:N00d83dee7aa44a7991821a46e83e5164 . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . +_:Nedaa28cbd856413e95e7805cf2d255dd . +_:N329ecc1447f349cc968623ddffe6a2f7 . + "invokedBy" . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + "componentNotPresent" . +_:N0eb0fa7732fb4a2db7455731d6a1ce53 _:Nd73c69088f734dffb4cc9539c637aecf . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . + . + . +_:Nfb655ff9dcc6442baa6046d411f0624c . +_:N687efc23ea2c4c0b9a09c9ca45dc49b3 _:Nc91762ec925048e0a85d224bd2bd6d32 . + . +_:N377b547285074591a904911ef1fc1977 . + . + . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . +_:N4dcad64fd9cf4af2b8d6ea98d6c5450a _:N264b55b33a4549a6a131d79763879896 . +_:N0a961d271f304c8cbb2e0a1307a9d8ad . + . +_:Nf284f365ba5c4e4da40d7d7900d82744 . + . + "Provides information about the primary purpose of the software artifact."@en . + "Identifies the full text of a License or Addition."@en . + "foundBy" . + "hasConcludedLicense" . +_:Nf41c7f62f52f4c10b14344ec13dfe1e5 . + . + . + "The Element is a machine learning or artificial intelligence model."@en . +_:Nd11df36dd5014f759eab790e847b9857 . + _:N5d195bb929fc404584503e9c9b17a526 . + "Identify the version of a package."@en . + _:N675847984777421d9fb9b171cdf0bb53 . + "sha3_224" . +_:N2847f93323fd468eab2b926c5715c994 . +_:Nd385c846dfa14371a0a3697f7168b4c1 . +_:N4466be96ec5a4942b916c3f1fad2d3ee _:N14d2ccc3ee7749088945c0ba96e7a88a . +_:N1bd597d8851e43b79e3bde3fb6388627 . + . + . + . +_:N4d86b5ad122d431bbf443326643a51df _:Nfbd3df443088485abe551fc6374a3c4c . + . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N14d7232930234cad917631e1993d7ccd . +_:Na42e3794f624483e818646ed683c5ba2 . +_:Nfe1814d375d7456e843deb8cde1cf341 . +_:Nc38c872821b548ee8f430a027b2d711f . + "vcs" . + "exportControlAssessment" . + . + . +_:Nbd47cac50394462f9015e00ec4b449a6 . + "sha256" . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N3c34004e669a4f809790739b55299420 . + _:Nc7f12b88e8f5489dacbbfeb81192696a . + "email" . + . + _:N82be0a238ea44c658a60ca20e0c8c6fa . +_:N1dd7c94072d1478ca91bee2c7af967a8 _:N34cf4751490f48f9852ff2fa143a6321 . +_:Nc6d18260ddfa478b84c2dc19c2059aa2 . + "Defines the original host file that the snippet information applies to."@en . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . +_:N3899f43be1b142148dc7af5c1cd6a1b9 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . + . + . + . + . +_:Ndbfe3b48ba714fb990a0e903863ea1ed . "cwe" . - . -_:N3851673c346e4c9cacc8cf50837d6cfb . - . - "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . - "When a CVSS score is between 0.1 - 3.9"@en . -_:N3daabc6c6db94e5596afc49544cf4f73 . - . - . - . - . - "documentation" . - "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174)."@en . - . - . -_:Ndb8f89749acf4352b1d62c554af7fde6 _:N1fb6b0088d4c43e7b3c2fc9342ceaa64 . - . -_:N64ddee7ac73d4ece8829e73183990c09 . - "A string in the license expression format."@en . - . - . -_:N137d0a75fd374daeb077f228da53897d _:Nc2c6dbe5330f4b17ae33727e45f3e9d4 . - "The highest level of risk posed by an AI system."@en . - . -_:N4d126f9477f941e8bd279a13b5a8f5bd _:Nfa5229038d564307aa21cdf1f0981a70 . - . -_:Nad60293878ba46b5b12652a41f9e5b9e "1"^^ . -_:N86117ed461e44611b359453a2e0ddc6d . - "Specifies the type of an external identifier."@en . - "bom" . -_:Nb3c96ed9edf047408c12db5df1daaf43 "1"^^ . -_:Nbb8a5798239c4e919f8766e4ec36f99c . - . - . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + "Defines the end of a range."@en . + "serious" . + "Commentary on an assertion that an annotator has made."@en . +_:N3bf9008e5422473bb689602da04ccca1 "1"^^ . +_:N91adaf3024344ddcbcbf3f943faaad6b _:N2aa14aff363e4fc1ab2ed86f71eb8873 . + "simpleLicensing" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . +_:Nbbbec88245754e9d9390b9a11f0b67c2 "1"^^ . + "purchaseOrder" . +_:N68767751c5f64fc1afe82f2dcbae6636 _:N1358bfc70dc14db6aa3a799228bc2fdd . + "A reference to a export control assessment for a package."@en . +_:Nbd14f0a1267744e89f6930e710689414 . +_:Na449b0b56e3540618b2a2698204edde9 . + . + _:N328adb4bb1ec422084a2169890188a03 . +_:Nf71f6300b14a4726a20ffad899bed919 "1"^^ . +_:Nbac401e4be1249dd86dd149952baf59b . + . + _:N8e672d95ff7d48e68c1ed7ecf019b269 . +_:N5ab248e680454bbcb3ed254de24ac49f . + . +_:N163fe4499b2a454a9641b23118bf53ae . + _:N453a2981f56c4d3a943752e7740f87fd . "coordinatedBy" . -_:N1fb6b0088d4c43e7b3c2fc9342ceaa64 . -_:N2757a283e93b45ad88b85a593725d092 "1"^^ . - . - "Makes no assertion about the field."@en . - "data is a collection of images such as pictures of animals."@en . - . - . -_:N3daf4b35020144689a44f0ff15ab9244 . - _:Ncf36f0c937574a40957458e67ccab9cc . -_:Nf854d2bed3524a08aa85d987a15ae3b4 _:N60be8975df7d4f659d6589e10d3c8e19 . -_:N75afbc0eb6e646f28396b52ee0131582 . -_:N2bdf11c1b85e405a835c07e19f150556 . - . - "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . - "gitoid" . -_:N998d2725c2574c8f8344620b839e2d6f _:N9b52daafec44429186724a6d9a846793 . - . -_:Ne84bb159066e48a1a884cceaa3854438 . - . -_:N77693c7bc7954401a66962a8958fac0c . -_:Nbfec05fc44f6435dbdeeb9f608a28e4c "1"^^ . - . -_:N74164e072d8147ca808c451ad6b5d980 . - . - . - "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . -_:N5e376019b0684f24bf032cb891f1c491 _:N6349b0f36b7f449faa1d73050fbde88f . - . -_:N7e6385c5f3414e35862d986501bfff61 "1"^^ . - . -_:Nc0df3f2041aa425183862b62f02dd829 "1"^^ . -_:N8551607a3f804986877c0affaed0b752 _:Nfc73e3099ed6465bb089df33bbf469ff . - . - "other" . -_:Ne4619e36e32c4fdc886ba17b636520a3 "1"^^ . -_:N28c8fedea4324ffa8c41338d5fae0fe5 . -_:N00e5d1a9fc9f4e8ea643c5dec21372c9 "1"^^ . - . - . -_:Ne14b54567e794b13a34acf8718d2ccf6 . -_:Nf39729cdf1294ea88879ccd16e468339 . -_:N312b811b38e3467eb37fbf91bc0dd93b . -_:Ne8307a3d6a8a433fad20e9cf2bd69327 _:N99c96394ef494f739f0ba15682e92ea3 . -_:N49d9ce37bbb44f77a01b48e5f2009c3f . - "modifiedBy" . -_:N61bad2d32f474f829df8b09e757aec59 _:N86dbcc278d2a463da15bda1f007010e6 . - . -_:N7d3cea31b9db4418ad60cbbcd3f14b75 . -_:N30a7d396784a431ba0eb686ae5b7e645 _:N36ba7d6688234724ae43de9320a88887 . - . -_:N3cb5c5f5df694e3aaf52da4c410b011e . - "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . -_:N2b4ba84d3c35422383f41faeffab544e _:N5ca015566baa49e1be7bab3e5ca1b85a . -_:N01e0073f9d2a49f49037b8e666018bbd . -_:Nf05790d65f4b451781271dd86a5b4005 _:Na341e2127b1c4da9b7a2c521b48ba61d . -_:Nc7ccb8d419ad49ab9f18f22daf82266f "1"^^ . -_:N5a18c93b836b4c75887455a2be533616 . - "cpe23" . - . - _:Nb953247c1d474ff9b1190938b713a604 . - . -_:N6e7150c4286149b7aa27ddf655625b5e "1"^^ . -_:Nd698c35793ab47df8eaa1d9f6fe9f131 _:Nea5cd277bd75414183676bf891a32527 . - "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . - . - . - "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . -_:Nc5839c1a42cb4cbf8b8f389491a2b604 . - . - . - . - "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . -_:N456086b235914b4f9bd89adfd54de37c _:N99069f06ac76429c9f76e68132e89664 . - . -_:Nfafa3bfbbc7b4ea7bd042cec31c4660f _:N7c1de3ae74ec4d1d9b6be8a05eea2f76 . -_:N99069f06ac76429c9f76e68132e89664 _:N835bfbd04e26414fa4e0357251d9e6c7 . - . - . -_:N8e3eb89dc9a84ae0ae77a3bbc07580c9 . +_:N626b5ad29167479dabae9a9177315404 . +_:N243ef6907efb40d38e00f4430d63fc19 _:N9ed65925a89e40e8b7faaa925d739c72 . +_:Nda71586c3c6541b4a6a907d316dca405 . + . +_:Ndc659c8552d54ab684aadbdacdbd7a8d . +_:Ne5e123ab8f7d4aa4b35a7442690fe19d . +_:N0274510beacf46b0b7cd7048ff3cbb4d . + _:N5ab248e680454bbcb3ed254de24ac49f . +_:N68e2aefd82ab40c59cc6c2bfeab0adc4 . + . + . +_:N4e6142c3e2dd4f3f9e2aed1df9452bc7 . + . + . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + "noAssertion" . + . + . +_:N66595c518c6248f69bdca82dccebf454 _:Na82fb3a822a04f6180f1ca7808276d8f . + "Records the measurement of prediction quality of the AI model."@en . +_:Nd0cfba2a98544626a8566f29105598e9 _:Na79e142094fb464da3de3ceb4108e4ff . +_:N5f694c64068844ca80652791ca7749d9 . + . +_:N0781395df11e44a6a3186f0fa8908958 . + . + "review" . +_:Nd77657e0b19d459c931f64f48ed7e1a6 . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + . +_:Nc5485992ed4e4cbea07fa6d87ee716ac . + "blake2b256" . + "runtimeAnalysisReport" . + . + _:Nf41c7f62f52f4c10b14344ec13dfe1e5 . +_:Nfcc30e48020d4dd2b3493a0cd55ea457 . + . + "Specifies a data package and its associated information."@en . + _:Ndaeba75fb43b4db7b777e9b00ecd7064 . + "This individual element was defined by the spec."@en . +_:Nf7fd042770064703a84cd9039273e4f7 "1"^^ . + . +_:N65301d1be04341678842dfc049e2a33c . + "A reference to a social media channel for a package."@en . + "Provides the location of an exploit catalog."@en . + "data is of a type not included in this list."@en . +_:Nff33e8337dc8421d9e74b338e35a75d5 . + _:N1d4668e7f12244a7a9407b898c9b0534 . +_:N13f4d81403034faaa93ea1abc3bd3d91 . +_:Ndb31c53559be41e0b28e79b74da0b557 "1"^^ . +_:N73e74213eec84d8daaa36a51dab963d6 "1"^^ . + _:N954579de61d84bef909737ad4568a536 . +_:N68e2aefd82ab40c59cc6c2bfeab0adc4 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + _:Nc6d18260ddfa478b84c2dc19c2059aa2 . + . +_:Ne7777394524c4639973161dd3aff2db3 . + "registration" . +_:Nbb0a3a63cdba4f078c6de6eef7ff6579 _:Ncedd59bf4f1a4436ac8325d34d020df5 . +_:N58b8de667bb54771976a5e86a8a8139a . +_:N9bb1cced9aa14e08b36ebf9f952b1d01 . + "This individual element was defined by the spec."@en . + . +_:Ne883dfda4a7445ceb1e70f39ddd03fea "1"^^ . + . + _:Nf284f365ba5c4e4da40d7d7900d82744 . +_:Nd0ec388aab40469ab0a4297c30e0c906 _:N9c1ccbc2b86f454395a450f736b67eec . "The file represents a single file (default)."@en . - . - "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . -_:Nb40056258a0d4d96a453b1af72d463fc . - . - "sha3_512" . - . - . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . + "chat" . +_:N6946aaeee89545da9d91b8527c54139a . . -_:Nc0df3f2041aa425183862b62f02dd829 "1"^^ . -_:N27a589ebe1bb40c483985fcde9a2d5f2 _:N3daabc6c6db94e5596afc49544cf4f73 . -_:N4a639a72aca4429f900632616a34bef4 _:Naae3483836e249d3a4cdd827af0f8631 . -_:Ncf36f0c937574a40957458e67ccab9cc "1"^^ . -_:Nc642cb7cb5d441eaaa4a1fc86368d998 _:Nd0989d19000249b7b6abdfee096c9f41 . - "Identify the version of a package."@en . - "archive" . - _:N208b27c07ce6469e9114d5b80dfc4f8f . - . - "A License participating in a 'with addition' model."@en . - . -_:N393d2d53bef34fe0846e87c7df91588d . - . +_:N58021835a49a4b959f9428f8df7f7198 _:Nd77e569c4d2d4d2c9bb29ea462bc94cc . + . +_:N6be5db9035a14b779b13bfa0a5a51c3e _:Nd83655f2100e4025b2eefd465fc154ab . +_:Nb3e77cdb9a14442eafb0659c7081c110 "1"^^ . + . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:N683c5b7b252949bda929dd4befe8bb50 _:N991d42b910e64656b45d7c4ce9e7f5e3 . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . +_:N2b94274553ab4bc2bbc78307f39b3327 "1"^^ . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:Nba03adbea09d477299a596cac9fd8319 "https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en . + . + . +_:N0f568f8825144082a14a0e000b8ff13f . +_:Nae8e63939c7c4cf4aa4ba555362d775c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N8e672d95ff7d48e68c1ed7ecf019b269 . + . + "crystalsDilithium" . +_:N0d09683a42354debacdd0b0625119609 . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nc3c21678fc9a459784f054a6954a9aa8 . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + _:Na267e7b88a344e4fbd0c59a6dc760e65 . + . + "The Element provides low level control over a device's hardware."@en . +_:N2056bd91659a4260a6eb99a0cbdd9f14 . +_:N0753f471dae945e885cde15702c705bb . + . + "runtime" . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . +_:N3c163fcab8684aa09c61e78b4cbb9b38 . + . +_:N7a48123f699948b5867af1fec0d7b88e . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + _:Nc9ddcdf86e874968aa8f5ba821975eb4 . +_:N07868b0098174c478ac47f3fbc946ff0 _:N2061c93cd5774c61823bf76c952d5242 . +_:N95b6da49b56e4298924cd2f153f00905 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . +_:Nf7fd042770064703a84cd9039273e4f7 . +_:Nf41c7f62f52f4c10b14344ec13dfe1e5 "1"^^ . +_:N8bdb3da6da754d98843024e1dcbe3e43 . +_:Ne778a773be4f408192f2ed37c6143a5d . +_:Na5ef7f1675b84ce99e4f4ca36d200a91 _:N14d7232930234cad917631e1993d7ccd . + "Abstract class representing a License or an OrLaterOperator."@en . + . + "When a CVSS score is between 9.0 - 10.0"@en . + . +_:Ndb31c53559be41e0b28e79b74da0b557 . + "test" . + . . - "sha384" . - "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . - "the element follows the simple Licensing profile specification"@en . - . - "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . - "A reference to a social media channel for a package."@en . -_:Na1f3d174a6d64488a8ff34be710850c5 _:N1fcc6df939fe4ff6b57639467f64eff7 . -_:N941027defe6c4c49915b8fb72263813e . - . - . -_:N6f822a7a1a0748eaa9f4fe3e881d6726 . -_:N55072cbd77a64b16b152c20236d786f7 . - _:N64ddee7ac73d4ece8829e73183990c09 . -_:N761b1b05ac5746c3b86d599c46526598 "1"^^ . - "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . - . - "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . - "A reference to an alternative download location."@en . - . -_:Ne2f51219aefd476d89347b0e1c485369 . - . - . - . -_:Nf32238231fca45f1ac5221bd1ecd220c . -_:Nc416283f46f74c5ca28e42eede357fc1 . -_:Nc709c441c5e04513bcf2e73d3670fca8 . -_:N2c65a23cf781468598b84d1456d825fb "1"^^ . - "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . - "deployed" . - . - . - . - "Base domain class from which all other SPDX-3.0 domain classes derive."@en . -_:Nf39729cdf1294ea88879ccd16e468339 . + . +_:N45b62edbd5f3406dba20232288ec19fd "1"^^ . +_:Ne64dea82135241279d97934d928f2d35 . + "binaryArtifact" . +_:N0b728d22a9674ecc87af12fde5aae61c . + "Describes the type of annotation."@en . + _:Nda71586c3c6541b4a6a907d316dca405 . + . + "Specifies the unit in which energy is measured."@en . + . +_:N9bb1cced9aa14e08b36ebf9f952b1d01 _:Na3743aad0c334d06a729f81988609c9f . + "Specifies the value of the content identifier."@en . + _:Nc9ccffdec66347509395f75c9845128f . + "configuration" . +_:N44928392b4d8458f847c7fd69533d2ee . +_:N6eb9ec15081f404a99935ff4e2aaa14b "1"^^ . + . + . +_:N62b8677868664944abc9f19745aed957 _:Ne4baf3becb8740a79f8bceb49f40679f . +_:Nf3dfbb7f98e84c61b58f5b17e3ae9f19 . + . + . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N82be0a238ea44c658a60ca20e0c8c6fa . + . +_:Nf44042158d4d4c85a5bd6a0fcb538498 . +_:Nb3e77cdb9a14442eafb0659c7081c110 . +_:N4278c3d777ea4ebd81cd23af80459c2d "1"^^ . + "Specifies a time when a vulnerability assessment was modified"@en . + "The `from` Element is modified by each `to` Element."@en . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . + . + "cve" . "gitoid" . - "complete" . + . +_:Nf7e1508801cf4398b830fad84fe53388 _:N62b8677868664944abc9f19745aed957 . + . . - "blake3" . - . - . -_:N8b959a4ad4834d5a96d17ac52b3571cf . - . - . - "The `from` Element has been copied to each `to` Element."@en . - "red" . -_:Ndee65321b0f14da3a2a5675702243602 . -_:Nffd32d595d024069b6df3a1ef8da642a . - "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . - . - "hasSpecification" . - "documentation" . -_:Nf2495df384ef4dfe9e42259508a5f433 "1"^^ . -_:N6b8369d5442f4e3c902c0fd4c6ad7f11 . -_:N8551607a3f804986877c0affaed0b752 . - "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . - "module" . -_:N2fd6d6c96c7b46dabc958e2ddb32657c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - . - "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874)."@en . -_:Na168e6a25ca4415aa927f2d16152226c . - . -_:N56b887d449ac42dcac573916474bbce1 . - "hasOutput" . -_:N1f248bb10ce740cc9124e394b35259ba . - . - "A reference build system used to create or publish the package."@en . - . -_:Na1ab85fdd72146cfb0eb275a20aed6fb _:N68dfb19b51934b85a897e13ae36b552a . - . - . - . -_:Nc5bf40e3b2584e2eaa4becc473bed079 . - . -_:N3d67d474d6584406964ab34eebc78a17 . - "Provides a detailed description of the Element."@en . - . - . -_:Nfc8707d6d8b944508b09d8d3125e53f3 . -_:N64ddee7ac73d4ece8829e73183990c09 "1"^^ . -_:N2d8b30121bba468383f1a52208a233a0 . -_:Nd73c665e4d964b40be2d12cdc7ab7fa2 . - . -_:N28c546d9833444d7b7370a64f4274b1b "1"^^ . -_:Nc642cb7cb5d441eaaa4a1fc86368d998 "1"^^ . -_:N67a7c2de8c574fb991ccc64346e1de56 . - . -_:N9dfffc9a0d064fbbb99f222927600262 "1"^^ . -_:Nfc79218ef172418cad1d73977bceaf78 "1"^^ . - . - "software" . - . - "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . -_:Na40768ed7c6a40fcb01c9e8f1793b8a7 . - . - . - . - "framework" . -_:N01e0073f9d2a49f49037b8e666018bbd . -_:N87ef2338681b493982fdd6660c334933 . - . -_:N8e8fa340313748a7b459ba889204f2c1 . -_:Na34b98cc7abc4ac2bb5b1ba9777ec6a0 . -_:N2751f527dac048b29b31dea36517c56a _:N4a639a72aca4429f900632616a34bef4 . - . - . -_:N341003cfbb2341dc85b4e126aedddb6f . -_:Neb11974d792545bab359067d0609d8ef . - . -_:N20563c47790549c1a3121000a834c4cb _:N870a0a4f2a794e2aae2a22975ec6fa49 . -_:N556257d7798d418ea42ac047b24405ec _:N7bd6e74fed5e42d29e8234d5933efd98 . -_:N42dac2d2cbe6407596e2fb585812097d . - "Other exploit catalogs"@en . -_:Nb95a1dba72b847409cd9eab4ed5e0033 . -_:N6e7150c4286149b7aa27ddf655625b5e . -_:N36ba7d6688234724ae43de9320a88887 . -_:N64ddee7ac73d4ece8829e73183990c09 . - . -_:Ne3895908b9eb4cf68888a0b70d8088ff . -_:Ne8b93e1651f84d5f8ff94e4b82012f07 "1"^^ . - . -_:N9f5fcae561fb42dbaa23d4b2cbedef0a _:Nb37183f337474d0d8058f31577954cf8 . - . -_:N229d11f8176c4bb7acd631c6b7187287 _:Nc6fa5c5fdf614c2f88c2b4fc315663fb . - _:Nc0df3f2041aa425183862b62f02dd829 . -_:Nefe7cf242fd84f90a4f3cc6062e671c8 . - . - _:Nd78d72bd38c34a3c804f97f9e6b927a3 . -_:Nf4064e5c7fb84a899bffb14df5844894 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - "serious" . -_:N0ac53be222cb49b7af09086cfaaed1db . - "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . -_:N107aa4617cfc41499f0678d83f303c24 "1"^^ . - . - . -_:N4379f82c1b44400197a0281504402fc5 "1"^^ . - . - . - _:Nc5839c1a42cb4cbf8b8f389491a2b604 . -_:Nd73c665e4d964b40be2d12cdc7ab7fa2 . - "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless)."@en . - . -_:Nbf51d2fce0c449ca8df0fa964ec48e89 . -_:N15fc27df69c64453aa991097a3de803a . - "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3."@en . - _:N659a17727ec34fe487d556cc5ed935fa . - . - . -_:N42775851ecec45ee90ee1fe5c1071993 _:N4fd4703e2c5d4687bed9b05563fc9cda . - . -_:N1d5173c248f14304bd9adef81206e060 _:N6a3cf2ffe9b9430390c5ce23bd48fce4 . - "sha224" . -_:N2305488d52f34ae3bd7f3de8a96329e4 "1"^^ . - _:Nc5bf40e3b2584e2eaa4becc473bed079 . -_:N9832a681241a4a91bd95ecdfaa05670d . - . - . -_:N5e77c3af3932465a99431b715d09d12e . -_:N6761e7f2e133401fa1a4d1f8bed0202e . - _:Nc7ccb8d419ad49ab9f18f22daf82266f . - . - _:N950494b11f9e43fd9ce4b21264e6a0a8 . - . - "Element is configuration data"@en . - . -_:N9832a681241a4a91bd95ecdfaa05670d . -_:Ne0cb74aabc9c4794b4d9319b9a1fe42b . -_:Ndb56a4a0aad9490faaa05462a9fcc5b9 _:Nefe7cf242fd84f90a4f3cc6062e671c8 . - . - "platform" . -_:Nb387237d7787460e8f7e72786252a39f . - "high" . - "the Element provides a requirement needed as input for another Element"@en . - . -_:N069fdf6673d440b8ab54670ad7906662 "1"^^ . -_:N069fdf6673d440b8ab54670ad7906662 . -_:N9177e2ee3c054acba6cd2b8f4d78e4f3 . - "Megajoule."@en . -_:N78f0595c63a44f9ea394e506cdf868e9 . -_:N833899f5b4b1487b8858f9aebd17a95c . -_:N558588160dbd42e28c5618ebcbb6e00a . - "any hashing algorithm that does not exist in this list of entries"@en . - . - . -_:N069fdf6673d440b8ab54670ad7906662 _:N62354c6ede0641c2a17958df1fce06bf . -_:N950494b11f9e43fd9ce4b21264e6a0a8 "1"^^ . - . -_:N74164e072d8147ca808c451ad6b5d980 . -_:Nbe19063f503a46969af5f11469f71a33 . -_:N4c5910b87a7e4fc69577e8ccd52c8ab3 . - . - "file" . - "configures" . - "the Element is an archived collection of one or more files (.tar, .zip, etc)"@en . - "A reference to a static analysis report for a package."@en . -_:N193f441ef82a4c6f872a77fdc536a646 . -_:N2757a283e93b45ad88b85a593725d092 . - "Provides an EPSS assessment for a vulnerability."@en . + "Provides information about the type of an SBOM."@en . +_:Nb245e59ae52342bea2f1feb05bb80e79 . . - . - "Information about the relationship between two Elements."@en . - . - "Timestamp of impact statement."@en . -_:N96ab198cab814dceb4dc205e80f644d6 . -_:Nfd60dc4acf8f405b86d3ebb119d8edeb . - "A mathematically calculated representation of a grouping of data."@en . -_:N5c4503ba9d8a43719f83795d17b3c7a7 . -_:N3051e5f9bfdf45b19c416045118502ef . - . - "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . - . - "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . - "sha512" . - . -_:N107aa4617cfc41499f0678d83f303c24 . -_:N67fc6e9fc5d24eabb8543cdc669b1145 . - "Describes how the dataset was collected."@en . - "nuget" . -_:N64ddee7ac73d4ece8829e73183990c09 . -_:N6e7150c4286149b7aa27ddf655625b5e . - "A reference build metadata related to a published package."@en . -_:Nfe1303da564e44c3ab64d0e8f83a0713 . - . - "References the Element on the left-hand side of a relationship."@en . -_:Ncb9989fa0c964e6f8d1f94c2ac8e2674 . + . "The `from` Element is a descendant of each `to` Element."@en . -_:Nb7591bd67efe44909d92824106c3b13d . -_:Ne7755fef413944e6a5bd969d379e8410 "1"^^ . - . -_:N0f509a18a72e4662a7e7fc2fe485c3ac . - "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . -_:N208b27c07ce6469e9114d5b80dfc4f8f . - "The `from` Element is amended by each `to` Element."@en . -_:Ncdcdce99937a4256a16f3f88605197d9 . +_:Nff33e8337dc8421d9e74b338e35a75d5 . + . +_:Ncae19f1586924a439b37e75eb5b57ed4 . + . +_:N30d5cdb21c144005b1d74c81aa0e129e "1"^^ . +_:Nc91762ec925048e0a85d224bd2bd6d32 . +_:N95b6da49b56e4298924cd2f153f00905 "1"^^ . +_:Ndb06ff981cef4e94bfdbec22badacd4d . + . +_:Na5a538a0052340c0ba01747cca3d3da8 _:N8115c0678af046f9bb8fe56f1541b92b . +_:Nf41c7f62f52f4c10b14344ec13dfe1e5 . +_:Nfcc30e48020d4dd2b3493a0cd55ea457 . + "testedOn" . +_:Nc38c872821b548ee8f430a027b2d711f . + _:Ndc4f18efad334d78a498ea9df84fbd02 . + . + . +_:N0b728d22a9674ecc87af12fde5aae61c "1"^^ . + . + . +_:Nd11df36dd5014f759eab790e847b9857 . +_:N105628f6c8b040edb9db617f35f30bec . +_:Ned1f0afb78d3460c9478383abf3da36b _:Na8cf54eee3ac40cca0ed6cfdaef6a576 . +_:N734a831b529349fb969fd328dc6dcb1c _:N25b71b41baf8408a91b66336f376a5b6 . +_:Nb850dda843534d3ab3ffbadf70766fef . +_:Ndc4f18efad334d78a498ea9df84fbd02 . . - . + _:Nda791debefe5491aa84d61433873c630 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . +_:N6be5db9035a14b779b13bfa0a5a51c3e . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "Categories of presence or absence."@en . +_:Nbd14f0a1267744e89f6930e710689414 "1"^^ . +_:Nf44042158d4d4c85a5bd6a0fcb538498 "1"^^ . +_:N6eb9ec15081f404a99935ff4e2aaa14b . + . + . + . + . +_:N06a4b77ca26e4742a10723dc3349c395 . +_:Nccde3ac271484f91b83ed5fb2e1d70c9 . + . +_:N36b7d391e5cf402199bf454d82f5735c . + . + . + . + "A reference to a dynamic analysis report for a package."@en . + "References an Element on the right-hand side of a relationship."@en . + "Abstract ancestor class for all VEX relationships"@en . + . +_:Nf3dfbb7f98e84c61b58f5b17e3ae9f19 _:N565a78360e28494ea80897aadf944c0c . + _:N79e0fdc8a753446e8e1931aab90b02ae . + . + "Specifies the type of an external reference."@en . + . +_:N5011f0cdb4544a70b796520ecd436a25 . + "data" . +_:N1358bfc70dc14db6aa3a799228bc2fdd . + . +_:Nf507b9bee5ae4254bafe4ce3c72a9f18 . + . +_:N0f568f8825144082a14a0e000b8ff13f _:N89d641eef49d4a5f9ef42bfe5c4221bd . + . + . + "image" . +_:Nc91762ec925048e0a85d224bd2bd6d32 _:Nf028d12b2d0f4f6cb20747b6b39a8b5b . + "ancestorOf" . +_:Nc85a3a5deac54465a32d993ba5434b00 _:Ne7777394524c4639973161dd3aff2db3 . + "3.0.1" . +_:N163fe4499b2a454a9641b23118bf53ae "1"^^ . +_:N29e8eb1e03be45ae92093e6937585f14 . + _:N88e97455b377466daa24bff58cde8f0d . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . + "hasTest" . + "dynamicAnalysisReport" . +_:N328adb4bb1ec422084a2169890188a03 . + . + . +_:Nadc18a90b6ca4cc3af0fb2aa7418dda8 . + "the element follows the Build profile specification"@en . + _:N66b43817d95d4468bf805207af159230 . + "no" . + . + "Any other units of energy measurement."@en . + "test" . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + _:N06465237afe4406eb4803558f7a57c08 . + . + _:N6f8ca85700744b0e9f7a8672675d1dca . + . + _:N7676f1bbd99e47659502f87b9936453e . + _:N8692a82c280845c3a6fa37c02ddae229 . + . +_:N06465237afe4406eb4803558f7a57c08 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N30d5cdb21c144005b1d74c81aa0e129e . +_:Nb81407b76fc94f228f1f5ad011d931a5 . +_:N4091b2fb3d5c417fad7305927740d1d5 _:N683c5b7b252949bda929dd4befe8bb50 . + "Enumeration of the different kinds of SPDX file."@en . + . +_:N73833299f42a4f78b3a3379f9d2302d7 . +_:N034bf868068348fb92f2f33976cad5ae . + . + "Provides information about the completeness of relationships."@en . + . +_:N6946aaeee89545da9d91b8527c54139a . +_:N4382805b6a5947d38ffcfd8b182bddbf "1"^^ . + "The Element doesn't fit into any of the other categories."@en . +_:N3c34004e669a4f809790739b55299420 _:N5a0ed5449f124c1e9ea7b05f0826cabd . +_:Nbd14f0a1267744e89f6930e710689414 . +_:Nc37985fef6884679b49d387a2ef08d3f . +_:Nb850dda843534d3ab3ffbadf70766fef "1"^^ . +_:Nd0ec388aab40469ab0a4297c30e0c906 . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N737b3d5b3c8f4cb7b5fb665b52f1dd96 . +_:N8186b6d9dc534ac1b7a906d040a88d6a . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + _:Nfbb5f5e996be44989d31d47d46540443 . diff --git a/rdf/spdx-model.pretty-xml b/rdf/spdx-model.pretty-xml index 94236ea22a..25c62f632b 100644 --- a/rdf/spdx-model.pretty-xml +++ b/rdf/spdx-model.pretty-xml @@ -1,19 +1,54 @@ + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + System Package Data Exchange (SPDX) Ontology @@ -25,20 +60,197 @@ System Package Data Exchange (SPDX) Ontology Copyright (C) 2024 SPDX Project + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + 3.0.1 + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + Specifies a data package and its associated information. - + - + @@ -52,7 +264,7 @@ - + @@ -60,14 +272,14 @@ - + - + @@ -82,7 +294,7 @@ - + @@ -90,7 +302,7 @@ - + @@ -98,7 +310,7 @@ - + @@ -122,7 +334,7 @@ - + @@ -130,7 +342,7 @@ - + @@ -143,7 +355,7 @@ - + @@ -151,84 +363,161 @@ - + - + - - - A collection of SPDX Elements describing a single package. - - - - - - - - - - - - - - - - - - - + + + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + 3.0.1 + + + An Individual Value for License when no assertion can be made about its actual +value. + + + - Describes a certain part of a file. - + Provides a CVSS version 4 assessment for a vulnerability. + - - - - + + + + + 1 1 - - - - + + + + + + + + + + + + 1 1 - - - - + + + + 1 1 - - - Portion of an AnyLicenseInfo representing a set of licensing information where -only one of the elements applies. - + + + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + 3.0.1 + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + Class that describes a build instance of software/artifacts. + - - - - - 2 + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + @@ -239,71 +528,228 @@ affected by the vulnerability. - + + 1 1 - + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + 1 - + - An assertion made in relation to one or more elements. - + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + - - - + + + + + 2 + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + - - + + + + + - 1 1 - - - ^[^\/]+\/[^\/]+$ + + 1 - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A license that is listed on the SPDX License List. + + + + + 1 - - - + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + 1 1 - - An individual human being. - + + + Describes a certain part of a file. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + @@ -311,7 +757,7 @@ affected by the vulnerability. - + @@ -324,14 +770,14 @@ affected by the vulnerability. - + - + @@ -339,14 +785,14 @@ affected by the vulnerability. - + - + @@ -354,7 +800,7 @@ affected by the vulnerability. - + @@ -362,7 +808,7 @@ affected by the vulnerability. - + @@ -370,35 +816,35 @@ affected by the vulnerability. - + - + - + - + - + @@ -412,21 +858,21 @@ affected by the vulnerability. - + - + - + @@ -439,229 +885,121 @@ affected by the vulnerability. - + - Provides a CVSS version 4 assessment for a vulnerability. - - + A type of extension consisting of a list of name value pairs. + + - - - - + + + + 1 - 1 + + + + An assertion made in relation to one or more elements. + + - - - + + + - - - - - + + 1 1 - - + + + ^[^\/]+\/[^\/]+$ - 1 1 - - - - Provides an EPSS assessment for a vulnerability. - - - - - + + + - 1 1 - - - - + + + + 1 1 - - - A license that is listed on the SPDX License List. + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A license that is not listed on the SPDX License List. - - - - - - 1 - - - - - - - - 1 - - - + - Class that describes a build instance of software/artifacts. - + Provides an EPSS assessment for a vulnerability. + - - - + + + 1 1 - - - - - 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 - - - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - + + + + 1 1 - - - - - - - - + - Links a vulnerability and one or more elements designating the latter as products -not affected by the vulnerability. - + Provide context for a relationship that occurs in the lifecycle. + - - - + + + - - - - - + + + + + + 1 - - - - - - 1 - - - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 - - - - - - An Individual Value for License where the SPDX data creator determines that no -license is present. - - - - - - Portion of an AnyLicenseInfo representing this version, or any later version, -of the indicated License. - - - - - - - - 1 - 1 - - @@ -669,7 +1007,7 @@ of the indicated License. - + @@ -682,7 +1020,7 @@ of the indicated License. - + @@ -691,7 +1029,7 @@ of the indicated License. - + @@ -700,178 +1038,296 @@ of the indicated License. - + - An SPDX Element containing an SPDX license expression string. - + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + - - - - + + + + 1 1 + + + An individual human being. + + + + + + A license exception that is listed on the SPDX Exceptions list. + + - - - ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + 1 - - - - + + + + + 1 - + + A software agent. + + + + + + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + 3.0.1 + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + - A collection of SPDX Elements that could potentially be serialized. - + Provides an SSVC assessment for a vulnerability. + - - - - - - - - - - - - - - - - - - - 1 + + + + + + + + + + + 1 + 1 - - - Provides a CVSS version 3 assessment for a vulnerability. - + + + support + A reference to the software support channel or other support information for a package. + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + Describes if any sensitive personal information is present in the dataset. + + + + Agent represents anything with the potential to act on a system. + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + A canonical, unique, immutable identifier + + - - - - - 1 - 1 - - - - - - + + + - - - - - + + 1 1 - - - + + + 1 1 - - Designates elements as products where the impact of a vulnerability is being -investigated. - + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + Describes a mechanism to update the dataset. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + other + Used when the type does not match any of the other options. + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + A collection of Elements that have a shared context. + + + + + + + 1 + + - - - An Individual Value for License when no assertion can be made about its actual -value. - - + + + funding + A reference to funding information related to a package. - + + + build + A relationship has specific context implications during an element's build phase, during development. + + - A type of extension consisting of a list of name value pairs. - - + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + - - - - + + + + 1 + 1 - - - A license that is not listed on the SPDX License List. - - - - - - An SPDX version 2.X compatible verification method for software packages. - - - - - + + + - - - - - - - - - - - - - - - - - - - - - - + + + 1 1 + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + configuration + The Element is configuration data. + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + riskAssessment + A reference to a risk assessment for a package. + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + Defines the beginning of a range. + + + + + A mapping between prefixes and namespace partial URIs. + - - + + 1 @@ -879,1052 +1335,1008 @@ value. - - - + + + + 1 + 1 - - - Provides a CVSS version 2.0 assessment for a vulnerability. - - - - - - - - 1 - 1 - - + + + clear + Dataset may be distributed freely, without restriction. + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + A distinct article or unit related to Software. + - - - - - 1 - 1 + + + + + + + + https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - - Provide context for a relationship that occurs in the lifecycle. - - - - - + + + - - - - - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 - - - - A license or addition that is not listed on the SPDX License List. - - - - - - - 1 - 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + - - - - A license exception that is listed on the SPDX Exceptions list. - - - - + + 1 - - + + - 1 - - - - - A group of people who work together in an organized way for a shared purpose. - - - - - - Specifies a vulnerability and its associated information. - - - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 - - - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 - - - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 - - - - Portion of an AnyLicenseInfo representing a set of licensing information -where all elements apply. - - - - - - - 2 + + + + - - - - Provides an SSVC assessment for a vulnerability. - - - - - - - - - - - - - 1 - 1 - - - - - An Individual Value for Element representing a set of Elements with -cardinality (number/count) of zero. - - + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). - - - Portion of an AnyLicenseInfo representing a License which has additional -text applied to it. + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + Abstract class representing a License or an OrLaterOperator. - - - - - - - 1 - 1 - - - - - - - 1 - 1 + + + + + + + + https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - A software agent. - - - - An Individual Value for Element representing a set of Elements of unknown -identify or cardinality (number). - - + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). - - Links a vulnerability and elements representing products (in the VEX sense) where -a fix has been applied and are no longer affected. - - - - - A license addition that is not listed on the SPDX Exceptions List. - - - - + - funding - A reference to funding information related to a package. - - - - timestamp - data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + runtimeAnalysisReport + A reference to a runtime analysis report for a package. - - - track - The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + design + A relationship has specific context implications during an element's design. - - - descendantOf - The `from` Element is a descendant of each `to` Element. + + Provides relevant information about the AI software, not including the model +description. + + + + + noAssertion + Makes no assertion about the field. - - Captures a standard that is being complied with. + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + Identifies the full text of a License or Addition. - + - syntactic - data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. - - - doesNotAffect - The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. - - - vulnerableCodeNotInExecutePath - The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + megajoule + Megajoule. - - Specifies the exploit catalog type. - - - - - build - SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + bom + The Element is a bill of materials. - + - hasHost - The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. - - - eolNotice - A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) - - - cpe23 - [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) - + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + - generates - The `from` Element generates each `to` Element. + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). - - - productMetadata - A reference to additional product metadata such as reference within organization's product catalog. + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. - - Specifies an Extension characterization of some aspect of an Element. - - - - - trackStar - ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). - + + Specifies the SSVC decision type. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + Specifies the type of a content identifier. + + - A mapping between prefixes and namespace partial URIs. - + A collection of Elements, not necessarily with unifying context. + - - - - - 1 - 1 + + + + + + + + https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - - - 1 - 1 + + + + - - - Specifies a time when a vulnerability assessment was modified - - - - Provides a place for the SPDX data creator to record the package URL string -(in accordance with the Package URL specification) for a software Package. - - - - - sha3_224 - SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). - - - Describes the confidentiality level of the data points contained in the dataset. - - - - - blake2b384 - BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4. - - - - A canonical, unique, immutable identifier - - - - - + + + - - - - - 1 - 1 - - - - - 1 - 1 + + + + + + + + + + + + + + + + + - - + - Base domain class from which all other SPDX-3.0 domain classes derive. - + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + - - - - - 1 + + + + + + + + https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - + + + 1 1 - - - + + + 1 - - + + 1 - - - - - 1 + + + + 1 - - - - + + + + - - - - - - - - - - - - - - - - - - + + + + + 1 + - + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + - ai - the element follows the AI profile specification + lite + the element follows the Lite profile specification - + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + - Refers to any unit of content that can be associated with a distribution of -software. - - + Provides information about the creation of the Element. + - - - + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + 1 1 - - - + + + 1 - - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + 1 1 - - - - - 1 + + + + + 1 - - - - - 1 + + + + - - - configures - The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. - - - - republishedBy - Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + yes + Indicates presence of the field. - - - categorical - data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + core + the element follows the Core profile specification - - - adler32 - Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3. + + + expandedLicensing + the element follows the ExpandedLicensing profile specification - - - blake2b256 - BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4. + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Describes potentially noisy elements of the dataset. + + + + + serious + The highest level of risk posed by an AI system. - - - blake3 - [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. - - - securityAdversaryModel - A reference to the security adversary model for a package. + + + other + Any other units of energy measurement. - - Defines the original host file that the snippet information applies to. - + + Describes a sensor used for collecting the data. + - - - modifiedBy - The `from` Element is modified by each `to` Element. + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. - - Describes methods that can be used to explain the results from the AI model. - - fixedIn A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. - - Defines the byte range in the original host file that the snippet information -applies to. - - - - - limitedSupport - the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. - - - - graph - data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. - - - - gitoid - [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). - - - - cpe22 - [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. - + - extension - the element follows the Extension profile specification - - - Timestamp of impact statement. - - - - - requirement - the Element provides a requirement needed as input for another Element + ai + the element follows the AI profile specification - - A substitute for a URI. + + The result of applying a hash algorithm to an Element. - - - vcs - A reference to a version control system related to a software artifact. + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). - + - copiedTo - The `from` Element has been copied to each `to` Element. + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. - + - install - the Element is used to install software on disk + data + The Element is data. - + + + issueTracker + A reference to the issue tracker for a package. + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + - A tuple of two positive integers that define a range. - + Abstract class for the portion of an AnyLicenseInfo representing a license. + - - - - - 1 - 1 + + + + + + + + https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - + + + 1 1 - - - - secureSoftwareAttestation - A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). - - - - high - The second-highest level of risk posed by an AI system. - - - - A map of Element identifiers that are used within a Document but defined -external to that Document. - - - - + + + - 1 1 - - - - + + + + + 1 - - + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + 1 - - - - + + + + 1 + - + + Describes the anonymization methods used. + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + - hasAssociatedVulnerability - Used to associate a `from` Artifact with each `to` Vulnerability. + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). - + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + A name used in a CdxPropertyEntry name-value pair. + + + - buildMeta - A reference build metadata related to a published package. + releaseHistory + A reference to a published list of releases for a package. - - Identifies the tooling that was used during the creation of the Element. - + + Provides information about the creation of the Element. + - + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + - certificationReport - A reference to a certification report for a package from an accredited/independent body. + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. - - Property describing the start time of a build. - + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + library + The Element is a software library. + + + Contains a URL where the License or LicenseAddition can be found in use. + audio data is audio based, such as a collection of music from the 80s. - - - design - A relationship has specific context implications during an element's design. + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. - - - availableFrom - The `from` Element is available from the additional supplier described by each `to` Element. + + + extension + the element follows the Extension profile specification - + - socialMedia - A reference to a social media channel for a package. + staticAnalysisReport + A reference to a static analysis report for a package. - - - noAssertion - Makes no assertion about the field. + + + directory + The file represents a directory and all content stored in that directory. - - Describes what the given dataset should be used for. + + Refers to one or more Elements that are part of an ElementCollection. + + + + Provides information about the primary purpose of the software artifact. + + + + + buildSystem + A reference build system used to create or publish the package. + + + Specifies the version of a VEX statement. - - - clickthrough - the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. - - - - md6 - [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) - - - - amber - Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + framework + The Element is a software framework. - - Records a hyperparameter used to build the AI model contained in the AI -package. - + + Specifies the VEX justification type. + + + Identifies from where or whom the Element originally came. + - - - analyzed - SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + chat + A reference to the instant messaging system used by the maintainer for a package. - + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + releaseNotes + A reference to the release notes for a package. + + - A mathematically calculated representation of a grouping of data. - - + Provides an independently reproducible mechanism that permits verification of a specific Element. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1 - 1 + + + + + + + + https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - + + - 1 1 + - - + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + Specifies the CVSS vector string for a vulnerability. + + + + Timestamp of impact statement. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + Specifies the time from which an element is applicable / valid. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + - A distinct article or unit related to Software. - + Refers to any unit of content that can be associated with a distribution of +software. + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + + 1 - - + + 1 - - - + + + + 1 - - - - + + + + + 1 - - Provides additional purpose information of the software artifact. - - - - Specifies the type of the external reference. - + + Specifies the level of support associated with an artifact. + - - - core - the element follows the Core profile specification + + + contains + The `from` Element contains each `to` Element. - + - qualityAssessmentReport - A reference to a quality assessment for a package. + metrics + A reference to metrics related to package such as OpenSSF scorecards. - - - md5 - MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321). + + Specifies the type of the external identifier. + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + buildMeta + A reference build metadata related to a published package. - + - Describes a relationship between one or more elements. - - + Abstract ancestor class for all vulnerability assessments + - - - + + + + + + + + https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + + + + + - 1 1 - - - - - 1 + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 - - - + + + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1 - 1 - - - - - - - - - - - - 1 - - + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ @@ -1932,406 +2344,380 @@ package. - - + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ 1 + - - A buildType is a hint that is used to indicate the toolchain, platform, or -infrastructure that the build was invoked on. - - - - - hasProvidedDependency - The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. - - - - endOfSupport - there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. - - - The percentile of the current probability score. - - - - - vulnerabilityExploitabilityAssessment - A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). - - - - scrapingScript - the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. - - Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. - - - - - deployed - in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. - - Specifies until when the artifact can be used before its usage needs to be -reassessed. - - - - A license expression participating in a license set. - - - - - green - Dataset can be shared within a community of peers and partners. + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). - - - low - Low/no risk is posed by an AI system. + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. - - - mavenCentral - A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + + + + + + + 1 + + + + + + + + 1 + + + + + + Provides information about the primary purpose of an Element. + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. - - - exportControlAssessment - A reference to a export control assessment for a package. + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). - - - kev - CISA's Known Exploited Vulnerability (KEV) Catalog + + Specifies the unit of energy consumption. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. - - Gives information about the circumstances or unifying properties -that Elements of the bundle have been assembled under. - - - - Property describing a parameter used in an instance of a build. + + An Element an annotator has made an assertion about. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. - - - container - the Element is a container image which can be used by a container runtime application - - - - hasAssessmentFor - Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. - - + - componentNotPresent - The software is not affected because the vulnerable component is not in the product. - - - - act - The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. - - - - coordinatedBy - The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). - - - - other - data is of a type not included in this list. + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. - - - directory - The file represents a directory and all content stored in that directory. + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. - - + + Provides an ExternalMap of Element identifiers. + + + - Provides an independently reproducible mechanism that permits verification of a specific Element. - + A tuple of two positive integers that define a range. + - - - + + + + 1 + 1 + + + + + + + + 1 1 - - - registration - the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. - - - A License participating in a 'with addition' model. - - - - - data - Element is data - - - - swid - Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3. - - - - invokedBy - The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). - - - Provides a place for the SPDX data creator to record acknowledgement text for -a software Package, File or Snippet. - - - - The relative file name of a file to be excluded from the -`PackageVerificationCode`. - - - - - trainedOn - The `from` Element has been trained on the `to` Element(s). - - - Conveys information about how VEX status was determined. - - - - - test - The Element is a test used to verify functionality on an software element - - - - swhid - SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. - - - - hasSpecification - Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. - - - Describes all the preprocessing steps applied to the training data before the -model training. - - - - - hasOptionalComponent - Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). - - - - nuget - A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. - - - - releaseNotes - A reference to the release notes for a package. - - - - hasStaticLink - The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. - - - - swhid - SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. - - - Identifies all the text and metadata associated with a license in the license -XML format. - - - - - noAssertion - data type is not known. - - - Identifies when the Element was originally created. - - - - Specifies the level of support associated with an artifact. - - - - - hasDependencyManifest - The `from` Element has manifest files that contain dependency information in each `to` Element. - - - - testedOn - The `from` Element has been tested on the `to` Element(s). - - + - A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. - + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + - - - + + + - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + - 1 1 - - + + - 1 - 1 - - + + + ^[^\/]+\/[^\/]+$ 1 - - - - - - - - - + + 1 - - - binaryArtifact - A reference to binary artifacts related to a package. - - - - chat - A reference to the instant messaging system used by the maintainer for a package. + + + directDownload + the dataset is publicly available and can be downloaded directly. - - - security - the element follows the Security profile specification + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). - - - evidence - the Element is the evidence that a specification or requirement has been fulfilled + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). - - Specifies the time from which an element is no longer applicable / valid. - + + References the Element on the left-hand side of a relationship. + + + + Specifies the exploit catalog type. + + + Identifies the full text of a LicenseAddition. + - - - model - the Element is a machine learning or artificial intelligence model - - + - packageUrl - Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + securityOther + Used when there is a security related identifier of unspecified type. - + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + - archive - the Element is an archived collection of one or more files (.tar, .zip, etc) + install + The Element is used to install software on disk. - - - inlineMitigationsAlreadyExist - Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + operatingSystem + The Element is an operating system. - - Specifies the VEX justification type. - - - - attend - The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + securityFix + A reference to the patch or source code that fixes a vulnerability. - - + - Abstract ancestor class for all vulnerability assessments - + Describes a relationship between one or more elements. + - - + + + 1 1 - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 1 - - - + + + + + + + + 1 - - + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ @@ -2339,8 +2725,8 @@ XML format. - - + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ @@ -2348,668 +2734,456 @@ XML format. - - - critical - When a CVSS score is between 9.0 - 10.0 + + + complete + The relationship is known to be exhaustive. - - - privacyAssessment - A reference to a privacy assessment for a package. + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Defines the original host file that the snippet information applies to. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + Provides the location of an external reference. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + Identifies who or what created the Element. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. - + - buildSystem - A reference build system used to create or publish the package. - - - - bom - Element is a bill of materials + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. - + - hasMetadata - Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). - + - delegatedTo - The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. - - Provides information about the type of an SBOM. - - - - Specifies the type of a content identifier. - - + - sha3_384 - SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). - - - Identifies the full text of a LicenseAddition. - - - - Records any relevant background information or additional comments -about the origin of the package. - - - - - hasEvidence - Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). - - - Provides a detailed description of the Element. - - - - - cve - Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. - - - test - A relationship has specific context implications during an element's testing phase, during development. + + + exportControlAssessment + A reference to a export control assessment for a package. - + - cwe - [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. - - Specifies whether the License is listed as approved by the -Open Source Initiative (OSI). - - - - Contains a URL where the License or LicenseAddition can be found in use. - + + Describes relevant information about different steps of the training process. + - - Provides a reference number that can be used to understand how to parse and -interpret an Element. + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. - - Records the results of general safety risk assessment of the AI system. - - - - This property is used to denote the root Element(s) of a tree of elements contained in a BOM. - + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + + + + https://spdx.org/rdf/3.0.1/terms/Extension/Extension is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + - - Impact justification label to be used when linking a vulnerability to an element -representing a VEX product with a VexNotAffectedVulnAssessmentRelationship -relationship. - - - - - incomplete - The relationship is known not to be exhaustive. - - + - A reference to a resource outside the scope of SPDX-3.0 content related to an Element. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1 - - + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + - - - - + + + + - - - ^[^\/]+\/[^\/]+$ - - - 1 + + + + - - - - - 1 + + + + - - Indicates the amount of energy consumption incurred by an AI model. - - - - Information about the relationship between two Elements. - - - - Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. - - - - Provides information about the content type of an Element or a Property. - - - - - securityThreatModel - A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. - - - Specified the time and date when a vulnerability was withdrawn. - - - - - md2 - MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/). - - - Describes a sensor used for collecting the data. - - - - Specifies whether an additional text identifier has been marked as deprecated. - - - - Records the type of the model used in the AI software. - - - - - source - SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. - - - Describes one a profile which the creator of this ElementCollection intends to -conform to. - - - - - foundBy - Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). - - - - Abstract class representing a License or an OrLaterOperator. - - - - + - securityAdvisory - A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. - - - Indicates the type of support that is associated with an artifact. - - - - medium - The third-highest level of risk posed by an AI system. - - - - deployed - SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. - - - - hasInput - The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + securityAdversaryModel + A reference to the security adversary model for a package. - - A probability score between 0 and 1 of a vulnerability being exploited. - - - - Identifies who or what created the Element. - - - - Specifies an Element contained in a piece of software where a vulnerability was -found. - - - - Provide the enumeration of possible decisions in the -[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). - - - + - other - Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless). - - - The result of applying a hash algorithm to an Element. - - - - Specifies the SPDX License List version in which this license or exception -identifier was deprecated. - - - - - platform - Element represents a runtime environment + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. - - A container for a grouping of SPDX-3.0 content characterizing details -(provenence, composition, licensing, etc.) about a product. - - - - - - vulnerabilityDisclosureReport - A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. - - + - Abstract class for the portion of an AnyLicenseInfo representing a license. - - - - - - - - 1 - 1 - - + Base domain class from which all other SPDX-3.0 domain classes derive. - - - - - 1 + + + + + + + + https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - + + + 1 - - - + + + 1 - - + + 1 - - + + 1 - - - - + + + + + 1 + 1 - - - - - 1 + + + + - - - - - 1 + + + + + + + + + + + + + + + + + + + - - - runtime - SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. - - - A canonical, unique, immutable identifier of the artifact content, that may be -used for verifying its identity and/or integrity. - + + An entity that is authorized to issue identification credentials. + - + + + medium + The third-highest level of risk posed by an AI system. + + + A concrete subclass of Element used by Individuals in the +Core profile. + + + + - structured - data is stored in tabular format or retrieved from a relational database. + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. - - Provides advise on how to mitigate or remediate a vulnerability when a VEX product -is affected by it. - - - - - hasRequirement - The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). - - - hasDeclaredLicense - The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. - - Identifies the full text of a LicenseAddition, in SPDX templating format. - + + + software + the element follows the Software profile specification + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + - - - exploitCreatedBy - The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + review + Used when someone reviews the Element. - - - hasOptionalDependency - The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + green + Dataset can be shared within a community of peers and partners. - - A buildId is a locally unique identifier used by a builder to identify a unique -instance of a build produced by it. + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a detailed description of the Element. - - - metrics - A reference to metrics related to package such as OpenSSF scorecards. + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. - - Points to a resource outside the scope of the SPDX-3.0 content -that provides additional characteristics of an Element. - - - - - complete - The relationship is known to be exhaustive. + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. - - - noAssertion - No assertion can be made about the completeness of the relationship. + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. - + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Property describing a parameter used in an instance of a build. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + A License participating in a 'with addition' model. + + + + Specifies the time an artifact was released. + + + - firmware - the Element provides low level control over a device's hardware + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). - - Refers to one or more Elements that are part of an ElementCollection. - - - - Captures a limitation of the AI software. - + + Specifies a time when a vulnerability assessment was modified + - - + + Provides the location for more information regarding an external identifier. + + + + Specifies the value of the content identifier. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + - A collection of Elements, not necessarily with unifying context. - + Refers to any object that stores content on a computer. + - - - - - - - - - - - + + + ^[^\/]+\/[^\/]+$ + + + 1 - - - + + + - - - - - - - - - - + + + 1 - - Identifies the name of an Element as designated by the creator. - - - - Provides a License author's preferred text to indicate that a file is covered -by the License. - - - - Specifies the unit of energy consumption. - - - - documentation - Element is documentation - - - - hasDistributionArtifact - The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). - - - - fixedBy - Designates a `from` Vulnerability has been fixed by the `to` Agent(s). - - - - contains - The `from` Element contains each `to` Element. - - - - staticAnalysisReport - A reference to a static analysis report for a package. - - - Defines the line range in the original host file that the snippet information -applies to. - - - - Specifies the unit in which energy is measured. - - - - - hasDocumentation - The `from` Element is documented by each `to` Element. - - - - other - the Element doesn't fit into any of the other categories - - - + - Asbtract ancestor class for all VEX relationships - - + A key with an associated value. + - - + + + 1 1 - - + + 1 - - - patchedBy - Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). - - - - design - SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. - - - Provides the location for more information regarding an external identifier. - - - - - blake2b512 - BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4. - - - - ancestorOf - The `from` Element is an ancestor of each `to` Element. + + + binaryArtifact + A reference to binary artifacts related to a package. - - Maps a LicenseRef or AdditionRef string for a Custom License or a Custom -License Addition to its URI ID. - + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + - + - hasAddedFile - Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). - - - support - the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + manifest + The Element is a software manifest. - - - dynamicAnalysisReport - A reference to a dynamic analysis report for a package. + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. - - Property that describes the URI of the build configuration source file. + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. - + + Specifies the algorithm used for calculating the hash value. + + + - A key with an associated value. - + A property name with an associated value. + - - + + 1 @@ -3017,1332 +3191,1323 @@ License Addition to its URI ID. - - + + 1 - + - dependsOn - The `from` Element depends on each `to` Element, during a LifecycleScopeType period. - - - - diskImage - the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. - - - other - Any other units of energy measurement. + + + incomplete + The relationship is known not to be exhaustive. - - Records the measurement of prediction quality of the AI model. - - - - The field describes the availability of a dataset. - + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + - - Specifies the version of a VEX statement. - - - - - usesTool - The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. - - - - hasOutput - The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. - - - - vulnerableCodeNotPresent - The product is not affected because the code underlying the vulnerability is not present in the product. - - - + - Abstract class for additional text intended to be added to a License, but -which is not itself a standalone License. - - + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + - - - - + + + + + + + + + + + + + + + + + 1 1 - - - - - 1 - - - - - + + + 1 1 - - + + 1 - - + + - - + + 1 - - - issueTracker - A reference to the issue tracker for a package. - - - An Element an annotator has made an assertion about. - - - - - hasDeletedFile - Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). - - - - other - Used when the type does not match any of the other options. - - - Identify the version of a package. - + + Captures the size of the dataset. + - - A name used in a CdxExtension name-value pair. + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. - - - purchaseOrder - A reference to a purchase order for a package. + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. - - - - A distinct article or unit within the digital domain. - - - - - - - - - + + Specifies the type of an annotation. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + simpleLicensing + the element follows the SimpleLicensing profile specification + + + + none + When a CVSS score is 0.0 + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + A mathematically calculated representation of a grouping of data. + + - - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 1 - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - + + + + 1 1 + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + Capture the scope of information about a specific relationship between elements. + + + + + source + The Element is a single or a collection of source files. + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + + + + An Organization representing the SPDX Project. + + + + 3.0.1 + + + + socialMedia + A reference to a social media channel for a package. + + + The name of a relevant standard that may apply to an artifact. + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - + + + + 1 1 - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 + + + + - - - + + + + 1 - - - + + + - - - - - - - - - + 1 + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + Captures a standard that is being complied with. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + Provides a map of a property names to a values. - - Specifies whether the License is listed as free by the -Free Software Foundation (FSF). + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + numeric + data consists only of numeric entries. + + + + altDownloadLocation + A reference to an alternative download location. + + + Specifies whether an additional text identifier has been marked as deprecated. - - Provides the location of an external reference. - - - - - kilowattHour - Kilowatt-hour. + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. - + - hasConcludedLicense - The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. - - Commentary on an assertion that an annotator has made. - - - - - low - When a CVSS score is between 0.1 - 3.9 + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). - - Captures the domain in which the AI package can be used. - - - - Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. - + + Identifies when the Element was originally created. + - - Specifies the SPDX License List version in which this ListedLicense or -ListedLicenseException identifier was first added. + + Provides a reference number that can be used to understand how to parse and +interpret an Element. - - - describes - The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + image + data is a collection of images such as pictures of animals. - - - none - When a CVSS score is 0.0 + + + development + A relationship has specific context implications during development phase of an element. - - Describes if a given file is a directory or non-directory kind of file. - - - - - runtimeAnalysisReport - A reference to a runtime analysis report for a package. - - - - A class for describing the energy consumption incurred by an AI model in -different stages of its lifecycle. - - - - - - - - - - - - - - - - - - - - - - - - - Represents the energy quantity. - + + Defines the end of a range. + - - A short description of an Element. - + + + documentation + The Element is documentation. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + - - - text - data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + copiedTo + The `from` Element has been copied to each `to` Element. - + + + high + When a CVSS score is between 7.0 - 8.9 + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + - hasTestCase - Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). - - - securityOther - A reference to related security information of unspecified type. + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. - + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + - expandsTo - The `from` archive expands out as an artifact described by each `to` Element. + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). - + - sha3_256 - SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). - - Identifies the text of one or more copyright notices for a software Package, -File or Snippet, if any. + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + Identifies the name of an Element as designated by the creator. - - - video - data is video based, such as a collection of movie clips featuring Tom Hanks. + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. - - Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + Describes methods that can be used to explain the results from the AI model. - - - yes - Indicates presence of the field. + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. - - - other - any hashing algorithm that does not exist in this list of entries + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. - - Records if sensitive personal information is used during model training or -could be used during the inference. - - - - - sha224 - SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874). + + + security + the element follows the Security profile specification - - - Provides information about the creation of the Element. - - - - - ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ - - - 1 - 1 - - - - - - - - 1 - - - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 - 1 - - - - - - - - 1 - - - - - - - - - - - - - md4 - MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186). + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). - - Describes a mechanism to update the dataset. + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + Describes the type of annotation. + + + + Records the biases that the dataset is known to encompass. - - Specifies whether a license or additional text identifier has been marked as -deprecated. - - - + + Indicates the type of support that is associated with an artifact. + + - publishedBy - Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. - - Provides relevant information about the AI software, not including the model -description. + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + A substitute for a URI. - - - sha512 - SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234). + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). - - Specifies the exploit catalog type. - - - Specifies the amount of energy consumed when finetuning the AI model that is -being used in the AI system. - + + Property describing the session in which a build is invoked. + - - - sha1 - SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174). - - - - clear - Dataset may be distributed freely, without restriction. + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Enumeration of dataset types. + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. - - Identifies the download Uniform Resource Identifier for the package at the time -that the document was created. + + Property that describes the URI of the build configuration source file. - - - runtime - A relationship has specific context implications during the execution phase of an element. - - - - noSupport - there is no support for the artifact from the supplier, consumer assumes any support obligations. + + Information about the relationship between two Elements. + + + Availability of dataset. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. - - Provides information about the creation of the Element. - + + References an Element on the right-hand side of a relationship. + - - Provides the license under which the SPDX documentation of the Element can be -used. - + + Provides additional purpose information of the software artifact. + - - - vulnerableCodeCannotBeControlledByAdversary - The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. - - + - specification - the Element is a plan, guideline or strategy how to create, perform or analyse an application + module + The Element is a module of a piece of software. - - - altWebPage - A reference to an alternative web page. + + + low + Low/no risk is posed by an AI system. - + + + other + any hashing algorithm that does not exist in this list of entries + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + Uniquely identifies an external element. + + + - bower - A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. - + - altDownloadLocation - A reference to an alternative download location. + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. - - - configuration - Element is configuration data + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. - - - framework - the Element is a software framework + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. - + - packagedBy - Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + amendedBy + The `from` Element is amended by each `to` Element. - - Specifies the CVSS vector string for a vulnerability. - - - - The name of a relevant standard that may apply to an artifact. - - - - Specifies the value of the content identifier. - - - - - Abstract class representing a license combination consisting of one or more licenses. - - - - - Provides an IntegrityMethod with which the integrity of an Element can be -asserted. - - - - Records the biases that the dataset is known to encompass. - + + Property describing the start time of a build. + - - - serious - The highest level of risk posed by an AI system. + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). - - Agent represents anything with the potential to act on a system. - + + Information about the relationship between two Elements. + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + - - Explains why a VEX product is not affected by a vulnerability. It is an -alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable -justification label. - - - - + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + gitoid [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). - - - sha3_512 - SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + + noAssertion + data type is not known. - + - affects - The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + hasDocumentation + The `from` Element is documented by each `to` Element. - - Categories of confidentiality level. - - - Identifies an external Element used within a Document but defined external to -that Document. + + Defines the line range in the original host file that the snippet information +applies to. + + + + A value used in a generic key-value pair. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + Identifies the tooling that was used during the creation of the Element. + + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. - + - securityPolicy - A reference to instructions for reporting newly discovered security vulnerabilities for a package. - - - - executable - Element is an Artifact that can be run on a computer - - - - sha256 - SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234). + altWebPage + A reference to an alternative web page. - - - application - the Element is a software application + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. - - - noAssertion - no assertion about the type of support is made. This is considered the default if no other support type is used. + + + license + A reference to additional license information related to an artifact. - + - serializedInArtifact - The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + descendantOf + The `from` Element is a descendant of each `to` Element. - - - hasDynamicLink - The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + medium + When a CVSS score is between 4.0 - 6.9 - - Property that describes the digest of the build configuration file used to -invoke a build. - + + Describes the type of the given dataset. + - - - hasDataFile - The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. - - - - crystalsKyber - [Kyber](https://pq-crystals.org/kyber/) + + Conveys information about how VEX status was determined. + + + + + noAssertion + No assertion can be made about the completeness of the relationship. - - Provides information about the primary purpose of an Element. - - - - device - the Element refers to a chipset, processor, or electronic board + + + other + data is of a type not included in this list. - - Uniquely identifies an external element. + + Describes how the dataset was collected. - - A concrete subclass of AnyLicenseInfo used by Individuals in the -ExpandedLicensing profile. - - - - - Describes relevant information about different steps of the training process. - + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + - - Specifies the CVSS base, temporal, threat, or environmental severity type. - - - Capture the scope of information about a specific relationship between elements. - - - - Specifies the type of an external reference. - - - Specifies the time from which an element is applicable / valid. + + Property that describes the time at which a build stops. - - - hasVariant - Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). - - - - development - the artifact is in active development and is not considered ready for formal support from the supplier. - - - - timeseries - data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. - - + + Specifies the unit in which energy is measured. + + + - hasPrerequisite - The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. - - - - directDownload - the dataset is publicly available and can be downloaded directly. + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). - - Identifies from where or whom the Element originally came. - + + A LicenseAddition participating in a 'with addition' model. + - - - securityPenTestReport - A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. - - - - operatingSystem - the Element is an operating system - - - Captures the size of the dataset. - + + Specified the time and date when a vulnerability was withdrawn. + - - - falcon - [FALCON](https://falcon-sign.info/falcon.pdf) - - - - sha384 - SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234). + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. - - - riskAssessment - A reference to a risk assessment for a package. + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + + + + + + kilowattHour + Kilowatt-hour. - + + Describes what the given dataset should be used for. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Identify the version of a package. + + + - Refers to any object that stores content on a computer. - - + A distinct article or unit within the digital domain. + - - - ^[^\/]+\/[^\/]+$ - + + + + + + + + https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + 1 - - - - - - - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + 1 - - - - other - Used when the type does not match any of the other options. - - - Property describing the session in which a build is invoked. - - - - - The class that helps note down the quantity of energy consumption and the unit -used for measurement. - - - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + - 1 1 - - - + + + + + + + + + + - - - + + + + + + + - 1 - 1 + - - A place for the SPDX document creator to record a website that serves as the -package's home page. - - - - Enumeration of the different kinds of SPDX file. - - - Specifies the safety risk level. - - - Specifies the amount of energy consumed when training the AI model that is -being used in the AI system. - - - - - manifest - the Element is a software manifest - - - - A property name with an associated value. - - - - - - - 1 - 1 - - - - - - - - 1 - - - - - A License participating in an 'or later' model. - - - - Captures the threshold that was used for computation of a metric described in -the metric field. - - - - References the Element on the left-hand side of a relationship. - - - - Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. - - - - numeric - data consists only of numeric entries. - - - Indicates whether the system can perform a decision or action without human -involvement or guidance. - - - - - high - When a CVSS score is between 7.0 - 8.9 - - - Specifies the algorithm used for calculating the hash value. - - - - - library - the Element is a software library - - - An element of hardware and/or software utilized to carry out a particular function. - - - - - - dataset - the element follows the Dataset profile specification - - - Describes the type of the given dataset. - - - - Specifies the SSVC decision type. - - - Specifies the type of the content identifier. - - - - - urlScheme - [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. - - - Defines the beginning of a range. - + + Commentary on an assertion that an annotator has made. + - - - crystalsDilithium - [Dilithium](https://pq-crystals.org/dilithium/) - - - A key used in a generic key-value pair. + + Identifies the full text of a LicenseAddition, in SPDX templating format. - - A value used in a generic key-value pair. + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. - + - filesystemImage - the Element is a file system image that can be written to a disk (or virtual) partition + deviceDriver + The Element represents software that controls hardware devices. - + - support - A reference to the software support channel or other support information for a package. - - - - A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. - - - - - image - data is a collection of images such as pictures of animals. + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. - - Specifies the amount of energy consumed during inference time by an AI model -that is being used in the AI system. - + + Specifies the type of the content identifier. + - - - query - the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. - - - - releaseHistory - A reference to a published list of releases for a package. - - - - reportedBy - Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. - - - - underInvestigationFor - The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. - - - Property describes the invocation entrypoint of a build. - - - - - software - the element follows the Software profile specification - - - - hasTest - Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. - - - Enumeration of the valid profiles. - - - - source - the Element is a single or a collection of source files - - - Provide an enumerated set of lifecycle phases that can provide context to relationships. - - - - email - Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3. + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. - - Information about the relationship between two Elements. - - - Specifies the licenseId that is preferred to be used in place of a deprecated -License or LicenseAddition. + + Identifies the full text of a License, in SPDX templating format. - - - hasExample - Every `to` Element is an example for the `from` Element (`from` hasExample `to`). - - - Specifies the type of the external identifier. - + + Records the measurement of prediction quality of the AI model. + - - Describes if any sensitive personal information is present in the dataset. + + Records if sensitive personal information is used during model training or +could be used during the inference. - - - deviceDriver - Element represents software that controls hardware devices - - - - license - A reference to additional license information related to an artifact. - - - Provides an unambiguous mechanism for conveying a URI fragment portion of an -Element ID. - - - - The version of the SPDX License List used in the license expression. - - - - - file - The file represents a single file (default). - - - - lite - the element follows the Lite profile specification - - - Provides a numerical (0-10) representation of the severity of a vulnerability. - - - - - red - Data points in the dataset are highly confidential and can only be shared with named recipients. - - - Describes the anonymization methods used. - - - - Provide consumers with comments by the creator of the Element about the -Element. - - - - - patch - Element contains a set of changes to update, fix, or improve another Element - - - Enumeration of dataset types. - - - A mathematical algorithm that maps data of arbitrary size to a bit string. + + Specifies the type of an external identifier. - - Specifies the time an artifact was released. - + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + - - Provides a set of values to be used to describe the common types of SBOMs that -tools may create. - - - Provides information about the primary purpose of the software artifact. - - - - - expandedLicensing - the element follows the expanded Licensing profile specification + + + securityOther + A reference to related security information of unspecified type. - - Artifact representing a serialization instance of SPDX data containing the -definition of a particular Element. - - - - - other - Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element). + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. - + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + - amendedBy - The `from` Element is amended by each `to` Element. + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. - - - componentAnalysisReport - A reference to a Software Composition Analysis (SCA) report. + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. other Other exploit catalogs - + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + generates + The `from` Element generates each `to` Element. + + - securityFix - A reference to the patch or source code that fixes a vulnerability. + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). - - Specifies the time when a vulnerability was published. - - - - Provides a reference to a resource outside the scope of SPDX-3.0 content -that uniquely identifies an Element. - + + Records a hyperparameter used to build the AI model contained in the AI +package. + - - Describes potentially noisy elements of the dataset. + + A key used in a generic key-value pair. - - - npm - A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. - - - Property that describes the time at which a build stops. - + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + - - Provides an ExternalMap of Element identifiers. - + + Provides the license under which the SPDX documentation of the Element can be +used. + - - - review - Used when someone reviews the Element. + + Specifies the type of the external reference. + + + + + model + The Element is a machine learning or artificial intelligence model. - - - no - Indicates absence of the field. + + + device + The Element refers to a chipset, processor, or electronic board. - - Specifies the time an artifact was built. - + + Records the type of the model used in the AI software. + - - A value used in a CdxExtension name-value pair. + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + purchaseOrder + A reference to a purchase order for a package. + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + The field describes the availability of a dataset. + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. - - Identifies the full text of a License, in SPDX templating format. + + Specifies the exploit catalog type. + + + + A short description of an Element. - - - module - the Element is a module of a piece of software + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. - - - A collection of Elements that have a shared context. - - - - - - - - 1 - - - - - Specifies the type of an annotation. + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. - - - securityOther - Used when there is a security related identifier of unspecified type. + + + vcs + A reference to a version control system related to a software artifact. - - Identifies the full text of a License or Addition. + + A string in the license expression format. - - Describes the type of annotation. - - - - Records the time when a recommended action was communicated in a VEX statement -to mitigate a vulnerability. + + A group of people who work together in an organized way for a shared purpose. + + + + + Specifies the time an artifact was built. - - A string in the license expression format. + + + file + The file represents a single file (default). + + + A value used in a CdxPropertyEntry name-value pair. - - - sensor - data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + A License participating in an 'or later' model. + + + + A license expression participating in a license set. + + + + + other + Used when the type does not match any of the other options. + + + + mailingList + A reference to the mailing list used by the maintainer for a package. Provides information about the completeness of relationships. - - Identifies who or what supplied the artifact or VulnAssessmentRelationship -referenced by the Element. - - - - - documentation - A reference to the documentation for a package. + + + no + Indicates absence of the field. - - References an Element on the right-hand side of a relationship. - - - - A LicenseAddition participating in a 'with addition' model. - - - - Categories of presence or absence. + + Specifies the time when a vulnerability was published. + + + + Enumeration of the valid profiles. - - - other - A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + executable + The Element is an Artifact that can be run on a computer. + + + + container + The Element is a container image which can be used by a container runtime application. + + + The percentile of the current probability score. + + + + + dataset + the element follows the Dataset profile specification + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + application + The Element is a software application. + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Indicates the amount of energy consumption incurred by an AI model. + + Provides an indication of where to retrieve an external Element. - + + + test + The Element is a test used to verify functionality on an software element. + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + Specifies the safety risk level. + + - mailingList - A reference to the mailing list used by the maintainer for a package. + documentation + A reference to the documentation for a package. - - - medium - When a CVSS score is between 4.0 - 6.9 + + Provides information about the content type of an Element or a Property. + + + + + platform + The Element represents a runtime environment. - + + Describes if a given file is a directory or non-directory kind of file. + + + - file - the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc) + other + The Element doesn't fit into any of the other categories. - - - sourceArtifact - A reference to an artifact containing the sources for a package. + + + high + The second-highest level of risk posed by an AI system. - - Defines the end of a range. - + + Represents the energy quantity. + + + + Categories of confidentiality level. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the type of an external reference. + + + Specifies the time from which an element is no longer applicable / valid. + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Provides information about the type of an SBOM. + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + Provides the location of an exploit catalog. + build the element follows the Build profile specification - - - development - A relationship has specific context implications during development phase of an element. - - - - megajoule - Megajoule. - - - - Provides the location of an exploit catalog. - + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + - - An entity that is authorized to issue identification credentials. + + Records any relevant background information or additional comments +about the origin of the package. - - - simpleLicensing - the element follows the simple Licensing profile specification + + The version of the SPDX License List used in the license expression. + + + + Property describes the invocation entrypoint of a build. + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). - - Specifies the type of an external identifier. - - - - build - A relationship has specific context implications during an element's build phase, during development. + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. - - Availability of dataset. + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + Records the results of general safety risk assessment of the AI system. + + + + Captures the domain in which the AI package can be used. + + + + Categories of presence or absence. - - Describes how the dataset was collected. + + Captures a limitation of the AI software. + + Enumeration of the different kinds of SPDX file. + diff --git a/rdf/spdx-model.trig b/rdf/spdx-model.trig index 40998092e5..f2ca733c90 100644 --- a/rdf/spdx-model.trig +++ b/rdf/spdx-model.trig @@ -1,11 +1,10 @@ @prefix dcterms: . @prefix ns1: . -@prefix ns2: . -@prefix ns3: . +@prefix ns2: . +@prefix ns3: . @prefix ns4: . -@prefix ns5: . -@prefix ns6: . -@prefix ns7: . +@prefix ns5: . +@prefix ns6: . @prefix omg-ann: . @prefix owl: . @prefix rdf: . @@ -14,73 +13,80 @@ @prefix spdx: . @prefix xsd: . -_:Nbd837895ea0f42ceb3e37f487064b24f { - ns6:AIPackage a owl:Class, +_:N8bd24aea1c3f4a56b46cba0367b4452e { + ns2:AIPackage a owl:Class, sh:NodeShape ; rdfs:comment "Specifies an AI package and its associated information."@en ; - rdfs:subClassOf ns5:Package ; + rdfs:subClassOf ns3:Package ; sh:nodeKind sh:IRI ; - sh:property _:N1cfe20f0d2a049b7b751bd3aa0b4a09d, - _:N29943647d0a54ed3bbf4236b7f26fed8, - _:N2d8b30121bba468383f1a52208a233a0, - _:N320baf3ea5274f3393919c1999ded96d, - _:N442fd7eee89f41b2a0f43bb6b2a05372, - _:N4c5910b87a7e4fc69577e8ccd52c8ab3, - _:N5cc19e587a4f464a9572d61b4352c919, - _:N5f799594600d45d0b83461261182f275, - _:N75a4a8a0dcc14090818fdc6eade781c2, - _:N7a1979daf894407dabf96d89e984ff05, - _:N896ec867378949ebbc26581fe9cf864c, - _:Nbf51d2fce0c449ca8df0fa964ec48e89, - _:Ncdb4a970c7f542688b373a1da217c447, - _:Ne2b61099faaa4dfeb2a1dbb6cb39c943, - _:Nf0d9d94b4d9a4523a1d863217249938a . + sh:property _:N024478cff6eb4ef48dc45dabdb7b0a35, + _:N13acbf7806c648f19f147c9073a04385, + _:N329ecc1447f349cc968623ddffe6a2f7, + _:N576b7fbe3ba74572a6eb065c67761847, + _:N626b5ad29167479dabae9a9177315404, + _:N786a3eaa8fbe4cf0bb67c4e086fa8b5b, + _:N80dc66a1ccec469392596c5291fa2864, + _:N8bdb3da6da754d98843024e1dcbe3e43, + _:N9bd771ac02cc41519919a01d4deca105, + _:Nad909dcc4fad4339a9eb809fabd6a871, + _:Nc63741a7112e471ba97ce37e05f2dac1, + _:Ncae19f1586924a439b37e75eb5b57ed4, + _:Nccde3ac271484f91b83ed5fb2e1d70c9, + _:Nd385c846dfa14371a0a3697f7168b4c1, + _:Nf41c7f62f52f4c10b14344ec13dfe1e5 . a owl:Class, sh:NodeShape ; rdfs:comment "Class that describes a build instance of software/artifacts."@en ; rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property _:N15fc27df69c64453aa991097a3de803a, - _:N2c65a23cf781468598b84d1456d825fb, - _:N441c940eb087403188d7f17bd5a55a61, - _:N761b1b05ac5746c3b86d599c46526598, - _:N931242be4ac14a95b8ef51122ba2cf40, - _:Nada0379a8e6840aeab21269255f5c588, - _:Nd3eb5f22c3be4e02942314bbb3d6fc3e, - _:Nd78d72bd38c34a3c804f97f9e6b927a3, - _:Nec3642cffbce44abbfb1f66ffa74d5c1 . + sh:property _:N3ba51db196c04386ae47cb64aab6c95c, + _:N4f6d0abf94b14a189b945346f00ba9dc, + _:N7d2dbee05b72455c995a675186de5fd1, + _:N82be0a238ea44c658a60ca20e0c8c6fa, + _:N85ad449141be453592e9e80c2bc379f4, + _:Nbdc672a90df4480da8648bd31507d48e, + _:Nc8b9ea4213214eccb17ccccf3790161d, + _:Nce9a69dc19af4e1394f03174c67c5857, + _:Ne20cfbefa1424ba79abfc89287f1eef3 . ns1:Annotation a owl:Class, sh:NodeShape ; rdfs:comment "An assertion made in relation to one or more elements."@en ; rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property _:N13b921afee3a413e9a3b06c638bf7824, - _:N208b27c07ce6469e9114d5b80dfc4f8f, - _:N3f6ce06e6ca2446781e41b064c3d1d58, - _:N96ab198cab814dceb4dc205e80f644d6 . + sh:property _:N07cb32d0626a45cfbea37a7dd2a8b854, + _:N3bf9008e5422473bb689602da04ccca1, + _:N8f24e4128c124ec08b9e80f45a43dd1e, + _:N91adaf3024344ddcbcbf3f943faaad6b . ns1:LifecycleScopedRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; rdfs:subClassOf ns1:Relationship ; sh:nodeKind sh:IRI ; - sh:property _:Nf32238231fca45f1ac5221bd1ecd220c . + sh:property _:N7676f1bbd99e47659502f87b9936453e . - ns1:Organization a owl:Class ; - rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; - rdfs:subClassOf ns1:Agent ; - sh:nodeKind sh:IRI . + ns1:NoAssertionElement a owl:NamedIndividual, + ns1:IndividualElement ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; + ns1:creationInfo . + + ns1:NoneElement a owl:NamedIndividual, + ns1:IndividualElement ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; + ns1:creationInfo . ns1:PackageVerificationCode a owl:Class, sh:NodeShape ; rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; rdfs:subClassOf ns1:IntegrityMethod ; - sh:nodeKind sh:BlankNode ; - sh:property _:N6a9c7fd96f82444aac9a3bae9894656b, - _:N80091d0c87724fbf9c10267c2549575d, - _:Ne0cb74aabc9c4794b4d9319b9a1fe42b . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N5a2b8b0073a54a3db4d6092f1c5043ed, + _:N88e97455b377466daa24bff58cde8f0d, + _:Na3925605d49b4db382603ae946c37f51 . ns1:Person a owl:Class ; rdfs:comment "An individual human being."@en ; @@ -97,230 +103,260 @@ _:Nbd837895ea0f42ceb3e37f487064b24f { rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; rdfs:subClassOf ns1:ElementCollection ; sh:nodeKind sh:IRI ; - sh:property _:N97819d7a350747339be471fc904dd3e6, - _:Nb1e48771e71b47e98ac6156affc3e067, - _:Nd0d9b8cea40d40dc91877f32f673ef66 . + sh:property _:N4aa1ea2c440f4aecb7a6656a599fbf22, + _:Nc22ee04d695b4582bd604f6206900620, + _:Ndc4f18efad334d78a498ea9df84fbd02 . ns4:DatasetPackage a owl:Class, sh:NodeShape ; rdfs:comment "Specifies a data package and its associated information."@en ; - rdfs:subClassOf ns5:Package ; + rdfs:subClassOf ns3:Package ; sh:nodeKind sh:IRI ; - sh:property _:N150b1880a8e64af2af56beec5b8f629e, - _:N1f599cc99ec04100bcd965c2ec4fdbfe, - _:N28c8fedea4324ffa8c41338d5fae0fe5, - _:N61bad2d32f474f829df8b09e757aec59, - _:Na108e2b1e33249d1a7c16ae86469a51b, - _:Na4175476fbca48768ff989c226c9a147, - _:Na9d0fc4b8c454d308184549fca9959b6, - _:Nbfec05fc44f6435dbdeeb9f608a28e4c, - _:Nd73c665e4d964b40be2d12cdc7ab7fa2, - _:Ne1476e00df5f4847a5f13d26ed774a56, - _:Necfb795205bb49a69ffa1a569c48717a, - _:Nfd60dc4acf8f405b86d3ebb119d8edeb, - _:Nfdf2a70978294bcebad4f299b134dc99 . - - ns3:ConjunctiveLicenseSet a owl:Class, + sh:property _:N00d83dee7aa44a7991821a46e83e5164, + _:N034bf868068348fb92f2f33976cad5ae, + _:N2a72f2e0c3d44dd5ac4c0633f336d556, + _:N66b43817d95d4468bf805207af159230, + _:N6eb9ec15081f404a99935ff4e2aaa14b, + _:N78c7513398064da1a55c5df1b3c96444, + _:N8adbab8e05cf4258a0b7e9eedbd03e5f, + _:N95b6da49b56e4298924cd2f153f00905, + _:Na267e7b88a344e4fbd0c59a6dc760e65, + _:Na42e3794f624483e818646ed683c5ba2, + _:Nb4381a5cee3143a482af28cf9a364f3c, + _:Ndb06ff981cef4e94bfdbec22badacd4d, + _:Nf0752cee7bef48efaa39267516a6b21a . + + ns6:ConjunctiveLicenseSet a owl:Class, sh:NodeShape ; rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where all elements apply."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property _:Nf98babca843e446f8ddf5dee59296ef5 . + sh:property _:N963f7603cd844b03bd4631e0713b1635 . - ns3:CustomLicense a owl:Class ; + ns6:CustomLicense a owl:Class ; rdfs:comment "A license that is not listed on the SPDX License List."@en ; - rdfs:subClassOf ns3:License ; + rdfs:subClassOf ns6:License ; sh:nodeKind sh:IRI . - ns3:CustomLicenseAddition a owl:Class ; + ns6:CustomLicenseAddition a owl:Class ; rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; - rdfs:subClassOf ns3:LicenseAddition ; + rdfs:subClassOf ns6:LicenseAddition ; sh:nodeKind sh:IRI . - ns3:DisjunctiveLicenseSet a owl:Class, + ns6:DisjunctiveLicenseSet a owl:Class, sh:NodeShape ; rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where only one of the elements applies."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property _:N293889ce0f674698af83932fc5a7b302 . + sh:property _:Ne81afbff18a74c75ac853da24ab327a0 . - ns3:ListedLicense a owl:Class, + ns6:ListedLicense a owl:Class, sh:NodeShape ; rdfs:comment "A license that is listed on the SPDX License List."@en ; - rdfs:subClassOf ns3:License ; + rdfs:subClassOf ns6:License ; sh:nodeKind sh:IRI ; - sh:property _:N6e7150c4286149b7aa27ddf655625b5e, - _:Ne14b54567e794b13a34acf8718d2ccf6 . + sh:property _:Nadd5d6fa295c47ee82d49e5fde059110, + _:Ndaeba75fb43b4db7b777e9b00ecd7064 . - ns3:ListedLicenseException a owl:Class, + ns6:ListedLicenseException a owl:Class, sh:NodeShape ; rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; - rdfs:subClassOf ns3:LicenseAddition ; + rdfs:subClassOf ns6:LicenseAddition ; sh:nodeKind sh:IRI ; - sh:property _:N56d611894502410481612d5cb6016003, - _:Ne880e2c5878f4becba59cd843618c77a . + sh:property _:N5011f0cdb4544a70b796520ecd436a25, + _:N7c7a260c778e4d4491ba75a0fe083ebe . - ns3:NoAssertionLicense a owl:NamedIndividual, - ns3:IndividualLicensingInfo ; + ns6:NoAssertionLicense a owl:NamedIndividual, + ns6:IndividualLicensingInfo ; rdfs:comment """An Individual Value for License when no assertion can be made about its actual value."""@en ; - rdfs:range ns3:IndividualLicensingInfo ; - owl:sameAs . + owl:sameAs ; + ns1:creationInfo . - ns3:NoneLicense a owl:NamedIndividual, - ns3:IndividualLicensingInfo ; + ns6:NoneLicense a owl:NamedIndividual, + ns6:IndividualLicensingInfo ; rdfs:comment """An Individual Value for License where the SPDX data creator determines that no license is present."""@en ; - rdfs:range ns3:IndividualLicensingInfo ; - owl:sameAs . + owl:sameAs ; + ns1:creationInfo . - ns3:OrLaterOperator a owl:Class, + ns6:OrLaterOperator a owl:Class, sh:NodeShape ; rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, of the indicated License."""@en ; - rdfs:subClassOf ns3:ExtendableLicense ; + rdfs:subClassOf ns6:ExtendableLicense ; sh:nodeKind sh:IRI ; - sh:property _:Ndfeaf41c217c4e0c8c442c54949d7e6a . + sh:property _:N47d32bc3b4e04c9ab083ec76d4f22585 . - ns3:WithAdditionOperator a owl:Class, + ns6:WithAdditionOperator a owl:Class, sh:NodeShape ; rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional text applied to it."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property _:N8049abc6ee7f449ebf27e3e8357bdf75, - _:Nc5bf40e3b2584e2eaa4becc473bed079 . + sh:property _:N163fe4499b2a454a9641b23118bf53ae, + _:Nc51fb19223644705a84f646344b7e9d3 . a owl:Class, sh:NodeShape ; rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; - sh:property _:N3b3c65b750eb401889ee9800adc1da9c . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N516b1b46dbb04f1c953906f0388bf8b4 . - ns2:CvssV2VulnAssessmentRelationship a owl:Class, + ns5:CvssV2VulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property _:N7d98dd34e2e442ec8f9dd87a82897c1a, - _:N950494b11f9e43fd9ce4b21264e6a0a8 . + sh:property _:Na2b089e6c69d4697ae4de61d18f020f7, + _:Nb850dda843534d3ab3ffbadf70766fef . - ns2:CvssV3VulnAssessmentRelationship a owl:Class, + ns5:CvssV3VulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property _:N67a7c2de8c574fb991ccc64346e1de56, - _:Nad1212fd5ed241c891f8afc9235f406c, - _:Ne3895908b9eb4cf68888a0b70d8088ff . + sh:property _:N328adb4bb1ec422084a2169890188a03, + _:Na449b0b56e3540618b2a2698204edde9, + _:Nfcc30e48020d4dd2b3493a0cd55ea457 . - ns2:CvssV4VulnAssessmentRelationship a owl:Class, + ns5:CvssV4VulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property _:N4d420b10df2e48ec90b7a163f5e7774c, - _:N9dfffc9a0d064fbbb99f222927600262, - _:Ne4d0e63a8226430099ec09bd81396164 . + sh:property _:N4278c3d777ea4ebd81cd23af80459c2d, + _:N4382805b6a5947d38ffcfd8b182bddbf, + _:N58c62d134f5e41d78440946685ecf0cc . - ns2:EpssVulnAssessmentRelationship a owl:Class, + ns5:EpssVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property _:N8e8fa340313748a7b459ba889204f2c1, - _:N9d46caf53cc94a77812c6af4cd5653dd . + sh:property _:Nc9ddcdf86e874968aa8f5ba821975eb4, + _:Nf284f365ba5c4e4da40d7d7900d82744 . - ns2:ExploitCatalogVulnAssessmentRelationship a owl:Class, + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property _:N3df9880d78624ddba1dd8e35a428b9c9, - _:N8373dd8071e2429e95b3b0897bdab7de, - _:Nc642cb7cb5d441eaaa4a1fc86368d998 . + sh:property _:N8e672d95ff7d48e68c1ed7ecf019b269, + _:N91d11db27b28462b8545b78734a27503, + _:Ne820a8ec67114d53b03a71f5f7be31f5 . - ns2:SsvcVulnAssessmentRelationship a owl:Class, + ns5:SsvcVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property _:N8d911077b7fd4e4180299a09ca29ea53 . + sh:property _:N30d5cdb21c144005b1d74c81aa0e129e . - ns2:VexAffectedVulnAssessmentRelationship a owl:Class, + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment """Connects a vulnerability and an element designating the element as a product affected by the vulnerability."""@en ; - rdfs:subClassOf ns2:VexVulnAssessmentRelationship ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property _:N2fa63ba2278342bb9c50f3eea6a8c45f, - _:Nff63d22b8dc54a40a1754583641b37f3 . + sh:property _:N105628f6c8b040edb9db617f35f30bec, + _:N8692a82c280845c3a6fa37c02ddae229 . - ns2:VexFixedVulnAssessmentRelationship a owl:Class ; + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where a fix has been applied and are no longer affected."""@en ; - rdfs:subClassOf ns2:VexVulnAssessmentRelationship ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; sh:nodeKind sh:IRI . - ns2:VexNotAffectedVulnAssessmentRelationship a owl:Class, + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment """Links a vulnerability and one or more elements designating the latter as products not affected by the vulnerability."""@en ; - rdfs:subClassOf ns2:VexVulnAssessmentRelationship ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property _:N35cc536a7b8e4401b4f4e6b8982306e1, - _:Naee034377c334f78a3af1a4d25c3d468, - _:Nf2495df384ef4dfe9e42259508a5f433 . + sh:property _:N377b547285074591a904911ef1fc1977, + _:N6f8ca85700744b0e9f7a8672675d1dca, + _:Nb916f2dfc1c640bd8e0dac9bb5956172 . - ns2:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; rdfs:comment """Designates elements as products where the impact of a vulnerability is being investigated."""@en ; - rdfs:subClassOf ns2:VexVulnAssessmentRelationship ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; sh:nodeKind sh:IRI . - ns2:Vulnerability a owl:Class, + ns5:Vulnerability a owl:Class, sh:NodeShape ; rdfs:comment "Specifies a vulnerability and its associated information."@en ; rdfs:subClassOf ns1:Artifact ; sh:nodeKind sh:IRI ; - sh:property _:N596d74921771447c9b35785007e34f1c, - _:N6b8369d5442f4e3c902c0fd4c6ad7f11, - _:Nad60293878ba46b5b12652a41f9e5b9e . + sh:property _:N942417ca6d844df0914d75b099a457f8, + _:Ne11c75cafdb0438299216847b06716cf, + _:Ne68051bb209048da9a57bc5dbaf28bf0 . a owl:Class, sh:NodeShape ; rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property _:N0ac53be222cb49b7af09086cfaaed1db, - _:N5665c63b6756409c9cdaed2974ba4360, - _:Nc5839c1a42cb4cbf8b8f389491a2b604 . + sh:property _:N1647e706f6764e7d9ec4e0aa8979d0c6, + _:Ne70b85feb564419597741ca637d61d03, + _:Nf5531d9c16ff4f589dff19f480634c29 . a owl:Class, sh:NodeShape ; rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property _:N87ef2338681b493982fdd6660c334933 . + sh:property _:Nda71586c3c6541b4a6a907d316dca405 . - ns5:Sbom a owl:Class, + ns3:Sbom a owl:Class, sh:NodeShape ; rdfs:comment "A collection of SPDX Elements describing a single package."@en ; rdfs:subClassOf ns1:Bom ; sh:nodeKind sh:IRI ; - sh:property _:N74164e072d8147ca808c451ad6b5d980 . + sh:property _:N954579de61d84bef909737ad4568a536 . - ns5:Snippet a owl:Class, + ns3:Snippet a owl:Class, sh:NodeShape ; rdfs:comment "Describes a certain part of a file."@en ; - rdfs:subClassOf ns5:SoftwareArtifact ; + rdfs:subClassOf ns3:SoftwareArtifact ; sh:nodeKind sh:IRI ; - sh:property _:N37e9effec5ca4011a388b871588a9bfc, - _:N71251064642941d5a8323c552deea710, - _:N89f5ced0d2b44da98e135f5754616ccc . + sh:property _:N825f749765e348a0abfef75f63c1588a, + _:Nc6d18260ddfa478b84c2dc19c2059aa2, + _:Nf9bf03371d92462f91a54baa946fd625 . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . spdx: a owl:Ontology ; rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; @@ -334,125 +370,125 @@ investigated."""@en ; omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . a owl:NamedIndividual, - ns6:EnergyUnitType ; + ns2:EnergyUnitType ; rdfs:label "kilowattHour" ; rdfs:comment "Kilowatt-hour."@en . a owl:NamedIndividual, - ns6:EnergyUnitType ; + ns2:EnergyUnitType ; rdfs:label "megajoule" ; rdfs:comment "Megajoule."@en . a owl:NamedIndividual, - ns6:EnergyUnitType ; + ns2:EnergyUnitType ; rdfs:label "other" ; rdfs:comment "Any other units of energy measurement."@en . a owl:NamedIndividual, - ns6:SafetyRiskAssessmentType ; + ns2:SafetyRiskAssessmentType ; rdfs:label "high" ; rdfs:comment "The second-highest level of risk posed by an AI system."@en . a owl:NamedIndividual, - ns6:SafetyRiskAssessmentType ; + ns2:SafetyRiskAssessmentType ; rdfs:label "low" ; rdfs:comment "Low/no risk is posed by an AI system."@en . a owl:NamedIndividual, - ns6:SafetyRiskAssessmentType ; + ns2:SafetyRiskAssessmentType ; rdfs:label "medium" ; rdfs:comment "The third-highest level of risk posed by an AI system."@en . a owl:NamedIndividual, - ns6:SafetyRiskAssessmentType ; + ns2:SafetyRiskAssessmentType ; rdfs:label "serious" ; rdfs:comment "The highest level of risk posed by an AI system."@en . - ns6:autonomyType a owl:ObjectProperty ; + ns2:autonomyType a owl:ObjectProperty ; rdfs:comment """Indicates whether the system can perform a decision or action without human involvement or guidance."""@en ; rdfs:range ns1:PresenceType . - ns6:domain a owl:DatatypeProperty ; + ns2:domain a owl:DatatypeProperty ; rdfs:comment "Captures the domain in which the AI package can be used."@en ; rdfs:range xsd:string . - ns6:energyConsumption a owl:ObjectProperty ; + ns2:energyConsumption a owl:ObjectProperty ; rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; - rdfs:range ns6:EnergyConsumption . + rdfs:range ns2:EnergyConsumption . - ns6:energyQuantity a owl:DatatypeProperty ; + ns2:energyQuantity a owl:DatatypeProperty ; rdfs:comment "Represents the energy quantity."@en ; rdfs:range xsd:decimal . - ns6:energyUnit a owl:ObjectProperty ; + ns2:energyUnit a owl:ObjectProperty ; rdfs:comment "Specifies the unit in which energy is measured."@en ; - rdfs:range ns6:EnergyUnitType . + rdfs:range ns2:EnergyUnitType . - ns6:finetuningEnergyConsumption a owl:ObjectProperty ; + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is being used in the AI system."""@en ; - rdfs:range ns6:EnergyConsumptionDescription . + rdfs:range ns2:EnergyConsumptionDescription . - ns6:hyperparameter a owl:ObjectProperty ; + ns2:hyperparameter a owl:ObjectProperty ; rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI package."""@en ; rdfs:range ns1:DictionaryEntry . - ns6:inferenceEnergyConsumption a owl:ObjectProperty ; + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model that is being used in the AI system."""@en ; - rdfs:range ns6:EnergyConsumptionDescription . + rdfs:range ns2:EnergyConsumptionDescription . - ns6:informationAboutApplication a owl:DatatypeProperty ; + ns2:informationAboutApplication a owl:DatatypeProperty ; rdfs:comment """Provides relevant information about the AI software, not including the model description."""@en ; rdfs:range xsd:string . - ns6:informationAboutTraining a owl:DatatypeProperty ; + ns2:informationAboutTraining a owl:DatatypeProperty ; rdfs:comment "Describes relevant information about different steps of the training process."@en ; rdfs:range xsd:string . - ns6:limitation a owl:DatatypeProperty ; + ns2:limitation a owl:DatatypeProperty ; rdfs:comment "Captures a limitation of the AI software."@en ; rdfs:range xsd:string . - ns6:metric a owl:ObjectProperty ; + ns2:metric a owl:ObjectProperty ; rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; rdfs:range ns1:DictionaryEntry . - ns6:metricDecisionThreshold a owl:ObjectProperty ; + ns2:metricDecisionThreshold a owl:ObjectProperty ; rdfs:comment """Captures the threshold that was used for computation of a metric described in the metric field."""@en ; rdfs:range ns1:DictionaryEntry . - ns6:modelDataPreprocessing a owl:DatatypeProperty ; + ns2:modelDataPreprocessing a owl:DatatypeProperty ; rdfs:comment """Describes all the preprocessing steps applied to the training data before the model training."""@en ; rdfs:range xsd:string . - ns6:modelExplainability a owl:DatatypeProperty ; + ns2:modelExplainability a owl:DatatypeProperty ; rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; rdfs:range xsd:string . - ns6:safetyRiskAssessment a owl:ObjectProperty ; + ns2:safetyRiskAssessment a owl:ObjectProperty ; rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; - rdfs:range ns6:SafetyRiskAssessmentType . + rdfs:range ns2:SafetyRiskAssessmentType . - ns6:standardCompliance a owl:DatatypeProperty ; + ns2:standardCompliance a owl:DatatypeProperty ; rdfs:comment "Captures a standard that is being complied with."@en ; rdfs:range xsd:string . - ns6:trainingEnergyConsumption a owl:ObjectProperty ; + ns2:trainingEnergyConsumption a owl:ObjectProperty ; rdfs:comment """Specifies the amount of energy consumed when training the AI model that is being used in the AI system."""@en ; - rdfs:range ns6:EnergyConsumptionDescription . + rdfs:range ns2:EnergyConsumptionDescription . - ns6:typeOfModel a owl:DatatypeProperty ; + ns2:typeOfModel a owl:DatatypeProperty ; rdfs:comment "Records the type of the model used in the AI software."@en ; rdfs:range xsd:string . - ns6:useSensitivePersonalInformation a owl:ObjectProperty ; + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; rdfs:comment """Records if sensitive personal information is used during model training or could be used during the inference."""@en ; rdfs:range ns1:PresenceType . @@ -499,7 +535,7 @@ invoke a build."""@en ; a owl:NamedIndividual, ns1:AnnotationType ; rdfs:label "other" ; - rdfs:comment "Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element)."@en . + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . a owl:NamedIndividual, ns1:AnnotationType ; @@ -517,7 +553,7 @@ invoke a build."""@en ; rdfs:comment "A collection of Elements that have a shared context."@en ; rdfs:subClassOf ns1:ElementCollection ; sh:nodeKind sh:IRI ; - sh:property _:N18ed9985cff84e34807e6aa0a780a707 . + sh:property _:N63f963c2c8a4467bb803f9af7eaafd3d . a owl:NamedIndividual, ns1:ExternalIdentifierType ; @@ -537,7 +573,7 @@ invoke a build."""@en ; a owl:NamedIndividual, ns1:ExternalIdentifierType ; rdfs:label "email" ; - rdfs:comment "Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3."@en . + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . a owl:NamedIndividual, ns1:ExternalIdentifierType ; @@ -567,7 +603,7 @@ invoke a build."""@en ; a owl:NamedIndividual, ns1:ExternalIdentifierType ; rdfs:label "swid" ; - rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3."@en . + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . a owl:NamedIndividual, ns1:ExternalIdentifierType ; @@ -834,19 +870,10 @@ invoke a build."""@en ; rdfs:label "test" ; rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . - ns1:NoAssertionElement a owl:NamedIndividual, - ns1:Element ; - rdfs:comment """An Individual Value for Element representing a set of Elements of unknown -identify or cardinality (number)."""@en ; - rdfs:range ns1:Element ; - owl:sameAs ns1:NoAssertionElement . - - ns1:NoneElement a owl:NamedIndividual, - ns1:Element ; - rdfs:comment """An Individual Value for Element representing a set of Elements with -cardinality (number/count) of zero."""@en ; - rdfs:range ns1:Element ; - owl:sameAs ns1:NoneElement . + ns1:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns1:Agent ; + sh:nodeKind sh:IRI . a owl:NamedIndividual, ns1:ProfileIdentifierType ; @@ -871,7 +898,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual, ns1:ProfileIdentifierType ; rdfs:label "expandedLicensing" ; - rdfs:comment "the element follows the expanded Licensing profile specification"@en . + rdfs:comment "the element follows the ExpandedLicensing profile specification"@en . a owl:NamedIndividual, ns1:ProfileIdentifierType ; @@ -891,7 +918,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual, ns1:ProfileIdentifierType ; rdfs:label "simpleLicensing" ; - rdfs:comment "the element follows the simple Licensing profile specification"@en . + rdfs:comment "the element follows the SimpleLicensing profile specification"@en . a owl:NamedIndividual, ns1:ProfileIdentifierType ; @@ -1156,7 +1183,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual, ns1:RelationshipType ; rdfs:label "other" ; - rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless)."@en . + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . a owl:NamedIndividual, ns1:RelationshipType ; @@ -1329,8 +1356,8 @@ that provides additional characteristics of an Element."""@en ; rdfs:range ns1:ExternalRefType . ns1:externalSpdxId a owl:DatatypeProperty ; - rdfs:comment """Identifies an external Element used within a Document but defined external to -that Document."""@en ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; rdfs:range xsd:anyURI . ns1:from a owl:ObjectProperty ; @@ -1621,60 +1648,60 @@ reassessed."""@en ; rdfs:comment "Describes a sensor used for collecting the data."@en ; rdfs:range ns1:DictionaryEntry . - ns3:additionText a owl:DatatypeProperty ; + ns6:additionText a owl:DatatypeProperty ; rdfs:comment "Identifies the full text of a LicenseAddition."@en ; rdfs:range xsd:string . - ns3:isDeprecatedAdditionId a owl:DatatypeProperty ; + ns6:isDeprecatedAdditionId a owl:DatatypeProperty ; rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; rdfs:range xsd:boolean . - ns3:isDeprecatedLicenseId a owl:DatatypeProperty ; + ns6:isDeprecatedLicenseId a owl:DatatypeProperty ; rdfs:comment """Specifies whether a license or additional text identifier has been marked as deprecated."""@en ; rdfs:range xsd:boolean . - ns3:isFsfLibre a owl:DatatypeProperty ; + ns6:isFsfLibre a owl:DatatypeProperty ; rdfs:comment """Specifies whether the License is listed as free by the Free Software Foundation (FSF)."""@en ; rdfs:range xsd:boolean . - ns3:isOsiApproved a owl:DatatypeProperty ; + ns6:isOsiApproved a owl:DatatypeProperty ; rdfs:comment """Specifies whether the License is listed as approved by the Open Source Initiative (OSI)."""@en ; rdfs:range xsd:boolean . - ns3:standardAdditionTemplate a owl:DatatypeProperty ; + ns6:standardAdditionTemplate a owl:DatatypeProperty ; rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; rdfs:range xsd:string . - ns3:standardLicenseHeader a owl:DatatypeProperty ; + ns6:standardLicenseHeader a owl:DatatypeProperty ; rdfs:comment """Provides a License author's preferred text to indicate that a file is covered by the License."""@en ; rdfs:range xsd:string . - ns3:standardLicenseTemplate a owl:DatatypeProperty ; + ns6:standardLicenseTemplate a owl:DatatypeProperty ; rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; rdfs:range xsd:string . - ns3:subjectAddition a owl:ObjectProperty ; + ns6:subjectAddition a owl:ObjectProperty ; rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; - rdfs:range ns3:LicenseAddition . + rdfs:range ns6:LicenseAddition . - ns3:subjectExtendableLicense a owl:ObjectProperty ; + ns6:subjectExtendableLicense a owl:ObjectProperty ; rdfs:comment "A License participating in a 'with addition' model."@en ; - rdfs:range ns3:ExtendableLicense . + rdfs:range ns6:ExtendableLicense . - ns3:subjectLicense a owl:ObjectProperty ; + ns6:subjectLicense a owl:ObjectProperty ; rdfs:comment "A License participating in an 'or later' model."@en ; - rdfs:range ns3:License . + rdfs:range ns6:License . a owl:DatatypeProperty ; - rdfs:comment "A name used in a CdxExtension name-value pair."@en ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; rdfs:range xsd:string . a owl:DatatypeProperty ; - rdfs:comment "A value used in a CdxExtension name-value pair."@en ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; rdfs:range xsd:string . a owl:ObjectProperty ; @@ -1682,121 +1709,121 @@ by the License."""@en ; rdfs:range . a owl:NamedIndividual, - ns2:ExploitCatalogType ; + ns5:ExploitCatalogType ; rdfs:label "kev" ; rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . a owl:NamedIndividual, - ns2:ExploitCatalogType ; + ns5:ExploitCatalogType ; rdfs:label "other" ; rdfs:comment "Other exploit catalogs"@en . a owl:NamedIndividual, - ns2:SsvcDecisionType ; + ns5:SsvcDecisionType ; rdfs:label "act" ; rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . a owl:NamedIndividual, - ns2:SsvcDecisionType ; + ns5:SsvcDecisionType ; rdfs:label "attend" ; rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . a owl:NamedIndividual, - ns2:SsvcDecisionType ; + ns5:SsvcDecisionType ; rdfs:label "track" ; rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . a owl:NamedIndividual, - ns2:SsvcDecisionType ; + ns5:SsvcDecisionType ; rdfs:label "trackStar" ; rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "componentNotPresent" ; rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "inlineMitigationsAlreadyExist" ; rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "vulnerableCodeNotInExecutePath" ; rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "vulnerableCodeNotPresent" ; rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . - ns2:actionStatement a owl:DatatypeProperty ; + ns5:actionStatement a owl:DatatypeProperty ; rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product is affected by it."""@en ; rdfs:range xsd:string . - ns2:actionStatementTime a owl:DatatypeProperty ; + ns5:actionStatementTime a owl:DatatypeProperty ; rdfs:comment """Records the time when a recommended action was communicated in a VEX statement to mitigate a vulnerability."""@en ; rdfs:range xsd:dateTimeStamp . - ns2:assessedElement a owl:ObjectProperty ; + ns5:assessedElement a owl:ObjectProperty ; rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was found."""@en ; - rdfs:range ns1:Element . + rdfs:range ns3:SoftwareArtifact . - ns2:catalogType a owl:ObjectProperty ; + ns5:catalogType a owl:ObjectProperty ; rdfs:comment "Specifies the exploit catalog type."@en ; - rdfs:range ns2:ExploitCatalogType . + rdfs:range ns5:ExploitCatalogType . - ns2:decisionType a owl:ObjectProperty ; + ns5:decisionType a owl:ObjectProperty ; rdfs:comment """Provide the enumeration of possible decisions in the [Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; - rdfs:range ns2:SsvcDecisionType . + rdfs:range ns5:SsvcDecisionType . - ns2:exploited a owl:DatatypeProperty ; + ns5:exploited a owl:DatatypeProperty ; rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; rdfs:range xsd:boolean . - ns2:impactStatement a owl:DatatypeProperty ; + ns5:impactStatement a owl:DatatypeProperty ; rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable justification label."""@en ; rdfs:range xsd:string . - ns2:impactStatementTime a owl:DatatypeProperty ; + ns5:impactStatementTime a owl:DatatypeProperty ; rdfs:comment "Timestamp of impact statement."@en ; rdfs:range xsd:dateTimeStamp . - ns2:justificationType a owl:ObjectProperty ; + ns5:justificationType a owl:ObjectProperty ; rdfs:comment """Impact justification label to be used when linking a vulnerability to an element representing a VEX product with a VexNotAffectedVulnAssessmentRelationship relationship."""@en ; - rdfs:range ns2:VexJustificationType . + rdfs:range ns5:VexJustificationType . - ns2:locator a owl:DatatypeProperty ; + ns5:locator a owl:DatatypeProperty ; rdfs:comment "Provides the location of an exploit catalog."@en ; rdfs:range xsd:anyURI . - ns2:percentile a owl:DatatypeProperty ; + ns5:percentile a owl:DatatypeProperty ; rdfs:comment "The percentile of the current probability score."@en ; rdfs:range xsd:decimal . - ns2:probability a owl:DatatypeProperty ; + ns5:probability a owl:DatatypeProperty ; rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; rdfs:range xsd:decimal . - ns2:statusNotes a owl:DatatypeProperty ; + ns5:statusNotes a owl:DatatypeProperty ; rdfs:comment "Conveys information about how VEX status was determined."@en ; rdfs:range xsd:string . - ns2:vexVersion a owl:DatatypeProperty ; + ns5:vexVersion a owl:DatatypeProperty ; rdfs:comment "Specifies the version of a VEX statement."@en ; rdfs:range xsd:string . @@ -1814,217 +1841,197 @@ License Addition to its URI ID."""@en ; rdfs:range xsd:string . a owl:NamedIndividual, - ns5:ContentIdentifierType ; + ns3:ContentIdentifierType ; rdfs:label "gitoid" ; rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . a owl:NamedIndividual, - ns5:ContentIdentifierType ; + ns3:ContentIdentifierType ; rdfs:label "swhid" ; rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . a owl:NamedIndividual, - ns5:FileKindType ; + ns3:FileKindType ; rdfs:label "directory" ; rdfs:comment "The file represents a directory and all content stored in that directory."@en . a owl:NamedIndividual, - ns5:FileKindType ; + ns3:FileKindType ; rdfs:label "file" ; rdfs:comment "The file represents a single file (default)."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "analyzed" ; rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "build" ; rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "deployed" ; rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "design" ; rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "runtime" ; rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "source" ; rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . - ns5:additionalPurpose a owl:ObjectProperty ; + ns3:additionalPurpose a owl:ObjectProperty ; rdfs:comment "Provides additional purpose information of the software artifact."@en ; - rdfs:range ns5:SoftwarePurpose . + rdfs:range ns3:SoftwarePurpose . - ns5:attributionText a owl:DatatypeProperty ; + ns3:attributionText a owl:DatatypeProperty ; rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for a software Package, File or Snippet."""@en ; rdfs:range xsd:string . - ns5:byteRange a owl:DatatypeProperty ; + ns3:byteRange a owl:DatatypeProperty ; rdfs:comment """Defines the byte range in the original host file that the snippet information applies to."""@en ; rdfs:range ns1:PositiveIntegerRange . - ns5:contentIdentifier a owl:DatatypeProperty ; + ns3:contentIdentifier a owl:DatatypeProperty ; rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be used for verifying its identity and/or integrity."""@en ; - rdfs:range ns5:ContentIdentifier . + rdfs:range ns3:ContentIdentifier . - ns5:contentIdentifierType a owl:ObjectProperty ; + ns3:contentIdentifierType a owl:ObjectProperty ; rdfs:comment "Specifies the type of the content identifier."@en ; - rdfs:range ns5:ContentIdentifierType . + rdfs:range ns3:ContentIdentifierType . - ns5:contentIdentifierValue a owl:DatatypeProperty ; + ns3:contentIdentifierValue a owl:DatatypeProperty ; rdfs:comment "Specifies the value of the content identifier."@en ; rdfs:range xsd:anyURI . - ns5:copyrightText a owl:DatatypeProperty ; + ns3:copyrightText a owl:DatatypeProperty ; rdfs:comment """Identifies the text of one or more copyright notices for a software Package, File or Snippet, if any."""@en ; rdfs:range xsd:string . - ns5:downloadLocation a owl:DatatypeProperty ; + ns3:downloadLocation a owl:DatatypeProperty ; rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time that the document was created."""@en ; rdfs:range xsd:anyURI . - ns5:fileKind a owl:ObjectProperty ; + ns3:fileKind a owl:ObjectProperty ; rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; - rdfs:range ns5:FileKindType . + rdfs:range ns3:FileKindType . - ns5:homePage a owl:DatatypeProperty ; + ns3:homePage a owl:DatatypeProperty ; rdfs:comment """A place for the SPDX document creator to record a website that serves as the package's home page."""@en ; rdfs:range xsd:anyURI . - ns5:lineRange a owl:DatatypeProperty ; + ns3:lineRange a owl:DatatypeProperty ; rdfs:comment """Defines the line range in the original host file that the snippet information applies to."""@en ; rdfs:range ns1:PositiveIntegerRange . - ns5:packageUrl a owl:DatatypeProperty ; + ns3:packageUrl a owl:DatatypeProperty ; rdfs:comment """Provides a place for the SPDX data creator to record the package URL string (in accordance with the Package URL specification) for a software Package."""@en ; rdfs:range xsd:anyURI . - ns5:packageVersion a owl:DatatypeProperty ; + ns3:packageVersion a owl:DatatypeProperty ; rdfs:comment "Identify the version of a package."@en ; rdfs:range xsd:string . - ns5:primaryPurpose a owl:ObjectProperty ; + ns3:primaryPurpose a owl:ObjectProperty ; rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; - rdfs:range ns5:SoftwarePurpose . + rdfs:range ns3:SoftwarePurpose . - ns5:sbomType a owl:ObjectProperty ; + ns3:sbomType a owl:ObjectProperty ; rdfs:comment "Provides information about the type of an SBOM."@en ; - rdfs:range ns5:SbomType . + rdfs:range ns3:SbomType . - ns5:snippetFromFile a owl:ObjectProperty ; + ns3:snippetFromFile a owl:ObjectProperty ; rdfs:comment "Defines the original host file that the snippet information applies to."@en ; - rdfs:range ns5:File . + rdfs:range ns3:File . - ns5:sourceInfo a owl:DatatypeProperty ; + ns3:sourceInfo a owl:DatatypeProperty ; rdfs:comment """Records any relevant background information or additional comments about the origin of the package."""@en ; rdfs:range xsd:string . - ns6:EnergyConsumption a owl:Class, + ns2:EnergyConsumption a owl:Class, sh:NodeShape ; rdfs:comment """A class for describing the energy consumption incurred by an AI model in different stages of its lifecycle."""@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:N67fc6e9fc5d24eabb8543cdc669b1145, - _:Nd677bc1745684cf98fb92f17a75ebd52, - _:Nffd32d595d024069b6df3a1ef8da642a . - - ns1:CreationInfo a owl:Class, - sh:NodeShape ; - rdfs:comment "Provides information about the creation of the Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:N107aa4617cfc41499f0678d83f303c24, - _:N4379f82c1b44400197a0281504402fc5, - _:N70a01ce1edb94124ac3d6a3b187db793, - _:N9a4f2ea8112e48b18e9aaa109a1e02b3, - _:Nc0df3f2041aa425183862b62f02dd829 . - - ns1:ElementCollection a ns7:AbstractClass, - owl:Class, - sh:NodeShape ; - rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; - rdfs:subClassOf ns1:Element ; - sh:nodeKind sh:IRI ; - sh:property _:N5ba1e97374714be89c6ce6144cda737a, - _:Nb387237d7787460e8f7e72786252a39f, - _:Nda9579bf8aeb475c986dfda97af9e414 . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N250a4372ab014e66ba3eec07accb85dc, + _:N50c6944cf3544d0ab17d40d70d7715c3, + _:Nd05558aa816f416f8c26895bb8d1d9bb . ns1:ExternalIdentifier a owl:Class, sh:NodeShape ; rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:N5a18c93b836b4c75887455a2be533616, - _:Nb953247c1d474ff9b1190938b713a604, - _:Ncf36f0c937574a40957458e67ccab9cc, - _:Ne3abaf912f304b1bbda537f0c9866ce8, - _:Ne9376f7e610a4f378d34348bf09acb82 . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N0d09683a42354debacdd0b0625119609, + _:N13396ee366a94de388e2aff47754e81f, + _:Nbd14f0a1267744e89f6930e710689414, + _:Ne883dfda4a7445ceb1e70f39ddd03fea, + _:Nf71f6300b14a4726a20ffad899bed919 . ns1:ExternalMap a owl:Class, sh:NodeShape ; - rdfs:comment """A map of Element identifiers that are used within a Document but defined -external to that Document."""@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:N999ce6cccf4c43f493041f0c109b3166, - _:Na34b98cc7abc4ac2bb5b1ba9777ec6a0, - _:Na40768ed7c6a40fcb01c9e8f1793b8a7, - _:Ndf7085005814495cbc9689c68bb9683d . + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N894cee407d8747ec8adc2f05ce722a86, + _:Nb345ac20ec3244e480ec30eee26dc06e, + _:Nd2a11bb8a1a14a82994d02e9dd610275, + _:Nebecc80c7e4045d1b3ad15ab0c1d04ec . ns1:ExternalRef a owl:Class, sh:NodeShape ; rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:N065968ff4b1d468f80d208a94f728820, - _:N4477c4b31f20446998b8dff00cd309b3, - _:N7f27ce1812214cf08ea19bcb018764e2, - _:Nfc79218ef172418cad1d73977bceaf78 . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N0b728d22a9674ecc87af12fde5aae61c, + _:N5ab248e680454bbcb3ed254de24ac49f, + _:N72a328f4b7e14cb194d99b35236c3430, + _:Nddcc9ac569c4442b894f208d7722b4f8 . ns1:Hash a owl:Class, sh:NodeShape ; rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; rdfs:subClassOf ns1:IntegrityMethod ; - sh:nodeKind sh:BlankNode ; - sh:property _:Nb3c96ed9edf047408c12db5df1daaf43, - _:Nb7591bd67efe44909d92824106c3b13d . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N4e4b35788e1b4064b856bcd8d2cc6670, + _:Naf01116eff7c4759be95f8f97c257d9c . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "adler32" ; - rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3."@en . + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "blake2b256" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "blake2b384" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "blake2b512" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; @@ -2049,17 +2056,17 @@ external to that Document."""@en ; a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "md2" ; - rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/)."@en . + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "md4" ; - rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186)."@en . + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "md5" ; - rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321)."@en . + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; @@ -2074,22 +2081,22 @@ external to that Document."""@en ; a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha1" ; - rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174)."@en . + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha224" ; - rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874)."@en . + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha256" ; - rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha384" ; - rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; @@ -2114,26 +2121,32 @@ external to that Document."""@en ; a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha512" ; - rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns1:IndividualElement a owl:Class ; + rdfs:comment """A concrete subclass of Element used by Individuals in the +Core profile."""@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI . ns1:NamespaceMap a owl:Class, sh:NodeShape ; rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:Nc416283f46f74c5ca28e42eede357fc1, - _:Ne4619e36e32c4fdc886ba17b636520a3 . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N763c69315ee040a88ca27b5205984626, + _:Na96bc2776ef4488595f136d0fbac26a6 . ns1:Relationship a owl:Class, sh:NodeShape ; rdfs:comment "Describes a relationship between one or more elements."@en ; rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property _:N6dd024b62af74fb5a94391f7343f1c79, - _:N801bb08e2f0f4a8b9b2e9e8d3a406ffd, - _:Na62fed341d814dc8ac95b17410dd06e9, - _:Ne8b93e1651f84d5f8ff94e4b82012f07, - _:Nf39729cdf1294ea88879ccd16e468339, - _:Nf4064e5c7fb84a899bffb14df5844894 . + sh:property _:N3c163fcab8684aa09c61e78b4cbb9b38, + _:N53970517ea09401691d51549f8e0fd90, + _:N73e74213eec84d8daaa36a51dab963d6, + _:Nae8e63939c7c4cf4aa4ba555362d775c, + _:Nb3e77cdb9a14442eafb0659c7081c110, + _:Nd11df36dd5014f759eab790e847b9857 . ns1:Tool a owl:Class ; rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; @@ -2158,79 +2171,85 @@ referenced by the Element."""@en ; asserted."""@en ; rdfs:range ns1:IntegrityMethod . - ns3:deprecatedVersion a owl:DatatypeProperty ; + ns6:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns6:deprecatedVersion a owl:DatatypeProperty ; rdfs:comment """Specifies the SPDX License List version in which this license or exception identifier was deprecated."""@en ; rdfs:range xsd:string . - ns3:licenseXml a owl:DatatypeProperty ; + ns6:licenseXml a owl:DatatypeProperty ; rdfs:comment """Identifies all the text and metadata associated with a license in the license XML format."""@en ; rdfs:range xsd:string . - ns3:listVersionAdded a owl:DatatypeProperty ; + ns6:listVersionAdded a owl:DatatypeProperty ; rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or ListedLicenseException identifier was first added."""@en ; rdfs:range xsd:string . - ns3:member a owl:ObjectProperty ; + ns6:member a owl:ObjectProperty ; rdfs:comment "A license expression participating in a license set."@en ; rdfs:range . - ns3:obsoletedBy a owl:DatatypeProperty ; + ns6:obsoletedBy a owl:DatatypeProperty ; rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated License or LicenseAddition."""@en ; rdfs:range xsd:string . - ns3:seeAlso a owl:DatatypeProperty ; + ns6:seeAlso a owl:DatatypeProperty ; rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; rdfs:range xsd:anyURI . a owl:Class, sh:NodeShape ; rdfs:comment "A property name with an associated value."@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:N0f509a18a72e4662a7e7fc2fe485c3ac, - _:Neecbcd12ce83469c90d8e79c41ce15e2 . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N2056bd91659a4260a6eb99a0cbdd9f14, + _:Na92e8ceda7e548bb9a144c2e9c857639 . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "critical" ; rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "high" ; rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "low" ; rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "medium" ; rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "none" ; rdfs:comment "When a CVSS score is 0.0"@en . - ns2:modifiedTime a owl:DatatypeProperty ; + ns5:modifiedTime a owl:DatatypeProperty ; rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; rdfs:range xsd:dateTimeStamp . - ns2:publishedTime a owl:DatatypeProperty ; + ns5:publishedTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time when a vulnerability was published."@en ; rdfs:range xsd:dateTimeStamp . - ns2:severity a owl:ObjectProperty ; + ns5:severity a owl:ObjectProperty ; rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; - rdfs:range ns2:CvssSeverityType . + rdfs:range ns5:CvssSeverityType . - ns2:withdrawnTime a owl:DatatypeProperty ; + ns5:withdrawnTime a owl:DatatypeProperty ; rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; rdfs:range xsd:dateTimeStamp . @@ -2238,178 +2257,188 @@ License or LicenseAddition."""@en ; rdfs:comment "Identifies the full text of a License or Addition."@en ; rdfs:range xsd:string . - ns5:ContentIdentifier a owl:Class, + ns3:ContentIdentifier a owl:Class, sh:NodeShape ; rdfs:comment "A canonical, unique, immutable identifier"@en ; rdfs:subClassOf ns1:IntegrityMethod ; - sh:nodeKind sh:BlankNode ; - sh:property _:N00e5d1a9fc9f4e8ea643c5dec21372c9, - _:N3be22ea4244a43d6af104de9fed1b4fb . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N453a2981f56c4d3a943752e7740f87fd, + _:N45b62edbd5f3406dba20232288ec19fd . - ns5:File a owl:Class, + ns3:File a owl:Class, sh:NodeShape ; rdfs:comment "Refers to any object that stores content on a computer."@en ; - rdfs:subClassOf ns5:SoftwareArtifact ; + rdfs:subClassOf ns3:SoftwareArtifact ; sh:nodeKind sh:IRI ; - sh:property _:N2757a283e93b45ad88b85a593725d092, - _:N69674ef0cb504722bc20bd3195026b39 . + sh:property _:N2b7fa052bf664f2a9e1923831d282602, + _:N87131d5acc2b478ba16230f714aa0bb0 . - ns5:Package a owl:Class, + ns3:Package a owl:Class, sh:NodeShape ; rdfs:comment """Refers to any unit of content that can be associated with a distribution of software."""@en ; - rdfs:subClassOf ns5:SoftwareArtifact ; + rdfs:subClassOf ns3:SoftwareArtifact ; sh:nodeKind sh:IRI ; - sh:property _:N1288d377b72c44a58a576536a10d2030, - _:N5c4503ba9d8a43719f83795d17b3c7a7, - _:N69fe400001ad47cbb9e616ed9d727696, - _:N7e6385c5f3414e35862d986501bfff61, - _:Nc6df8997e25c4618ad64b329bea18fa4 . + sh:property _:N65301d1be04341678842dfc049e2a33c, + _:N7091d1b764924e4db3551e0b422e61ba, + _:N9eda1b52fa264730ab0b383d300e1726, + _:Nbc1332652da345c49ad3c948238f404b, + _:Nc38c872821b548ee8f430a027b2d711f . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "application" ; - rdfs:comment "the Element is a software application"@en . + rdfs:comment "The Element is a software application."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "archive" ; - rdfs:comment "the Element is an archived collection of one or more files (.tar, .zip, etc)"@en . + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "bom" ; - rdfs:comment "Element is a bill of materials"@en . + rdfs:comment "The Element is a bill of materials."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "configuration" ; - rdfs:comment "Element is configuration data"@en . + rdfs:comment "The Element is configuration data."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "container" ; - rdfs:comment "the Element is a container image which can be used by a container runtime application"@en . + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "data" ; - rdfs:comment "Element is data"@en . + rdfs:comment "The Element is data."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "device" ; - rdfs:comment "the Element refers to a chipset, processor, or electronic board"@en . + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "deviceDriver" ; - rdfs:comment "Element represents software that controls hardware devices"@en . + rdfs:comment "The Element represents software that controls hardware devices."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "diskImage" ; - rdfs:comment "the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "documentation" ; - rdfs:comment "Element is documentation"@en . + rdfs:comment "The Element is documentation."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "evidence" ; - rdfs:comment "the Element is the evidence that a specification or requirement has been fulfilled"@en . + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "executable" ; - rdfs:comment "Element is an Artifact that can be run on a computer"@en . + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "file" ; - rdfs:comment "the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc)"@en . + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "filesystemImage" ; - rdfs:comment "the Element is a file system image that can be written to a disk (or virtual) partition"@en . + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "firmware" ; - rdfs:comment "the Element provides low level control over a device's hardware"@en . + rdfs:comment "The Element provides low level control over a device's hardware."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "framework" ; - rdfs:comment "the Element is a software framework"@en . + rdfs:comment "The Element is a software framework."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "install" ; - rdfs:comment "the Element is used to install software on disk"@en . + rdfs:comment "The Element is used to install software on disk."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "library" ; - rdfs:comment "the Element is a software library"@en . + rdfs:comment "The Element is a software library."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "manifest" ; - rdfs:comment "the Element is a software manifest"@en . + rdfs:comment "The Element is a software manifest."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "model" ; - rdfs:comment "the Element is a machine learning or artificial intelligence model"@en . + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "module" ; - rdfs:comment "the Element is a module of a piece of software"@en . + rdfs:comment "The Element is a module of a piece of software."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "operatingSystem" ; - rdfs:comment "the Element is an operating system"@en . + rdfs:comment "The Element is an operating system."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "other" ; - rdfs:comment "the Element doesn't fit into any of the other categories"@en . + rdfs:comment "The Element doesn't fit into any of the other categories."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "patch" ; - rdfs:comment "Element contains a set of changes to update, fix, or improve another Element"@en . + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "platform" ; - rdfs:comment "Element represents a runtime environment"@en . + rdfs:comment "The Element represents a runtime environment."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "requirement" ; - rdfs:comment "the Element provides a requirement needed as input for another Element"@en . + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "source" ; - rdfs:comment "the Element is a single or a collection of source files"@en . + rdfs:comment "The Element is a single or a collection of source files."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "specification" ; - rdfs:comment "the Element is a plan, guideline or strategy how to create, perform or analyse an application"@en . + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "test" ; - rdfs:comment "The Element is a test used to verify functionality on an software element"@en . + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + ns1:ElementCollection a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N0bf807da343b4645904db560abf69583, + _:Nc4156282a9c34b6190b0869cdc1793db, + _:Nc9ccffdec66347509395f75c9845128f, + _:Ne3b40c9739164b2eb0ae163374d9c4ac . a owl:NamedIndividual, ns1:PresenceType ; @@ -2430,175 +2459,185 @@ software."""@en ; rdfs:comment "Provides information about the content type of an Element or a Property."@en ; rdfs:range xsd:string . - a ns7:AbstractClass, - owl:Class ; - rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; - sh:nodeKind sh:BlankNode . - - ns2:score a owl:DatatypeProperty ; + ns5:score a owl:DatatypeProperty ; rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; rdfs:range xsd:decimal . - ns2:vectorString a owl:DatatypeProperty ; + ns5:vectorString a owl:DatatypeProperty ; rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; rdfs:range xsd:string . - ns5:SoftwareArtifact a ns7:AbstractClass, - owl:Class, - sh:NodeShape ; - rdfs:comment "A distinct article or unit related to Software."@en ; - rdfs:subClassOf ns1:Artifact ; - sh:nodeKind sh:IRI ; - sh:property _:N0809050b78e64f1c8f5666cc9ffc92a6, - _:N64ddee7ac73d4ece8829e73183990c09, - _:N744e6bd4bf054480b6e284543bb79b87, - _:Nb95a1dba72b847409cd9eab4ed5e0033, - _:Nf7805d1c06ba43eaa22c6043949bd567 . - ns1:AnnotationType a owl:Class ; rdfs:comment "Specifies the type of an annotation."@en . - ns1:Artifact a ns7:AbstractClass, - owl:Class, - sh:NodeShape ; - rdfs:comment "A distinct article or unit within the digital domain."@en ; - rdfs:subClassOf ns1:Element ; - sh:nodeKind sh:IRI ; - sh:property _:N0da978c5d15a4e0ca2abb1d9a336eba1, - _:N2fd6d6c96c7b46dabc958e2ddb32657c, - _:N41aee74b0dbe4609888f3e3488e75e26, - _:N8a37f4cffd6247e08ac9432f8447d89a, - _:N9177e2ee3c054acba6cd2b8f4d78e4f3, - _:Nc7ccb8d419ad49ab9f18f22daf82266f, - _:Nd1e13d5c3983406c938eabee95860c0e . - ns1:PositiveIntegerRange a owl:Class, sh:NodeShape ; rdfs:comment "A tuple of two positive integers that define a range."@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:N659a17727ec34fe487d556cc5ed935fa, - _:Na168e6a25ca4415aa927f2d16152226c . - - ns3:ExtendableLicense a ns7:AbstractClass, - owl:Class ; - rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N80dac4ea19f44488ae2dc09ba1429116, + _:Nf44042158d4d4c85a5bd6a0fcb538498 . - ns3:IndividualLicensingInfo a owl:Class ; - rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the -ExpandedLicensing profile."""@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI . + a owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N3b695bebf32746039b555b8460ffe552 . - ns3:License a ns7:AbstractClass, - owl:Class, - sh:NodeShape ; - rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; - rdfs:subClassOf ns3:ExtendableLicense ; - sh:nodeKind sh:IRI ; - sh:property _:N01b77c997a784a81856bfe55a59f0d26, - _:N2305488d52f34ae3bd7f3de8a96329e4, - _:N26117aef00804f4b9d67298a6fd9c1de, - _:N2895a64ec18c48e68dbf01572a5d0cc8, - _:N62c446ad08764db680206dcd96bc8476, - _:N6535885322084aa986c62f1ad80b3668, - _:N6cddf83b203740bbb3558b7474a07821, - _:N7476374ddf7c4c82a95e5a63b60e4e0e, - _:N9832a681241a4a91bd95ecdfaa05670d . - - ns3:LicenseAddition a ns7:AbstractClass, - owl:Class, - sh:NodeShape ; - rdfs:comment """Abstract class for additional text intended to be added to a License, but -which is not itself a standalone License."""@en ; - rdfs:subClassOf ns1:Element ; - sh:nodeKind sh:IRI ; - sh:property _:N00f0f016bff441178fb3b14b0f1ba310, - _:N14c84f27ec214a8aa7744493af4f1b05, - _:N3daf4b35020144689a44f0ff15ab9244, - _:N55072cbd77a64b16b152c20236d786f7, - _:N5e77c3af3932465a99431b715d09d12e, - _:N75afbc0eb6e646f28396b52ee0131582 . - - ns2:ExploitCatalogType a owl:Class ; + ns5:ExploitCatalogType a owl:Class ; rdfs:comment "Specifies the exploit catalog type."@en . - ns2:VexVulnAssessmentRelationship a ns7:AbstractClass, - owl:Class, - sh:NodeShape ; - rdfs:comment "Asbtract ancestor class for all VEX relationships"@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; - sh:nodeKind sh:IRI ; - sh:property _:N097b38569ab54334ba50aa2055c21bf9, - _:Neb11974d792545bab359067d0609d8ef . - - ns5:ContentIdentifierType a owl:Class ; + ns3:ContentIdentifierType a owl:Class ; rdfs:comment "Specifies the type of a content identifier."@en . - ns5:FileKindType a owl:Class ; + ns3:FileKindType a owl:Class ; rdfs:comment "Enumeration of the different kinds of SPDX file."@en . - ns6:EnergyUnitType a owl:Class ; + ns2:EnergyUnitType a owl:Class ; rdfs:comment "Specifies the unit of energy consumption."@en . + ns1:Artifact a owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N06465237afe4406eb4803558f7a57c08, + _:N5d195bb929fc404584503e9c9b17a526, + _:N737b3d5b3c8f4cb7b5fb665b52f1dd96, + _:Nba03adbea09d477299a596cac9fd8319, + _:Nc704d39d408f41caa9805e140ff0016a, + _:Nd8679c5e3311467ca097a4151ac8fa54, + _:Nda791debefe5491aa84d61433873c630, + _:Ndb31c53559be41e0b28e79b74da0b557 . + ns1:RelationshipCompleteness a owl:Class ; rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + ns1:SpdxOrganization a owl:NamedIndividual, + ns1:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; + ns1:creationInfo . + ns1:comment a owl:DatatypeProperty ; rdfs:comment """Provide consumers with comments by the creator of the Element about the Element."""@en ; rdfs:range xsd:string . - ns6:EnergyConsumptionDescription a owl:Class, + ns6:ExtendableLicense a owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nbb0a3a63cdba4f078c6de6eef7ff6579 . + + ns6:License a owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns6:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N4b7945a329d940d7a4167237a4e60e53, + _:N5e678b3ba38745b58c0103b8e085d5c8, + _:N72dd028519c2443b94229cfc4a2639bc, + _:N79e0fdc8a753446e8e1931aab90b02ae, + _:Na3b27046864941989a486e5a70e0edb4, + _:Nc37985fef6884679b49d387a2ef08d3f, + _:Nc7f12b88e8f5489dacbbfeb81192696a, + _:Nd3d538fe1cb544b5808c51dffd844c81, + _:Ndde9f898797c42b989ef522557debf64, + _:Ne778a773be4f408192f2ed37c6143a5d . + + ns6:LicenseAddition a owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N4881d1614aa0403894d16c3ca276d790, + _:N73f9586a8a7d4b978afcb9cfe998050b, + _:N7c9974a53d5443c5831f3e7dc56073d0, + _:Nbbbec88245754e9d9390b9a11f0b67c2, + _:Nd33af007bad14a4594f7039df1c5df75, + _:Nd77657e0b19d459c931f64f48ed7e1a6, + _:Nfe1814d375d7456e843deb8cde1cf341 . + + ns5:VexVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N0781395df11e44a6a3186f0fa8908958, + _:N1d4668e7f12244a7a9407b898c9b0534, + _:Na5a538a0052340c0ba01747cca3d3da8 . + + ns2:EnergyConsumptionDescription a owl:Class, sh:NodeShape ; rdfs:comment """The class that helps note down the quantity of energy consumption and the unit used for measurement."""@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:N069fdf6673d440b8ab54670ad7906662, - _:Nc034445fd507418d8439a09bb2e562dc . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N904326509fc04cc4be66ea123ed9fdc4, + _:Na1cdda0a73e94e598b769cac4a5a5cb8 . - ns6:SafetyRiskAssessmentType a owl:Class ; + ns2:SafetyRiskAssessmentType a owl:Class ; rdfs:comment "Specifies the safety risk level."@en . - ns1:IntegrityMethod a ns7:AbstractClass, - owl:Class, - sh:NodeShape ; - rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:Nf3860ad4cc5d4d87be1f408701c9f435 . - ns4:ConfidentialityLevelType a owl:Class ; rdfs:comment "Categories of confidentiality level."@en . - ns2:SsvcDecisionType a owl:Class ; + ns5:SsvcDecisionType a owl:Class ; rdfs:comment "Specifies the SSVC decision type."@en . + ns3:SoftwareArtifact a owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns1:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N2b94274553ab4bc2bbc78307f39b3327, + _:N58b8de667bb54771976a5e86a8a8139a, + _:N5912892962274966938ef83f3f23c015, + _:Na1ce1658c3be4bc0b082944caae9ddea, + _:Ne03121e956234709bc0f8f288597ff50, + _:Nfbb5f5e996be44989d31d47d46540443 . + + ns1:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N61753ca6fa484199b143356d20b0476e, + _:N68e2aefd82ab40c59cc6c2bfeab0adc4, + _:N98018fef19484e2fae944af82b21920e, + _:Nca9532c3dd0b421e95d0800b68e3442a, + _:Nf7fd042770064703a84cd9039273e4f7 . + + ns1:IntegrityMethod a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N10f5cc15b506459db381c02764d60e76, + _:N7a48123f699948b5867af1fec0d7b88e . + ns4:DatasetAvailabilityType a owl:Class ; rdfs:comment "Availability of dataset."@en . - ns2:VexJustificationType a owl:Class ; + ns5:VexJustificationType a owl:Class ; rdfs:comment "Specifies the VEX justification type."@en . - ns2:VulnAssessmentRelationship a ns7:AbstractClass, - owl:Class, - sh:NodeShape ; - rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; - rdfs:subClassOf ns1:Relationship ; - sh:nodeKind sh:IRI ; - sh:property _:N28c546d9833444d7b7370a64f4274b1b, - _:N5c307bac3b90460f8b755b5d46827013, - _:N9fc754cd17fe403b9e6567ff39e96ef5, - _:Ndaecf52053104527964b081f8f6d4dfe, - _:Nf37cc853c16d47099115691bcb77f2e1 . - ns1:LifecycleScopeType a owl:Class ; rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . - ns2:CvssSeverityType a owl:Class ; + ns5:CvssSeverityType a owl:Class ; rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . - ns5:SbomType a owl:Class ; + ns5:VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns1:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N1a0a0b40de254f55a8372bba19b60496, + _:N74551d5c49b94ece99a5fdec0d58d233, + _:N90cb783276d74a2881e21a08abf01e2f, + _:Naa7e95f812804669b3e89daed8d27b21, + _:Nce6e2333750a40619f2e93e40be35d7e, + _:Nf507b9bee5ae4254bafe4ce3c72a9f18 . + + ns3:SbomType a owl:Class ; rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that tools may create."""@en . @@ -2613,49 +2652,47 @@ tools may create."""@en . rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI . - a ns7:AbstractClass, - owl:Class ; - rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; - rdfs:subClassOf ns1:Element ; - sh:nodeKind sh:IRI . - - ns7:AbstractClass a owl:Class . - ns1:ProfileIdentifierType a owl:Class ; rdfs:comment "Enumeration of the valid profiles."@en . + a owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property _:Nd6f4245b3ebe44e6b100782b191deb97 . + ns1:ExternalIdentifierType a owl:Class ; rdfs:comment "Specifies the type of an external identifier."@en . ns1:DictionaryEntry a owl:Class, sh:NodeShape ; rdfs:comment "A key with an associated value."@en ; - sh:nodeKind sh:BlankNode ; - sh:property _:Ne7755fef413944e6a5bd969d379e8410, - _:Nea611e5c42f94004b40d78331b3f6977 . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property _:N187a93895c7b43bea96131212a0ba3f5, + _:Nbd47cac50394462f9015e00ec4b449a6 . ns4:DatasetType a owl:Class ; rdfs:comment "Enumeration of dataset types."@en . - ns1:HashAlgorithm a owl:Class ; - rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . - - ns1:Element a ns7:AbstractClass, - owl:Class, + ns1:Element a owl:Class, sh:NodeShape ; rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; sh:nodeKind sh:IRI ; - sh:property _:N21d7410f6a994075adab308941db7bcd, - _:N22c1a3c4c4964b7f90a94e0af7e75d87, - _:N784fd0e933c9417b9e11ea351159df76, - _:N8746b43004e5422e8a87906a64680ef4, - _:N9547de9ed84145228bed37ef2d51f84f, - _:Ncd7fa1f2b5334cd680d0c04e40453667, - _:Nda26387d9677485d8554cf33b606d465, - _:Ne5992967c6784ac0a64f460548c9c73c, - _:Nf9cc156a3e084f8ab0ce054200c8fca7 . - - ns5:SoftwarePurpose a owl:Class ; + sh:property _:N00fcf1f501a749fc9cbbdbdf23a7aaa8, + _:N269b628c85f04f5d8a10fa3c500745a4, + _:N61b9a25cae674e199ce6572456d8e72f, + _:N675847984777421d9fb9b171cdf0bb53, + _:N7a66c734ced842b4913ff95c5f5cf452, + _:N951ec4cbce414b3bab847840bf18d59f, + _:Nbac401e4be1249dd86dd149952baf59b, + _:Nc3c21678fc9a459784f054a6954a9aa8, + _:Nf26016059c3e414da185e30155b543f5, + _:Nff33e8337dc8421d9e74b338e35a75d5 . + + ns1:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns3:SoftwarePurpose a owl:Class ; rdfs:comment "Provides information about the primary purpose of an Element."@en . ns1:ExternalRefType a owl:Class ; @@ -2664,1923 +2701,1997 @@ tools may create."""@en . ns1:RelationshipType a owl:Class ; rdfs:comment "Information about the relationship between two Elements."@en . - _:N00e5d1a9fc9f4e8ea643c5dec21372c9 sh:datatype xsd:anyURI ; + _:N00d83dee7aa44a7991821a46e83e5164 sh:class ns4:ConfidentialityLevelType ; + sh:in _:N2456bf573caa4efeab27607dfed5a451 ; sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns5:contentIdentifierValue . + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . - _:N00f0f016bff441178fb3b14b0f1ba310 sh:datatype xsd:string ; + _:N00fcf1f501a749fc9cbbdbdf23a7aaa8 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:standardAdditionTemplate . - - _:N015d97ba72604b6fa2e5fa44fa994d9a rdf:first ; - rdf:rest _:N5a9be7ba8fdb49af9acd6f2e114fd2b8 . + sh:path ns1:description . - _:N01b77c997a784a81856bfe55a59f0d26 sh:datatype xsd:string ; + _:N024478cff6eb4ef48dc45dabdb7b0a35 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:standardLicenseHeader . + sh:path ns2:informationAboutTraining . - _:N01e0073f9d2a49f49037b8e666018bbd rdf:first ; - rdf:rest () . + _:N0274510beacf46b0b7cd7048ff3cbb4d rdf:first ; + rdf:rest _:N3b50e4323e8b4d388d8d522e18a49070 . - _:N0295e624408541b9b840c231db039610 rdf:first ; - rdf:rest _:N9ee209fef169433cbe6e5201db0529b7 . + _:N02daaf1ea3874989948c16e26274de9f rdf:first ; + rdf:rest _:N06a4b77ca26e4742a10723dc3349c395 . - _:N045868218fe84846bfd5a8efe73f5f05 rdf:first ; - rdf:rest _:N3393c7f385f241039c50705b72f15549 . + _:N02fadd3757064be6a0b797d8675b611e rdf:first ; + rdf:rest _:Nef3e82bf7eac41aa8dc101eabd0f1815 . - _:N04c144f227684ce48b50371ca423d8ee rdf:first ; - rdf:rest _:Nb134dbc7f13f499887fd10287bcaba2e . + _:N03140b327b9d4620b37b847528c7140b rdf:first ; + rdf:rest _:N4d2df683a0ea4c39be288b78f9e61ca4 . - _:N04c56aaa0702449d89c679a6ae2d509e rdf:first ; - rdf:rest _:Nfc1e6fef13174b9e90d4ca817a331079 . + _:N034bf868068348fb92f2f33976cad5ae sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . - _:N04f6ef255f0f45e0843face78e6af32f rdf:first ; - rdf:rest _:Nf854d2bed3524a08aa85d987a15ae3b4 . + _:N036299b1f2af44eeb966da8a1217ac9e rdf:first ; + rdf:rest _:Nd6ca1bcbdc494e39a9c1a4da0c52a0b3 . - _:N058b8decd10442dc9da66c8ec337fe89 rdf:first ; - rdf:rest _:Nfd92f942c5e84eb79e459f1d3f1ac4a6 . + _:N037a9f94d4da4593a56a6804fca57483 rdf:first ; + rdf:rest _:N163b018b3d984833a5523252ed920c58 . - _:N065968ff4b1d468f80d208a94f728820 sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns1:locator . + _:N05edbc4959e844438800e546abaebaea rdf:first ; + rdf:rest () . - _:N069fdf6673d440b8ab54670ad7906662 sh:class ns6:EnergyUnitType ; - sh:in _:N62354c6ede0641c2a17958df1fce06bf ; + _:N06465237afe4406eb4803558f7a57c08 sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns6:energyUnit . - - _:N0809050b78e64f1c8f5666cc9ffc92a6 sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns5:attributionText . + sh:path ns1:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:N08242c50c463457c930eba2a9659cdf9 rdf:first ; - rdf:rest _:N2be1468f91bc454082c8d0af333d205f . + _:N06a4b77ca26e4742a10723dc3349c395 rdf:first ; + rdf:rest _:N03140b327b9d4620b37b847528c7140b . - _:N082cb9b35b7b4791aa1d9debf6080789 rdf:first ; - rdf:rest () . + _:N0713bbcf2b1f4e23b912a81e12b5d270 rdf:first ; + rdf:rest _:Nbd013d07f45a42d99931fe619ee4ca95 . - _:N092e19c1eb954e979b39018f62ba840a rdf:first ; - rdf:rest _:Ne9348ee72a18435bbcdf5bb338a3fcb6 . + _:N072d6f5c7eee40859e3a93d05034536f rdf:first ; + rdf:rest _:N4a3178783c58491bb646a056a8dbb37a . - _:N094c19bcead34504bd0d0b85f8ba1078 rdf:first ; - rdf:rest _:N0295e624408541b9b840c231db039610 . + _:N0753f471dae945e885cde15702c705bb rdf:first ; + rdf:rest _:N619e2a32fb994ed69f916340e12ed7f3 . - _:N097b38569ab54334ba50aa2055c21bf9 sh:datatype xsd:string ; + _:N0781395df11e44a6a3186f0fa8908958 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:statusNotes . + sh:path ns5:statusNotes . - _:N0ac53be222cb49b7af09086cfaaed1db sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path . + _:N07868b0098174c478ac47f3fbc946ff0 rdf:first ; + rdf:rest _:N2061c93cd5774c61823bf76c952d5242 . - _:N0c63fb970906431f8ed02f6980609420 rdf:first ; - rdf:rest _:N727e38139bfa40d9b56e586cf9ac5bdb . - - _:N0da978c5d15a4e0ca2abb1d9a336eba1 sh:datatype xsd:dateTimeStamp ; + _:N07cb32d0626a45cfbea37a7dd2a8b854 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:builtTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - - _:N0eeb34b48dec4bf48dbba6ee4c6f829f rdf:first ; - rdf:rest _:Nd43d5a2d7d1648598329bd2d9c226af3 . + sh:path ns1:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . - _:N0f509a18a72e4662a7e7fc2fe485c3ac sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path . + _:N0a961d271f304c8cbb2e0a1307a9d8ad sh:hasValue ns6:License . - _:N0f7bf6e1b6a84c71b96db0ed65f445fd rdf:first ; - rdf:rest _:Ne0a4093971cc4c949d28cdad8bdcb48d . + _:N0b3155ddb4cc46678a8dadb3eb9e5e43 rdf:first ; + rdf:rest _:N1dd7c94072d1478ca91bee2c7af967a8 . - _:N0ffbbdd15b364d55bc0212ba5c32739b rdf:first ; + _:N0b353053b3cd41e89351acf39abb719c rdf:first ; rdf:rest () . - _:N100bd4537cc64a3c9da777da1eb0ce8e rdf:first ; - rdf:rest _:Nf9ea823dce8b4178968bb583746dda07 . + _:N0b728d22a9674ecc87af12fde5aae61c sh:class ns1:ExternalRefType ; + sh:in _:N3899f43be1b142148dc7af5c1cd6a1b9 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:externalRefType . - _:N1013910040b04b98b3a99c32bab64312 rdf:first ; - rdf:rest _:N60e06f4852a44b05b3dfdbd769a39b3a . + _:N0bf807da343b4645904db560abf69583 sh:class ns1:ProfileIdentifierType ; + sh:in _:N1bd597d8851e43b79e3bde3fb6388627 ; + sh:nodeKind sh:IRI ; + sh:path ns1:profileConformance . - _:N107aa4617cfc41499f0678d83f303c24 sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:created ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + _:N0c3b30ca2bdf4cb1839bdc608bc41186 rdf:first ; + rdf:rest _:N0713bbcf2b1f4e23b912a81e12b5d270 . - _:N1192fb0a041f4b77a8c069659dad0770 rdf:first ; - rdf:rest _:N57470b62e6a142f9928ab5bfe4606b0a . + _:N0c49370c41124d50ac6081418cb2432d rdf:first ; + rdf:rest _:N511c01e1b6a146c3bf99fe3e88272f2e . - _:N124216cccbad47f486b33fd9dce70c06 rdf:first ; - rdf:rest () . + _:N0cac787ed3f3421fa6687df4da790a0c rdf:first ; + rdf:rest _:N44928392b4d8458f847c7fd69533d2ee . - _:N1288d377b72c44a58a576536a10d2030 sh:datatype xsd:anyURI ; - sh:maxCount 1 ; + _:N0d09683a42354debacdd0b0625119609 sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ns5:homePage . + sh:path ns1:identifierLocator . - _:N137d0a75fd374daeb077f228da53897d rdf:first ; - rdf:rest _:Nc2c6dbe5330f4b17ae33727e45f3e9d4 . + _:N0d2bee57931544d786ff3bc0afb223b0 rdf:first ; + rdf:rest _:N8f1dd8dbe42e46fb934adf94515048b1 . - _:N13b921afee3a413e9a3b06c638bf7824 sh:class ns1:AnnotationType ; - sh:in _:N35bab262301147c0b1b11e0643a659c6 ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:annotationType . + _:N0dc54ccc3f8d4afe897d7be97f9f6928 rdf:first ; + rdf:rest _:N6946aaeee89545da9d91b8527c54139a . - _:N14c84f27ec214a8aa7744493af4f1b05 sh:datatype xsd:anyURI ; - sh:nodeKind sh:Literal ; - sh:path ns3:seeAlso . + _:N0e31c4b45c4b442e9f1d32ab917a76ae rdf:first ; + rdf:rest _:N0e471571470240e5872be57bfd58fed9 . - _:N150b1880a8e64af2af56beec5b8f629e sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns4:anonymizationMethodUsed . + _:N0e471571470240e5872be57bfd58fed9 rdf:first ; + rdf:rest _:Ndbf7c5384f2242b98dd62b6a8d6a503f . - _:N15fc27df69c64453aa991097a3de803a sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path . + _:N0e4d30a5dd60459dbbb5efc7333deb37 rdf:first ; + rdf:rest _:N10ab85203a394bd3ba6ef86074d64233 . + + _:N0eb0fa7732fb4a2db7455731d6a1ce53 rdf:first ; + rdf:rest _:Nd73c69088f734dffb4cc9539c637aecf . - _:N16549d2169e94a4d8d291368d2d9f71b rdf:first ; - rdf:rest _:N315a049473324a5d82678153bc504c4b . + _:N0f4d0a9a8e7d46a0b9cf255274bcce6b rdf:first ; + rdf:rest _:N70cf024bfa9e40a08de101b510631f60 . - _:N1685d66aa43c40318d7f1a9af5281dbf rdf:first ; - rdf:rest _:N62048f401c7a408d8e6074d8172edd5b . + _:N0f568f8825144082a14a0e000b8ff13f rdf:first ; + rdf:rest _:N89d641eef49d4a5f9ef42bfe5c4221bd . - _:N18a257cc80b34d42949a3f99d880f84c rdf:first ; - rdf:rest _:Na9d7622cd7e94569b9540b0dc94308f3 . + _:N10002d3538094764a9c6d3893234cd04 rdf:first ; + rdf:rest _:N037a9f94d4da4593a56a6804fca57483 . - _:N18ed9985cff84e34807e6aa0a780a707 sh:datatype xsd:string ; + _:N105628f6c8b040edb9db617f35f30bec sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:context . - - _:N193f441ef82a4c6f872a77fdc536a646 rdf:first ; - rdf:rest _:Nb3642a2160e24cfd8d98230c09e472be . - - _:N1a58fcdd17f342af8cfbbbb7d7a9ed87 rdf:first ; - rdf:rest _:N3cfc6c76a3744d609a80a0095af2dcad . + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:N1af3b716f6264641976ddd0da85d3b1a rdf:first ; - rdf:rest _:Nbe2a417f2d204fcb9bb60e5d58b0044f . + _:N10ab85203a394bd3ba6ef86074d64233 rdf:first ; + rdf:rest _:N0b353053b3cd41e89351acf39abb719c . - _:N1b790cf0ad524fad8d4f129ccda94fa6 rdf:first ; - rdf:rest () . + _:N10f5cc15b506459db381c02764d60e76 sh:message "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:Ne41f054fce23460dba46863153e67567 ; + sh:path rdf:type . - _:N1b7b0e6303e14427817b4b206ef940ce rdf:first ; - rdf:rest _:N3b17c87267444ae5aae5e12fc54addb6 . + _:N1256cfafa26e453a9d5f8b08cc5920d7 rdf:first ; + rdf:rest _:N4182e8c878544ebb842682b1ece2bd3a . - _:N1b970adab24f43699ff9033a7892334e rdf:first ; - rdf:rest _:Nbb554a0d397845a2a23c335ba508c87e . + _:N1314ef461724483f9bd5c56d939b17c4 rdf:first ; + rdf:rest _:N4dcad64fd9cf4af2b8d6ea98d6c5450a . - _:N1b99de6ce73e49328dc792c34798532e rdf:first ; - rdf:rest _:N67b0d956754a43a5b927ae155984d43e . + _:N132cde65c9b14a1694d400388aecf0cc rdf:first ; + rdf:rest _:N23a349d7f4a14351adf4c70293152926 . - _:N1cfe20f0d2a049b7b751bd3aa0b4a09d sh:class ns1:PresenceType ; - sh:in _:N5332cee7bc2443a3b1d7513e03dbfdca ; + _:N13396ee366a94de388e2aff47754e81f sh:datatype xsd:string ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns6:useSensitivePersonalInformation . - - _:N1d5173c248f14304bd9adef81206e060 rdf:first ; - rdf:rest _:N6a3cf2ffe9b9430390c5ce23bd48fce4 . - - _:N1dc8357fca8043ee86196ff6f1400d3f rdf:first ; - rdf:rest _:N8411f84580e2497da97dab50dc3b4df3 . + sh:nodeKind sh:Literal ; + sh:path ns1:issuingAuthority . - _:N1e4dbab89bc942d6934c8d53674bbf1b rdf:first ; - rdf:rest _:N70201d67aa3f481b9abefcb469f48d98 . + _:N1358bfc70dc14db6aa3a799228bc2fdd rdf:first ; + rdf:rest _:N4091b2fb3d5c417fad7305927740d1d5 . - _:N1f248bb10ce740cc9124e394b35259ba rdf:first ; - rdf:rest _:N4b5795c987f1446dbda919350438fd0a . + _:N13acbf7806c648f19f147c9073a04385 sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . - _:N1f599cc99ec04100bcd965c2ec4fdbfe sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns4:intendedUse . + _:N13f4d81403034faaa93ea1abc3bd3d91 rdf:first ; + rdf:rest _:Ncff880d9e9c24887adcf512cbce2a444 . - _:N1fb6b0088d4c43e7b3c2fc9342ceaa64 rdf:first ; - rdf:rest _:Nd134630c82914216aaa76b9680232c0c . + _:N14d2ccc3ee7749088945c0ba96e7a88a rdf:first ; + rdf:rest _:N2dbc8b0a30da433a94050a3ab1190bb8 . - _:N1fcc6df939fe4ff6b57639467f64eff7 rdf:first ; - rdf:rest _:Ncdeee899859040f3903c3212d22c1507 . + _:N14d7232930234cad917631e1993d7ccd rdf:first ; + rdf:rest () . - _:N20563c47790549c1a3121000a834c4cb rdf:first ; - rdf:rest _:N870a0a4f2a794e2aae2a22975ec6fa49 . + _:N163b018b3d984833a5523252ed920c58 rdf:first ; + rdf:rest () . - _:N208b27c07ce6469e9114d5b80dfc4f8f sh:datatype xsd:string ; + _:N163fe4499b2a454a9641b23118bf53ae sh:class ns6:ExtendableLicense ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:contentType ; - sh:pattern "^[^\\/]+\\/[^\\/]+$" . + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:subjectExtendableLicense . - _:N21d7410f6a994075adab308941db7bcd sh:class ns1:ExternalRef ; + _:N1647e706f6764e7d9ec4e0aa8979d0c6 sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:externalRef . + sh:path . - _:N21edc1b1c7c94a53a14c23900721c4b8 rdf:first ; - rdf:rest _:N3e6f3584b185432c90902e8ec47e33fd . + _:N168bcfc831bd4f85b6a82742eb7ad4f5 rdf:first ; + rdf:rest _:Ned1f0afb78d3460c9478383abf3da36b . - _:N2279545cee4f47fb9986df1b11a68c0f rdf:first ; - rdf:rest _:Naa8dde945f86469da5292aed6e8c1634 . + _:N16cb468a2dcd423bb3654b71a6f00062 rdf:first ; + rdf:rest _:N7b5b4ad7f9a54d91a292ac0738539050 . - _:N229d11f8176c4bb7acd631c6b7187287 rdf:first ; - rdf:rest _:Nc6fa5c5fdf614c2f88c2b4fc315663fb . + _:N17c879855daa4fd7b7d7ef9da34e7ea6 rdf:first ; + rdf:rest _:N8ff2b7ece321489a9ff262a2c697c89c . - _:N22c1a3c4c4964b7f90a94e0af7e75d87 sh:class ns1:ExternalIdentifier ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:externalIdentifier . + _:N184c02d9c66a4e9d988d681d20c5ddc6 rdf:first ; + rdf:rest _:N32f50a51e84f4a2499a5d17f54bbed6b . + + _:N186b972a57284ae1946b3f7d8e762830 rdf:first ; + rdf:rest _:N66595c518c6248f69bdca82dccebf454 . - _:N2305488d52f34ae3bd7f3de8a96329e4 sh:datatype xsd:boolean ; + _:N187a93895c7b43bea96131212a0ba3f5 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:isDeprecatedLicenseId . + sh:path ns1:value . - _:N2454277637b14ff0b3c86e707c803ebf rdf:first ; - rdf:rest _:Nf5e9739ded9643ef8a3fe72118c28135 . + _:N1a0279389d714631b1d12935e9f2b014 rdf:first ; + rdf:rest _:N70cbc4a60eda4e648df0df882fab278d . - _:N26117aef00804f4b9d67298a6fd9c1de sh:datatype xsd:string ; + _:N1a0a0b40de254f55a8372bba19b60496 sh:class ns1:Agent ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns3:standardLicenseTemplate . + sh:nodeKind sh:IRI ; + sh:path ns1:suppliedBy . - _:N2684328da52949f091f313d918153601 rdf:first ; - rdf:rest _:Nbb8a5798239c4e919f8766e4ec36f99c . + _:N1a8882804ac24104946e7afa0b36905a rdf:first ; + rdf:rest _:Nc7b49cc0a08745e08e5ba42ee492184f . - _:N2751c2ba1ffd40bda218899993caf814 rdf:first ; - rdf:rest _:N731ab899248d4b07adeacd5aafffa0bf . + _:N1aac3c1c2ffb45d79910e133d9ec02f9 rdf:first ; + rdf:rest _:N3c34004e669a4f809790739b55299420 . - _:N2751f527dac048b29b31dea36517c56a rdf:first ; - rdf:rest _:N4a639a72aca4429f900632616a34bef4 . + _:N1bd597d8851e43b79e3bde3fb6388627 rdf:first ; + rdf:rest _:Neff5f08fa9fd4aaeb51026e2484443c7 . - _:N2757a283e93b45ad88b85a593725d092 sh:datatype xsd:string ; + _:N1d4668e7f12244a7a9407b898c9b0534 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:contentType ; - sh:pattern "^[^\\/]+\\/[^\\/]+$" . + sh:path ns5:vexVersion . - _:N275d7c15ea6640618cb7cde014c0aa3e rdf:first ; - rdf:rest _:N4707a6558f8643199e75a488fd156a09 . + _:N1dd7c94072d1478ca91bee2c7af967a8 rdf:first ; + rdf:rest _:N34cf4751490f48f9852ff2fa143a6321 . - _:N27a589ebe1bb40c483985fcde9a2d5f2 rdf:first ; - rdf:rest _:N3daabc6c6db94e5596afc49544cf4f73 . - - _:N2895a64ec18c48e68dbf01572a5d0cc8 sh:datatype xsd:string ; + _:N2056bd91659a4260a6eb99a0cbdd9f14 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:obsoletedBy . + sh:path . - _:N28c546d9833444d7b7370a64f4274b1b sh:class ns1:Agent ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:suppliedBy . + _:N2061c93cd5774c61823bf76c952d5242 rdf:first ; + rdf:rest _:N6369a0cffc0445e888c1e30a54a5be5d . - _:N28c8fedea4324ffa8c41338d5fae0fe5 sh:class ns1:PresenceType ; - sh:in _:N100bd4537cc64a3c9da777da1eb0ce8e ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns4:hasSensitivePersonalInformation . + _:N210fbcf85b384009a2cee68e4a7e6b78 rdf:first ; + rdf:rest _:N02daaf1ea3874989948c16e26274de9f . - _:N293889ce0f674698af83932fc5a7b302 sh:class ; - sh:minCount 2 ; - sh:nodeKind sh:IRI ; - sh:path ns3:member . + _:N220b4463e39147e99e8eeeb9974c5370 rdf:first ; + rdf:rest _:N75f6c4472b7b45349200afcce0dbacef . - _:N29943647d0a54ed3bbf4236b7f26fed8 sh:class ns6:EnergyConsumption ; - sh:maxCount 1 ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:energyConsumption . + _:N230a41f8c8d549b8844a37595ce56867 rdf:first ; + rdf:rest () . - _:N2b4ba84d3c35422383f41faeffab544e rdf:first ; - rdf:rest _:N5ca015566baa49e1be7bab3e5ca1b85a . + _:N236307149ca247fcad8df1b0dd41fcfc rdf:first ; + rdf:rest _:N88ce0438020d4326924db53dec9bd6b5 . - _:N2bae390e06fc47d4916dcf58441c0065 rdf:first ; - rdf:rest _:N1e4dbab89bc942d6934c8d53674bbf1b . + _:N23a349d7f4a14351adf4c70293152926 rdf:first ; + rdf:rest _:N6e913b09266e498887238fae6898e289 . - _:N2bdf11c1b85e405a835c07e19f150556 rdf:first ; - rdf:rest _:N1685d66aa43c40318d7f1a9af5281dbf . + _:N243ef6907efb40d38e00f4430d63fc19 rdf:first ; + rdf:rest _:N9ed65925a89e40e8b7faaa925d739c72 . - _:N2be1468f91bc454082c8d0af333d205f rdf:first ; - rdf:rest _:N2751c2ba1ffd40bda218899993caf814 . + _:N2456bf573caa4efeab27607dfed5a451 rdf:first ; + rdf:rest _:Nb40076de31ba4cc08826656559e10385 . - _:N2c65a23cf781468598b84d1456d825fb sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + _:N250a4372ab014e66ba3eec07accb85dc sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . - _:N2d1a418cbe234eceb99e5900d573b9f0 rdf:first ; - rdf:rest _:N2454277637b14ff0b3c86e707c803ebf . + _:N25b71b41baf8408a91b66336f376a5b6 rdf:first ; + rdf:rest _:N29e8eb1e03be45ae92093e6937585f14 . - _:N2d8b30121bba468383f1a52208a233a0 sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns6:standardCompliance . - - _:N2e7af3d6eac3464eafe353090d745bf8 rdf:first ; - rdf:rest () . + _:N261545ecf40d4f65bf47dc050598e90f rdf:first ; + rdf:rest _:N451bba51c46a4c9d9a2343aef3356453 . - _:N2e8a1060d29d437ba2a94908211b9554 rdf:first ; - rdf:rest _:N2751f527dac048b29b31dea36517c56a . + _:N261c61aa119e4f4e9ce3c9387fb29c9f rdf:first ; + rdf:rest _:Nb9165bd1d4e8406eb56e237a892cfba4 . - _:N2fa63ba2278342bb9c50f3eea6a8c45f sh:datatype xsd:dateTimeStamp ; - sh:nodeKind sh:Literal ; - sh:path ns2:actionStatementTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + _:N264b55b33a4549a6a131d79763879896 rdf:first ; + rdf:rest _:Nc0c94fed0eb041ef8c4fe70f4b1fd7c0 . - _:N2fd6d6c96c7b46dabc958e2ddb32657c sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:validUntilTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + _:N269b628c85f04f5d8a10fa3c500745a4 sh:class ns1:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:verifiedUsing . - _:N301f290b72884ba28b9bf8cee6c7d12e rdf:first ; - rdf:rest _:N79f0bab894254f7aa8a118661d65f476 . + _:N27a8c8f61e944083abcc670fe4586df8 rdf:first ; + rdf:rest () . - _:N3051e5f9bfdf45b19c416045118502ef rdf:first ; - rdf:rest _:N6ca1589ab2b443ac91b26c54805eb352 . + _:N2847f93323fd468eab2b926c5715c994 rdf:first ; + rdf:rest _:N4a56b875349e44729e9aca40972c86cd . - _:N30a7d396784a431ba0eb686ae5b7e645 rdf:first ; - rdf:rest _:N36ba7d6688234724ae43de9320a88887 . + _:N288949a61054447689377b531414e0b7 rdf:first ; + rdf:rest _:N41fda4edc0294fce84cdb5688d8ef9ef . - _:N30c0e029fe894fb8809a14d4f50d81cb rdf:first ; - rdf:rest _:N1af3b716f6264641976ddd0da85d3b1a . + _:N28c7097edd884a9b92697ec6b6729dc9 rdf:first ; + rdf:rest _:N02fadd3757064be6a0b797d8675b611e . - _:N30ddffc861f14836a83cde39db10d792 rdf:first ; - rdf:rest _:Nd698c35793ab47df8eaa1d9f6fe9f131 . + _:N29cadfcf5dfa4e73b1b0f56fa6e4352f rdf:first ; + rdf:rest _:Nb2747510507b404f9243bfd7225f629d . - _:N312b811b38e3467eb37fbf91bc0dd93b rdf:first ; + _:N29e8eb1e03be45ae92093e6937585f14 rdf:first ; rdf:rest () . - _:N315a049473324a5d82678153bc504c4b rdf:first ; - rdf:rest _:N8c3b465b415b409d895456c2f6ee7c50 . + _:N2a72f2e0c3d44dd5ac4c0633f336d556 sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . - _:N31d0b150d561413c9ecc2d72bfc66683 rdf:first ; - rdf:rest _:N8b959a4ad4834d5a96d17ac52b3571cf . + _:N2aa14aff363e4fc1ab2ed86f71eb8873 rdf:first ; + rdf:rest _:N6ac0694afb0c40c1bb0988b0569f0cb4 . - _:N320baf3ea5274f3393919c1999ded96d sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns6:modelDataPreprocessing . + _:N2aa73eafba6f4d55938fb60c96ff2379 rdf:first ; + rdf:rest _:N8b5253826157456ba3297cf9f4f8db15 . - _:N32c6410af083493aa3238362e1cbd67e rdf:first ; - rdf:rest () . + _:N2b7fa052bf664f2a9e1923831d282602 sh:class ns3:FileKindType ; + sh:in _:Na5ef7f1675b84ce99e4f4ca36d200a91 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:fileKind . + + _:N2b94274553ab4bc2bbc78307f39b3327 sh:class ns3:SoftwarePurpose ; + sh:in _:Nadd6173eaf8b4550a3ec8c90524cc599 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:primaryPurpose . - _:N3393c7f385f241039c50705b72f15549 rdf:first ; - rdf:rest _:N52a5c2aa05cb4f3da33bc1a69bc054d3 . + _:N2c7697a923534e9988689746f1d03e41 rdf:first ; + rdf:rest _:Nf4e0c03b381d4fb584571d8fdd2ca0a7 . - _:N341003cfbb2341dc85b4e126aedddb6f rdf:first ; - rdf:rest _:N40997879b8144df69163822d2df5baef . + _:N2dbc8b0a30da433a94050a3ab1190bb8 rdf:first ; + rdf:rest _:Nf10e65ca64f84003827c23ef339743e5 . - _:N349d882683524e14ae98f62402cadf06 rdf:first ; - rdf:rest _:N2684328da52949f091f313d918153601 . + _:N2f8145031850475ba01bc466221debed rdf:first ; + rdf:rest _:Nfb655ff9dcc6442baa6046d411f0624c . - _:N353611490d3c430e8e861c3a903369fb rdf:first ; - rdf:rest _:N3d67d474d6584406964ab34eebc78a17 . + _:N30a10bdc909f4c4bb84f02821147b416 rdf:first ; + rdf:rest _:Nf6a05248229d4fe292d04534a4c4573d . - _:N35bab262301147c0b1b11e0643a659c6 rdf:first ; - rdf:rest _:Nf1326177a8f54cd38fb0d7aae60d69bf . + _:N30d1dbbf97fb456eb18d38b76c8004d3 rdf:first ; + rdf:rest _:Nece0b4f721a847f98727202b50f4a753 . - _:N35cc536a7b8e4401b4f4e6b8982306e1 sh:class ns2:VexJustificationType ; - sh:in _:N6f651952b35948a8be2adee1bac83c6f ; + _:N30d5cdb21c144005b1d74c81aa0e129e sh:class ns5:SsvcDecisionType ; + sh:in _:Nbffaba2351c747ef8e380b89888a5f14 ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns2:justificationType . - - _:N36ba7d6688234724ae43de9320a88887 rdf:first ; - rdf:rest () . + sh:path ns5:decisionType . - _:N37712d80dea04088b1ab530db3aaa7fd rdf:first ; - rdf:rest _:N1192fb0a041f4b77a8c069659dad0770 . + _:N315dc3dd043c41a49ffaaba74d10eeb0 rdf:first ; + rdf:rest _:N4e6142c3e2dd4f3f9e2aed1df9452bc7 . - _:N37e9effec5ca4011a388b871588a9bfc sh:class ns5:File ; + _:N328adb4bb1ec422084a2169890188a03 sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns5:snippetFromFile . + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . - _:N3851673c346e4c9cacc8cf50837d6cfb rdf:first ; - rdf:rest _:Nb9bfca375550473584a9365efe4f29a3 . + _:N329ecc1447f349cc968623ddffe6a2f7 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . - _:N393d2d53bef34fe0846e87c7df91588d rdf:first ; - rdf:rest _:Na1ab85fdd72146cfb0eb275a20aed6fb . + _:N32f50a51e84f4a2499a5d17f54bbed6b rdf:first ; + rdf:rest _:N694be39aecbe44d49f3850275de952ec . - _:N3b17c87267444ae5aae5e12fc54addb6 rdf:first ; - rdf:rest _:Nb6697d6a50a946d9a78f5c1d507fee30 . + _:N33da303c78e142a2acc0db12f3ee6686 rdf:first ; + rdf:rest _:Nedaa28cbd856413e95e7805cf2d255dd . - _:N3b3c65b750eb401889ee9800adc1da9c sh:class ; - sh:minCount 1 ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path . + _:N348ad67a2abe4f9d929b1e20acc594b5 rdf:first ; + rdf:rest _:N52399fdf517c416ebb2e470463b71b5d . + + _:N34cf4751490f48f9852ff2fa143a6321 rdf:first ; + rdf:rest _:Nd1b797da281643468add752e036349fd . + + _:N36b7d391e5cf402199bf454d82f5735c rdf:first ; + rdf:rest _:Nfbd5a9c0923c423a84d0bb8fef89f4a3 . - _:N3be22ea4244a43d6af104de9fed1b4fb sh:class ns5:ContentIdentifierType ; - sh:in _:N193f441ef82a4c6f872a77fdc536a646 ; + _:N377b547285074591a904911ef1fc1977 sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns5:contentIdentifierType . + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:N37829b662873490d9964f7bbbc300fce rdf:first ; + rdf:rest _:N3c8c7c06f10e44fea576f974877ed15b . - _:N3cb5c5f5df694e3aaf52da4c410b011e rdf:first ; - rdf:rest _:N015d97ba72604b6fa2e5fa44fa994d9a . + _:N3899f43be1b142148dc7af5c1cd6a1b9 rdf:first ; + rdf:rest _:N0274510beacf46b0b7cd7048ff3cbb4d . - _:N3cd13df3eb014a37bb535428e0c037e6 rdf:first ; - rdf:rest _:N275d7c15ea6640618cb7cde014c0aa3e . + _:N38aeb59117654398b393a546eaaa5fd9 rdf:first ; + rdf:rest _:N17c879855daa4fd7b7d7ef9da34e7ea6 . - _:N3cf591f215db46d1b2957c0113ce16f8 rdf:first ; - rdf:rest _:N16549d2169e94a4d8d291368d2d9f71b . + _:N38e1279dca3f4e53be4eb3245a0e4ec2 rdf:first ; + rdf:rest () . - _:N3cfc6c76a3744d609a80a0095af2dcad rdf:first ; - rdf:rest _:Nbe19063f503a46969af5f11469f71a33 . + _:N39638ea4b52f4236b7a808cb979d2f4b rdf:first ; + rdf:rest () . - _:N3d67d474d6584406964ab34eebc78a17 rdf:first ; - rdf:rest _:N2e7af3d6eac3464eafe353090d745bf8 . + _:N3b50e4323e8b4d388d8d522e18a49070 rdf:first ; + rdf:rest _:Nac0a6f045e7e4efd9dbaf01201286a14 . - _:N3daabc6c6db94e5596afc49544cf4f73 rdf:first ; - rdf:rest _:Ne6082a08d51b4476b3a983aafaf1d69e . + _:N3b695bebf32746039b555b8460ffe552 sh:message "https://spdx.org/rdf/3.0.1/terms/Extension/Extension is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:Nb8a14d0c45314542aa2d6a98232399be ; + sh:path rdf:type . - _:N3daf4b35020144689a44f0ff15ab9244 sh:datatype xsd:string ; - sh:maxCount 1 ; + _:N3ba51db196c04386ae47cb64aab6c95c sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ns3:obsoletedBy . + sh:path . - _:N3df9880d78624ddba1dd8e35a428b9c9 sh:datatype xsd:boolean ; + _:N3bf9008e5422473bb689602da04ccca1 sh:class ns1:Element ; sh:maxCount 1 ; sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns2:exploited . + sh:nodeKind sh:IRI ; + sh:path ns1:subject . - _:N3e048db4a4e747afb8dbf69ebcfef3c7 rdf:first ; - rdf:rest _:N6a4847abbdd84dbb8e43386c5d710563 . + _:N3c163fcab8684aa09c61e78b4cbb9b38 sh:class ns1:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:to . - _:N3e6f3584b185432c90902e8ec47e33fd rdf:first ; - rdf:rest _:N5f35c1f648d4471ba9ad3e7fc90e56b7 . + _:N3c34004e669a4f809790739b55299420 rdf:first ; + rdf:rest _:N5a0ed5449f124c1e9ea7b05f0826cabd . - _:N3ed90f3640954f3cb8ac8478cc923b35 rdf:first ; - rdf:rest _:Nee5028549c054614bcad84bd05b4e1a7 . + _:N3c8c7c06f10e44fea576f974877ed15b rdf:first ; + rdf:rest _:N79b4dcdd054d4ca8a87fc86377c9366b . - _:N3ef3340b9a594445b7754965e6a0adaf rdf:first ; - rdf:rest _:N941027defe6c4c49915b8fb72263813e . + _:N3d9237b249544033acbf7d94cac2b424 rdf:first ; + rdf:rest () . - _:N3f1a11bf8f004d80a83fff483af24469 rdf:first ; - rdf:rest _:N7884508b0c584d0288f2250c1ee3bc89 . + _:N3de741ac343042e6ac53564501076e44 rdf:first ; + rdf:rest _:Ne0ff4ba19d0a41c18c6ccfc733f2193d . - _:N3f6ce06e6ca2446781e41b064c3d1d58 sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:statement . + _:N4091b2fb3d5c417fad7305927740d1d5 rdf:first ; + rdf:rest _:N683c5b7b252949bda929dd4befe8bb50 . + + _:N40bcef929ef64825a68929a36aefa27c rdf:first ; + rdf:rest _:N4d92ede494e34e51ba6eca91292dc0dc . + + _:N40f9e58aac214052a173ad93b4ed57e9 rdf:first ; + rdf:rest _:Nf81435c80dee4c1db825f1917f62e947 . - _:N40997879b8144df69163822d2df5baef rdf:first ; - rdf:rest _:Nc05797f950af44fbadd42eee2e56df6c . + _:N4182e8c878544ebb842682b1ece2bd3a rdf:first ; + rdf:rest _:Nae7b37ebeef141519b9f1102ae1b30c5 . - _:N40b61fa0587f469bb27b3e4ece9283bf rdf:first ; - rdf:rest _:N81774ccb63bb44f59726b12497ed50c2 . + _:N41fda4edc0294fce84cdb5688d8ef9ef rdf:first ; + rdf:rest _:Ne06f01bddfb24f69a9e1c0ba9694b11d . - _:N419137dca06848e2a161d5eaadc9992f rdf:first ; - rdf:rest _:N3e048db4a4e747afb8dbf69ebcfef3c7 . + _:N425d570f86674f7facee623f8d84a311 rdf:first ; + rdf:rest _:Nbd45f3e248c84b27b2e1a0da67d47a71 . + + _:N4278c3d777ea4ebd81cd23af80459c2d sh:class ns5:CvssSeverityType ; + sh:in _:N82b5fa65536b400a809bd5f3104f6ec0 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . - _:N41aee74b0dbe4609888f3e3488e75e26 sh:datatype xsd:string ; + _:N4382805b6a5947d38ffcfd8b182bddbf sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:standardName . + sh:path ns5:score . + + _:N4466be96ec5a4942b916c3f1fad2d3ee rdf:first ; + rdf:rest _:N14d2ccc3ee7749088945c0ba96e7a88a . - _:N42775851ecec45ee90ee1fe5c1071993 rdf:first ; - rdf:rest _:N4fd4703e2c5d4687bed9b05563fc9cda . + _:N44928392b4d8458f847c7fd69533d2ee rdf:first ; + rdf:rest _:N0b3155ddb4cc46678a8dadb3eb9e5e43 . - _:N42dac2d2cbe6407596e2fb585812097d rdf:first ; - rdf:rest _:N341003cfbb2341dc85b4e126aedddb6f . + _:N451bba51c46a4c9d9a2343aef3356453 rdf:first ; + rdf:rest _:N731241b6024d4e109893eb1354404ec5 . - _:N4379f82c1b44400197a0281504402fc5 sh:datatype xsd:string ; + _:N4538304380bf48b895869aa8dbea3275 rdf:first ; + rdf:rest _:Ne223bb746dc9463bbbe16ca844619e98 . + + _:N453a2981f56c4d3a943752e7740f87fd sh:datatype xsd:anyURI ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:comment . + sh:path ns3:contentIdentifierValue . - _:N441c940eb087403188d7f17bd5a55a61 sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path . + _:N45481eab750645b4929b7b63c8ca7916 rdf:first ; + rdf:rest _:Nf94717c65e4f4b86b4df261ecf26650d . - _:N442fd7eee89f41b2a0f43bb6b2a05372 sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:metric . + _:N4571ded3acc34f068931feecaa278a44 rdf:first ; + rdf:rest _:N1aac3c1c2ffb45d79910e133d9ec02f9 . + + _:N45b62edbd5f3406dba20232288ec19fd sh:class ns3:ContentIdentifierType ; + sh:in _:N0eb0fa7732fb4a2db7455731d6a1ce53 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:contentIdentifierType . - _:N443dd85c241c4fe58205e0b7c7f18034 rdf:first ; - rdf:rest _:N9f5fcae561fb42dbaa23d4b2cbedef0a . + _:N461fe7f9c28b4d81a4fb17726fc9adf6 rdf:first ; + rdf:rest () . - _:N4477c4b31f20446998b8dff00cd309b3 sh:class ns1:ExternalRefType ; - sh:in _:Nbf34bde0e54243da9c73928c648b8ad7 ; + _:N47d32bc3b4e04c9ab083ec76d4f22585 sh:class ns6:License ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns1:externalRefType . + sh:path ns6:subjectLicense . - _:N4545916c069c4e0ab8f2f3c3e582d429 rdf:first ; - rdf:rest _:N2279545cee4f47fb9986df1b11a68c0f . + _:N4881d1614aa0403894d16c3ca276d790 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:additionText . - _:N456086b235914b4f9bd89adfd54de37c rdf:first ; - rdf:rest _:N99069f06ac76429c9f76e68132e89664 . + _:N48b3e9d109d34fdeaa6cbef58c05c171 rdf:first ; + rdf:rest _:N220b4463e39147e99e8eeeb9974c5370 . - _:N46b3ee96a83c4a44bb51112e0ca4621c rdf:first ; - rdf:rest _:Nf6a8366ab85b4074b187672b593f3e6e . + _:N4a3178783c58491bb646a056a8dbb37a rdf:first ; + rdf:rest _:N615be2b8b7174608b24884d12a2039ad . - _:N46c1d107f9c3474aac7ed47419f9465a rdf:first ; - rdf:rest _:N01e0073f9d2a49f49037b8e666018bbd . + _:N4a56b875349e44729e9aca40972c86cd rdf:first ; + rdf:rest _:N3de741ac343042e6ac53564501076e44 . - _:N4707a6558f8643199e75a488fd156a09 rdf:first ; - rdf:rest _:N3ed90f3640954f3cb8ac8478cc923b35 . + _:N4aa1ea2c440f4aecb7a6656a599fbf22 sh:class ns1:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:import . - _:N489ddf1400ed455cbb0fe6a27f318011 rdf:first ; - rdf:rest _:N32c6410af083493aa3238362e1cbd67e . + _:N4ac93d52ef544d5cb73aeaeb279b7567 rdf:first ; + rdf:rest _:N07868b0098174c478ac47f3fbc946ff0 . - _:N48e045eccfb146548852b6d7274d180e rdf:first ; - rdf:rest () . + _:N4ad4011b5f8c44cbb3e76f5da0885cfd rdf:first ; + rdf:rest _:N9e3f2c4f96904bddb1aa46c01701b0f6 . - _:N49a4e0f670334d2cbe90cca23083d0ad rdf:first ; - rdf:rest _:N97777d3f00c44071a9af1cf1e9b8d4bd . + _:N4b7945a329d940d7a4167237a4e60e53 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:isOsiApproved . - _:N49d9ce37bbb44f77a01b48e5f2009c3f rdf:first ; - rdf:rest _:Nf6aee0ab31d04453b5b92d210b1ad859 . + _:N4c8c5257e6c144099de859c3f43b1961 rdf:first ; + rdf:rest _:N97120636b11b4b158892706019486fb5 . - _:N4a26fc9e687f4bfda660730718e55700 rdf:first ; - rdf:rest _:N08242c50c463457c930eba2a9659cdf9 . + _:N4d2df683a0ea4c39be288b78f9e61ca4 rdf:first ; + rdf:rest _:N184c02d9c66a4e9d988d681d20c5ddc6 . - _:N4a639a72aca4429f900632616a34bef4 rdf:first ; - rdf:rest _:Naae3483836e249d3a4cdd827af0f8631 . + _:N4d86b5ad122d431bbf443326643a51df rdf:first ; + rdf:rest _:Nfbd3df443088485abe551fc6374a3c4c . - _:N4b5795c987f1446dbda919350438fd0a rdf:first ; - rdf:rest _:N30a7d396784a431ba0eb686ae5b7e645 . + _:N4d92ede494e34e51ba6eca91292dc0dc rdf:first ; + rdf:rest _:Nfc8b91023a9e4e08ae989e08b6c0b9ec . - _:N4c5910b87a7e4fc69577e8ccd52c8ab3 sh:class ns6:SafetyRiskAssessmentType ; - sh:in _:Nd5b3406d866f449096ede6b24376294b ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns6:safetyRiskAssessment . + _:N4dcad64fd9cf4af2b8d6ea98d6c5450a rdf:first ; + rdf:rest _:N264b55b33a4549a6a131d79763879896 . - _:N4cf191c2823c4f9ba2e3124c01643d11 rdf:first ; - rdf:rest _:N419137dca06848e2a161d5eaadc9992f . + _:N4dda90621fe746a2972ace6f1e26f9c9 rdf:first ; + rdf:rest _:Na00b6f47e860415881f7e8a524a04316 . - _:N4d126f9477f941e8bd279a13b5a8f5bd rdf:first ; - rdf:rest _:Nfa5229038d564307aa21cdf1f0981a70 . + _:N4e1bd25f594a483ab492b4c24a5748eb rdf:first ; + rdf:rest _:N1314ef461724483f9bd5c56d939b17c4 . - _:N4d420b10df2e48ec90b7a163f5e7774c sh:class ns2:CvssSeverityType ; - sh:in _:N86117ed461e44611b359453a2e0ddc6d ; + _:N4e4b35788e1b4064b856bcd8d2cc6670 sh:class ns1:HashAlgorithm ; + sh:in _:Nce436d556d4e4606ba37d9ad32d22967 ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns2:severity . + sh:path ns1:algorithm . - _:N4dc5e2b6b5fa44d79acdc84229f675fe rdf:first ; - rdf:rest _:N60de5e93a2424ac08a6d0747c85f5699 . + _:N4e6142c3e2dd4f3f9e2aed1df9452bc7 rdf:first ; + rdf:rest _:N716ee87802fd4b6f98bfcff38ca5ff8a . - _:N4fd4703e2c5d4687bed9b05563fc9cda rdf:first ; - rdf:rest _:Nbd9879e4dffa4f9bbdc67aa2782f06f5 . + _:N4f6d0abf94b14a189b945346f00ba9dc sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . - _:N5165398aea9744d49e3ba082cb6fa0d8 rdf:first ; - rdf:rest _:N7d3cea31b9db4418ad60cbbcd3f14b75 . + _:N4f7ca95fbfad4d20810e92ab09220394 rdf:first ; + rdf:rest _:N95c7a63c89e94f8d9ceb0dd0c34ac9e3 . - _:N52a5c2aa05cb4f3da33bc1a69bc054d3 rdf:first ; - rdf:rest _:N30c0e029fe894fb8809a14d4f50d81cb . + _:N4f925ef656b840928e22aa51252c2976 rdf:first ; + rdf:rest _:Ndb50eefe33ac4feda6cfb13073b5324e . - _:N5332cee7bc2443a3b1d7513e03dbfdca rdf:first ; - rdf:rest _:N5c42defa8afb4ab59df899067c1e54af . + _:N4f9424fdcb0643a6b8dbd2c83de164a1 rdf:first ; + rdf:rest _:Ne21f363965114243b81ce67f76575de3 . - _:N55072cbd77a64b16b152c20236d786f7 sh:datatype xsd:string ; + _:N5011f0cdb4544a70b796520ecd436a25 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:licenseXml . + sh:path ns6:listVersionAdded . - _:N553eab502b9344dfa8c5091d3acb923d rdf:first ; - rdf:rest () . + _:N507c6135f8424e8db67fe59ae93eb464 rdf:first ; + rdf:rest _:Nc6d7eec7a63445c8a64113d0e59ce02c . - _:N556257d7798d418ea42ac047b24405ec rdf:first ; - rdf:rest _:N7bd6e74fed5e42d29e8234d5933efd98 . + _:N50c6944cf3544d0ab17d40d70d7715c3 sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . - _:N556a43c641024cdb92f4ef30ad62ff89 rdf:first ; - rdf:rest _:Nd7c9818a72e64d35a203d1b243e90dd6 . + _:N510a0fe04f844da5bb96208d9e6a563c rdf:first ; + rdf:rest _:N9dbe04a2eaac4271aafe4a7650ec4e15 . - _:N558588160dbd42e28c5618ebcbb6e00a rdf:first ; - rdf:rest _:N1b970adab24f43699ff9033a7892334e . + _:N511c01e1b6a146c3bf99fe3e88272f2e rdf:first ; + rdf:rest _:Nd0ec388aab40469ab0a4297c30e0c906 . - _:N5665c63b6756409c9cdaed2974ba4360 sh:datatype xsd:string ; - sh:maxCount 1 ; + _:N516b1b46dbb04f1c953906f0388bf8b4 sh:class ; sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path . + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . - _:N56b887d449ac42dcac573916474bbce1 rdf:first ; - rdf:rest _:N2bae390e06fc47d4916dcf58441c0065 . + _:N52399fdf517c416ebb2e470463b71b5d rdf:first ; + rdf:rest _:N40f9e58aac214052a173ad93b4ed57e9 . - _:N56d611894502410481612d5cb6016003 sh:datatype xsd:string ; + _:N53970517ea09401691d51549f8e0fd90 sh:class ns1:RelationshipCompleteness ; + sh:in _:N77f1a43a35e5447c83116261ae574acc ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns3:deprecatedVersion . + sh:nodeKind sh:IRI ; + sh:path ns1:completeness . - _:N57470b62e6a142f9928ab5bfe4606b0a rdf:first ; - rdf:rest _:N990faf2e9bde43ab98201c748005987c . + _:N542022ab56194a2184bd872572ca204b rdf:first ; + rdf:rest _:N036299b1f2af44eeb966da8a1217ac9e . - _:N596d74921771447c9b35785007e34f1c sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns2:modifiedTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + _:N54d1f829ecc441b9b7d9248324cbea6b rdf:first ; + rdf:rest _:N96120491adc84204822952240ddadf13 . - _:N597e9b8e9fea4a669873e005bac16fc5 rdf:first ; - rdf:rest _:N5e82508a25064d719d7bcac05ecaa033 . + _:N565a78360e28494ea80897aadf944c0c rdf:first ; + rdf:rest _:N3d9237b249544033acbf7d94cac2b424 . - _:N5a18c93b836b4c75887455a2be533616 sh:datatype xsd:string ; - sh:maxCount 1 ; + _:N576b7fbe3ba74572a6eb065c67761847 sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns1:comment . + sh:path ns2:standardCompliance . - _:N5a9be7ba8fdb49af9acd6f2e114fd2b8 rdf:first ; - rdf:rest _:N0f7bf6e1b6a84c71b96db0ed65f445fd . + _:N57e86c05425144f4a08e64395a0d5e1d rdf:first ; + rdf:rest _:N833dac5833c24d35a16d11f2e318aeef . - _:N5ba1e97374714be89c6ce6144cda737a sh:class ns1:ProfileIdentifierType ; - sh:in _:N3051e5f9bfdf45b19c416045118502ef ; - sh:nodeKind sh:IRI ; - sh:path ns1:profileConformance . + _:N58021835a49a4b959f9428f8df7f7198 rdf:first ; + rdf:rest _:Nd77e569c4d2d4d2c9bb29ea462bc94cc . - _:N5c307bac3b90460f8b755b5d46827013 sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; + _:N58b8de667bb54771976a5e86a8a8139a sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns2:withdrawnTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + sh:path ns3:attributionText . - _:N5c42defa8afb4ab59df899067c1e54af rdf:first ; - rdf:rest _:Ne616eaa63e1944649dd12a3061e5726a . + _:N58c3f747313349d396ead702e2de2953 rdf:first ; + rdf:rest _:N5ddf9ddcd2bc446f8729bd7a23566faf . - _:N5c4503ba9d8a43719f83795d17b3c7a7 sh:datatype xsd:string ; + _:N58c62d134f5e41d78440946685ecf0cc sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns5:sourceInfo . + sh:path ns5:vectorString . - _:N5ca015566baa49e1be7bab3e5ca1b85a rdf:first ; - rdf:rest _:N835351dfbca44416893704268470fac2 . - - _:N5cc19e587a4f464a9572d61b4352c919 sh:class ns1:DictionaryEntry ; + _:N5912892962274966938ef83f3f23c015 sh:class ns3:ContentIdentifier ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:metricDecisionThreshold . + sh:path ns3:contentIdentifier . + + _:N59f692071bb64860ab9f02cfb4670088 rdf:first ; + rdf:rest _:N27a8c8f61e944083abcc670fe4586df8 . - _:N5e376019b0684f24bf032cb891f1c491 rdf:first ; - rdf:rest _:N6349b0f36b7f449faa1d73050fbde88f . + _:N5a0ed5449f124c1e9ea7b05f0826cabd rdf:first ; + rdf:rest _:Ne64dea82135241279d97934d928f2d35 . + + _:N5a2b8b0073a54a3db4d6092f1c5043ed sh:class ns1:HashAlgorithm ; + sh:in _:Nc1bb7a1b7d034342906511e27e066abc ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:algorithm . - _:N5e77c3af3932465a99431b715d09d12e sh:datatype xsd:boolean ; + _:N5ab248e680454bbcb3ed254de24ac49f sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:isDeprecatedAdditionId . + sh:path ns1:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N5b2278fb3a8e4e239193a033f8b4bf04 rdf:first ; + rdf:rest _:Nf3c62ca118b94d17a1ef6b04e407421c . - _:N5e82508a25064d719d7bcac05ecaa033 rdf:first ; - rdf:rest _:N66b9ee3f008340d2b9dffa814afd424b . + _:N5b2e4dda703849e4933338ff0970e968 rdf:first ; + rdf:rest () . - _:N5f35c1f648d4471ba9ad3e7fc90e56b7 rdf:first ; - rdf:rest _:N1a58fcdd17f342af8cfbbbb7d7a9ed87 . + _:N5bda6a3731444310990a06326743f6aa sh:hasValue ns1:Element . - _:N5f799594600d45d0b83461261182f275 sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns6:typeOfModel . + _:N5d195bb929fc404584503e9c9b17a526 sh:class ns1:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:suppliedBy . + + _:N5ddf9ddcd2bc446f8729bd7a23566faf rdf:first ; + rdf:rest _:N0cac787ed3f3421fa6687df4da790a0c . - _:N60be8975df7d4f659d6589e10d3c8e19 rdf:first ; - rdf:rest _:N20563c47790549c1a3121000a834c4cb . + _:N5e678b3ba38745b58c0103b8e085d5c8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:standardLicenseHeader . - _:N60de5e93a2424ac08a6d0747c85f5699 rdf:first ; - rdf:rest _:N46b3ee96a83c4a44bb51112e0ca4621c . + _:N5eab3a0a527f4705bdb2f04b7c39e36c rdf:first ; + rdf:rest _:Nb6e99584403541df96486fcac6d79017 . - _:N60e06f4852a44b05b3dfdbd769a39b3a rdf:first ; - rdf:rest _:Ne4c7d5c25b2f46f3b980935a3b7858e2 . + _:N5f694c64068844ca80652791ca7749d9 rdf:first ; + rdf:rest _:N4dda90621fe746a2972ace6f1e26f9c9 . - _:N6197d862963b45bb806101e5df0a51a7 rdf:first ; - rdf:rest () . + _:N615be2b8b7174608b24884d12a2039ad rdf:first ; + rdf:rest _:N37829b662873490d9964f7bbbc300fce . - _:N61bad2d32f474f829df8b09e757aec59 sh:class ns4:DatasetType ; - sh:in _:N86dbcc278d2a463da15bda1f007010e6 ; - sh:minCount 1 ; + _:N61753ca6fa484199b143356d20b0476e sh:class ns1:Tool ; sh:nodeKind sh:IRI ; - sh:path ns4:datasetType . + sh:path ns1:createdUsing . - _:N62048f401c7a408d8e6074d8172edd5b rdf:first ; - rdf:rest _:N21edc1b1c7c94a53a14c23900721c4b8 . + _:N618f8c59ed9345ca8692a68f777a0fb0 rdf:first ; + rdf:rest _:N36b7d391e5cf402199bf454d82f5735c . - _:N62354c6ede0641c2a17958df1fce06bf rdf:first ; - rdf:rest _:N5165398aea9744d49e3ba082cb6fa0d8 . + _:N619e2a32fb994ed69f916340e12ed7f3 rdf:first ; + rdf:rest _:N315dc3dd043c41a49ffaaba74d10eeb0 . - _:N62c446ad08764db680206dcd96bc8476 sh:datatype xsd:boolean ; + _:N61b9a25cae674e199ce6572456d8e72f sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:isFsfLibre . + sh:path ns1:summary . + + _:N626b5ad29167479dabae9a9177315404 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . - _:N6349b0f36b7f449faa1d73050fbde88f rdf:first ; - rdf:rest _:Nf0b9c1849e524f0e8b565e2bde495ce5 . + _:N62b8677868664944abc9f19745aed957 rdf:first ; + rdf:rest _:Ne4baf3becb8740a79f8bceb49f40679f . - _:N64aa14b2a42d49a394ae8a9d4febed04 rdf:first ; - rdf:rest _:N31d0b150d561413c9ecc2d72bfc66683 . + _:N6369a0cffc0445e888c1e30a54a5be5d rdf:first ; + rdf:rest _:Ncc35596b6f164968b0bd35143cbc52ea . - _:N64ddee7ac73d4ece8829e73183990c09 sh:datatype xsd:string ; + _:N63f963c2c8a4467bb803f9af7eaafd3d sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns5:copyrightText . + sh:path ns1:context . + + _:N64a80dfe5e954cf59753ab8a96e4eff3 rdf:first ; + rdf:rest () . - _:N6535885322084aa986c62f1ad80b3668 sh:datatype xsd:string ; + _:N64ae0543871444f6b7d2a497fcf55186 rdf:first ; + rdf:rest _:Na0242fde5c314aa599a3a00cfb01634c . + + _:N65301d1be04341678842dfc049e2a33c sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:licenseXml . + sh:path ns3:packageVersion . + + _:N66595c518c6248f69bdca82dccebf454 rdf:first ; + rdf:rest _:Na82fb3a822a04f6180f1ca7808276d8f . - _:N659a17727ec34fe487d556cc5ed935fa sh:datatype xsd:positiveInteger ; + _:N66b43817d95d4468bf805207af159230 sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:beginIntegerRange . + sh:path ns4:datasetNoise . - _:N65e7526ffa224998af69bd3d4082b522 rdf:first ; - rdf:rest _:N045868218fe84846bfd5a8efe73f5f05 . + _:N675847984777421d9fb9b171cdf0bb53 sh:class ns1:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:externalRef . - _:N66b9ee3f008340d2b9dffa814afd424b rdf:first ; - rdf:rest _:N6761e7f2e133401fa1a4d1f8bed0202e . + _:N682abb8a6bbc40e9947aa2d9d66eec4d rdf:first ; + rdf:rest _:N4571ded3acc34f068931feecaa278a44 . - _:N6717b73c37f1437da67113b68f12bf12 rdf:first ; - rdf:rest _:N37712d80dea04088b1ab530db3aaa7fd . + _:N683c5b7b252949bda929dd4befe8bb50 rdf:first ; + rdf:rest _:N991d42b910e64656b45d7c4ce9e7f5e3 . - _:N6731fd512ee84a2781b8140677b0161e rdf:first ; - rdf:rest _:Nff83286adad842f19d79a36e90df97d2 . + _:N68767751c5f64fc1afe82f2dcbae6636 rdf:first ; + rdf:rest _:N1358bfc70dc14db6aa3a799228bc2fdd . - _:N6761e7f2e133401fa1a4d1f8bed0202e rdf:first ; - rdf:rest _:N48e045eccfb146548852b6d7274d180e . + _:N687efc23ea2c4c0b9a09c9ca45dc49b3 rdf:first ; + rdf:rest _:Nc91762ec925048e0a85d224bd2bd6d32 . - _:N67a7c2de8c574fb991ccc64346e1de56 sh:datatype xsd:string ; + _:N68e2aefd82ab40c59cc6c2bfeab0adc4 sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:vectorString . + sh:path ns1:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N6946aaeee89545da9d91b8527c54139a rdf:first ; + rdf:rest () . - _:N67b0d956754a43a5b927ae155984d43e rdf:first ; - rdf:rest _:N597e9b8e9fea4a669873e005bac16fc5 . + _:N694be39aecbe44d49f3850275de952ec rdf:first ; + rdf:rest _:N29cadfcf5dfa4e73b1b0f56fa6e4352f . - _:N67fc6e9fc5d24eabb8543cdc669b1145 sh:class ns6:EnergyConsumptionDescription ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:inferenceEnergyConsumption . + _:N694e3d4238ff4006b46b450b91f4179a rdf:first ; + rdf:rest _:N9a582f09d0b7426d81ae74b09a5ed252 . - _:N682a1c11ac5b4e2ea369c111bf3c01c7 rdf:first ; - rdf:rest _:N9a36e08577374de4a5b5818cbd4e6583 . + _:N6aa0e623203745d7b1fb18b485918354 rdf:first ; + rdf:rest _:Nc4286224070a4248ad8590c45a7c8bc6 . - _:N68dfb19b51934b85a897e13ae36b552a rdf:first ; + _:N6ac0694afb0c40c1bb0988b0569f0cb4 rdf:first ; rdf:rest () . - _:N69674ef0cb504722bc20bd3195026b39 sh:class ns5:FileKindType ; - sh:in _:N49a4e0f670334d2cbe90cca23083d0ad ; + _:N6bd3d2cfd9cd4f248e354deb40a851ff rdf:first ; + rdf:rest _:N618f8c59ed9345ca8692a68f777a0fb0 . + + _:N6be5db9035a14b779b13bfa0a5a51c3e rdf:first ; + rdf:rest _:Nd83655f2100e4025b2eefd465fc154ab . + + _:N6e913b09266e498887238fae6898e289 rdf:first ; + rdf:rest _:N6bd3d2cfd9cd4f248e354deb40a851ff . + + _:N6eb9ec15081f404a99935ff4e2aaa14b sh:datatype xsd:string ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns5:fileKind . + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . - _:N69fe400001ad47cbb9e616ed9d727696 sh:datatype xsd:anyURI ; + _:N6f8ca85700744b0e9f7a8672675d1dca sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns5:packageUrl . + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:N6a3cf2ffe9b9430390c5ce23bd48fce4 rdf:first ; - rdf:rest _:N2b4ba84d3c35422383f41faeffab544e . + _:N7091d1b764924e4db3551e0b422e61ba sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:downloadLocation . - _:N6a4847abbdd84dbb8e43386c5d710563 rdf:first ; - rdf:rest _:Ndc5c3acba75e4205b113623c75621c6e . + _:N70cbc4a60eda4e648df0df882fab278d rdf:first ; + rdf:rest _:N4c8c5257e6c144099de859c3f43b1961 . - _:N6a5bd79f035f4d7c9d036bc4a4d9990a rdf:first ; - rdf:rest _:N3851673c346e4c9cacc8cf50837d6cfb . + _:N70cf024bfa9e40a08de101b510631f60 rdf:first ; + rdf:rest _:N4f925ef656b840928e22aa51252c2976 . - _:N6a9c7fd96f82444aac9a3bae9894656b sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns1:packageVerificationCodeExcludedFile . + _:N716ee87802fd4b6f98bfcff38ca5ff8a rdf:first ; + rdf:rest _:Nd951591fca6c47c2985dd159db6ad52c . - _:N6afb5f6c981f4dc0b9434c037cffebfb rdf:first ; - rdf:rest _:N7e45c1203a3548efa7e52e91b09b78f1 . + _:N722c45f262084ffa9b063b852952397b rdf:first ; + rdf:rest _:Nf4609fa7f53e4898a47341b507b5e03e . - _:N6b8369d5442f4e3c902c0fd4c6ad7f11 sh:datatype xsd:dateTimeStamp ; + _:N72a328f4b7e14cb194d99b35236c3430 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:withdrawnTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + sh:path ns1:comment . - _:N6b93f4527c92420f97b4d4d8c27840f3 rdf:first ; - rdf:rest _:N42775851ecec45ee90ee1fe5c1071993 . + _:N72dd028519c2443b94229cfc4a2639bc sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:N0a961d271f304c8cbb2e0a1307a9d8ad ; + sh:path rdf:type . - _:N6ca1589ab2b443ac91b26c54805eb352 rdf:first ; - rdf:rest _:Nfc8707d6d8b944508b09d8d3125e53f3 . + _:N731241b6024d4e109893eb1354404ec5 rdf:first ; + rdf:rest _:N897df0f6e23b488988a2d2db8aad5bc4 . - _:N6cddf83b203740bbb3558b7474a07821 sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:minCount 1 ; + _:N734a831b529349fb969fd328dc6dcb1c rdf:first ; + rdf:rest _:N25b71b41baf8408a91b66336f376a5b6 . + + _:N7368659f06844e79815bdbdeac2b73f3 rdf:first ; + rdf:rest _:N2847f93323fd468eab2b926c5715c994 . + + _:N737b3d5b3c8f4cb7b5fb665b52f1dd96 sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path . + sh:path ns1:standardName . - _:N6d28e1bd9c9f4454b0cd19fce2d51a40 rdf:first ; - rdf:rest _:N9f2f4966ca1442de8457e4f8329d0710 . + _:N73833299f42a4f78b3a3379f9d2302d7 rdf:first ; + rdf:rest _:N38e1279dca3f4e53be4eb3245a0e4ec2 . - _:N6dd024b62af74fb5a94391f7343f1c79 sh:class ns1:RelationshipType ; - sh:in _:N56b887d449ac42dcac573916474bbce1 ; + _:N73e74213eec84d8daaa36a51dab963d6 sh:class ns1:RelationshipType ; + sh:in _:Ne93ae5d0cb664d7ab2554eaa72a23f25 ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; sh:path ns1:relationshipType . - _:N6e7150c4286149b7aa27ddf655625b5e sh:datatype xsd:string ; + _:N73f9586a8a7d4b978afcb9cfe998050b sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:deprecatedVersion . - - _:N6f651952b35948a8be2adee1bac83c6f rdf:first ; - rdf:rest _:N6a5bd79f035f4d7c9d036bc4a4d9990a . + sh:path ns6:standardAdditionTemplate . - _:N6f822a7a1a0748eaa9f4fe3e881d6726 rdf:first ; - rdf:rest _:N301f290b72884ba28b9bf8cee6c7d12e . - - _:N700fb510f2d245d387b84b64f59e834a rdf:first ; - rdf:rest _:N489ddf1400ed455cbb0fe6a27f318011 . + _:N74551d5c49b94ece99a5fdec0d58d233 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:N70201d67aa3f481b9abefcb469f48d98 rdf:first ; - rdf:rest _:N1d5173c248f14304bd9adef81206e060 . + _:N7583808b54c947658126a7846ad7cc76 rdf:first ; + rdf:rest _:N4466be96ec5a4942b916c3f1fad2d3ee . - _:N70a01ce1edb94124ac3d6a3b187db793 sh:class ns1:Tool ; - sh:nodeKind sh:IRI ; - sh:path ns1:createdUsing . + _:N75f6c4472b7b45349200afcce0dbacef rdf:first ; + rdf:rest _:N91fee785616543dd9952683d70d387bf . - _:N71251064642941d5a8323c552deea710 sh:class ns1:PositiveIntegerRange ; + _:N763c69315ee040a88ca27b5205984626 sh:datatype xsd:string ; sh:maxCount 1 ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns5:lineRange . + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:prefix . - _:N7177e8b281d74917a500d212b7382b6b rdf:first ; - rdf:rest _:N7f66313069b94a1386353f07d06a8ce2 . + _:N7676f1bbd99e47659502f87b9936453e sh:class ns1:LifecycleScopeType ; + sh:in _:N5b2278fb3a8e4e239193a033f8b4bf04 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:scope . - _:N71c5c74023cf4a52a8b457b1547df6f4 rdf:first ; - rdf:rest _:N0ffbbdd15b364d55bc0212ba5c32739b . + _:N77f1a43a35e5447c83116261ae574acc rdf:first ; + rdf:rest _:N81c1c3e2bbc4470ab2eaf9e5c6c4d1f0 . - _:N727e38139bfa40d9b56e586cf9ac5bdb rdf:first ; - rdf:rest _:Nb040ef9136c54fc59750d17abc90a3ea . + _:N786a3eaa8fbe4cf0bb67c4e086fa8b5b sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . - _:N731ab899248d4b07adeacd5aafffa0bf rdf:first ; - rdf:rest _:Nb05234e65ed34c2e86c4abf63f02725c . + _:N78c7513398064da1a55c5df1b3c96444 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . - _:N73c4669b1ca14351aad291112524e432 rdf:first ; - rdf:rest () . + _:N79b4dcdd054d4ca8a87fc86377c9366b rdf:first ; + rdf:rest _:N30d1dbbf97fb456eb18d38b76c8004d3 . - _:N74164e072d8147ca808c451ad6b5d980 sh:class ns5:SbomType ; - sh:in _:N7cdb8eb1992246f785b58b577320b504 ; - sh:nodeKind sh:IRI ; - sh:path ns5:sbomType . + _:N79e0fdc8a753446e8e1931aab90b02ae sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:licenseXml . - _:N744e6bd4bf054480b6e284543bb79b87 sh:class ns5:SoftwarePurpose ; - sh:in _:Nc14cc862b5494776966375d4711f1f8d ; + _:N7a48123f699948b5867af1fec0d7b88e sh:datatype xsd:string ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns5:primaryPurpose . + sh:nodeKind sh:Literal ; + sh:path ns1:comment . - _:N7476374ddf7c4c82a95e5a63b60e4e0e sh:datatype xsd:boolean ; + _:N7a66c734ced842b4913ff95c5f5cf452 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:isOsiApproved . + sh:path ns1:comment . - _:N75a4a8a0dcc14090818fdc6eade781c2 sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:hyperparameter . + _:N7b50bf552c054e5baab961ecc882b722 rdf:first ; + rdf:rest _:Nf593d6da70614e2581430bd37d9cd4ef . + + _:N7b5b4ad7f9a54d91a292ac0738539050 rdf:first ; + rdf:rest _:Nb28702ad1ccc478ba7b8aa42bc12985d . - _:N75afbc0eb6e646f28396b52ee0131582 sh:datatype xsd:string ; + _:N7c7a260c778e4d4491ba75a0fe083ebe sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:additionText . + sh:path ns6:deprecatedVersion . - _:N76180350f15e4fd0be60faa3412ed1fa rdf:first ; - rdf:rest _:N3cd13df3eb014a37bb535428e0c037e6 . + _:N7c9974a53d5443c5831f3e7dc56073d0 sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:N8358def5fd2b4668b759d786315e799f ; + sh:path rdf:type . - _:N761b1b05ac5746c3b86d599c46526598 sh:datatype xsd:string ; + _:N7d2dbee05b72455c995a675186de5fd1 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path . - _:N77693c7bc7954401a66962a8958fac0c rdf:first ; - rdf:rest () . + _:N7eb015d497fc4c09bb8530f59c65624d rdf:first ; + rdf:rest _:Nbd0d551be201428eb241c70d0e315cfa . - _:N784fd0e933c9417b9e11ea351159df76 sh:datatype xsd:string ; + _:N7f095ac56c3e4bccbcd4348b29980439 rdf:first ; + rdf:rest _:Na461e12485ec495f9d16f08504499025 . + + _:N7f2c8d25f5df4c27b35c70d38090eab3 rdf:first ; + rdf:rest _:N8186b6d9dc534ac1b7a906d040a88d6a . + + _:N80dac4ea19f44488ae2dc09ba1429116 sh:datatype xsd:positiveInteger ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:name . + sh:path ns1:beginIntegerRange . - _:N7884508b0c584d0288f2250c1ee3bc89 rdf:first ; - rdf:rest _:N137d0a75fd374daeb077f228da53897d . + _:N80dc66a1ccec469392596c5291fa2864 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . - _:N78f0595c63a44f9ea394e506cdf868e9 rdf:first ; - rdf:rest _:N8551607a3f804986877c0affaed0b752 . + _:N8115c0678af046f9bb8fe56f1541b92b sh:hasValue ns5:VexVulnAssessmentRelationship . - _:N79f0bab894254f7aa8a118661d65f476 rdf:first ; - rdf:rest _:Ndb8f89749acf4352b1d62c554af7fde6 . + _:N8186b6d9dc534ac1b7a906d040a88d6a rdf:first ; + rdf:rest _:N9b79adf6684a4d328dc28ae0ee98d95d . - _:N7a1979daf894407dabf96d89e984ff05 sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns6:domain . + _:N81c1c3e2bbc4470ab2eaf9e5c6c4d1f0 rdf:first ; + rdf:rest _:N461fe7f9c28b4d81a4fb17726fc9adf6 . - _:N7a477b2d627c40bfbee3b6eca010b404 rdf:first ; - rdf:rest () . + _:N825f749765e348a0abfef75f63c1588a sh:class ns1:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:byteRange . + + _:N82b5fa65536b400a809bd5f3104f6ec0 rdf:first ; + rdf:rest _:Ndfe4dc1d7d574b10a92ee8955837ad9d . + + _:N82be0a238ea44c658a60ca20e0c8c6fa sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . - _:N7bd6e74fed5e42d29e8234d5933efd98 rdf:first ; - rdf:rest _:Ncb9989fa0c964e6f8d1f94c2ac8e2674 . + _:N833dac5833c24d35a16d11f2e318aeef rdf:first ; + rdf:rest _:Nd90adf23ae66491daa68ac6dd4501bdf . - _:N7c1de3ae74ec4d1d9b6be8a05eea2f76 rdf:first ; - rdf:rest _:N9c88962fdf0e47f99a0477fe51b4207d . + _:N8358def5fd2b4668b759d786315e799f sh:hasValue ns6:LicenseAddition . - _:N7cdb8eb1992246f785b58b577320b504 rdf:first ; - rdf:rest _:Nc709c441c5e04513bcf2e73d3670fca8 . + _:N83935261300041758021c5a3fbdae6c0 rdf:first ; + rdf:rest _:N7368659f06844e79815bdbdeac2b73f3 . - _:N7d3cea31b9db4418ad60cbbcd3f14b75 rdf:first ; - rdf:rest () . + _:N85ad449141be453592e9e80c2bc379f4 sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . - _:N7d98dd34e2e442ec8f9dd87a82897c1a sh:datatype xsd:decimal ; + _:N8692a82c280845c3a6fa37c02ddae229 sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:score . - - _:N7e45c1203a3548efa7e52e91b09b78f1 rdf:first ; - rdf:rest _:N312b811b38e3467eb37fbf91bc0dd93b . + sh:path ns5:actionStatement . - _:N7e6385c5f3414e35862d986501bfff61 sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns5:packageVersion . + _:N8711a8ae5ca942d1bbd795a0144ca9a7 rdf:first ; + rdf:rest _:N13f4d81403034faaa93ea1abc3bd3d91 . - _:N7f27ce1812214cf08ea19bcb018764e2 sh:datatype xsd:string ; + _:N87131d5acc2b478ba16230f714aa0bb0 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ns1:contentType ; sh:pattern "^[^\\/]+\\/[^\\/]+$" . - _:N7f66313069b94a1386353f07d06a8ce2 rdf:first ; - rdf:rest _:N8e3eb89dc9a84ae0ae77a3bbc07580c9 . + _:N88ce0438020d4326924db53dec9bd6b5 rdf:first ; + rdf:rest _:N722c45f262084ffa9b063b852952397b . - _:N80091d0c87724fbf9c10267c2549575d sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:minCount 1 ; + _:N88e97455b377466daa24bff58cde8f0d sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns1:hashValue . + sh:path ns1:packageVerificationCodeExcludedFile . - _:N801bb08e2f0f4a8b9b2e9e8d3a406ffd sh:datatype xsd:dateTimeStamp ; + _:N894cee407d8747ec8adc2f05ce722a86 sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:endTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - - _:N8049abc6ee7f449ebf27e3e8357bdf75 sh:class ns3:LicenseAddition ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns3:subjectAddition . - - _:N80a219d388944c2c9272a65ce39a65d4 rdf:first ; - rdf:rest _:N058b8decd10442dc9da66c8ec337fe89 . + sh:path ns1:locationHint . - _:N81774ccb63bb44f59726b12497ed50c2 rdf:first ; - rdf:rest _:Ne8efa463e51845deb9ed8d60461313c3 . + _:N897df0f6e23b488988a2d2db8aad5bc4 rdf:first ; + rdf:rest _:Nfa72871f5924444491d18910ec431abb . - _:N81a9816f437e481bb798da6e731d8252 rdf:first ; - rdf:rest _:Nf56fec24d5a44761b7a239c789c51504 . + _:N89d361d3f1d94de5b28ee82b1d3da3de rdf:first ; + rdf:rest _:N93d2d1d1dc3e4b7ea516ee004f674bfb . - _:N81c3ab3c353544c9b673be7535094681 rdf:first ; - rdf:rest _:N4545916c069c4e0ab8f2f3c3e582d429 . + _:N89d38dc48bd64f1d894f7f8c5494c264 rdf:first ; + rdf:rest _:N0d2bee57931544d786ff3bc0afb223b0 . - _:N833899f5b4b1487b8858f9aebd17a95c rdf:first ; - rdf:rest _:Nf7e356ac5a1044be99fd42634fb81f7d . + _:N89d641eef49d4a5f9ef42bfe5c4221bd rdf:first ; + rdf:rest _:N230a41f8c8d549b8844a37595ce56867 . - _:N835351dfbca44416893704268470fac2 rdf:first ; - rdf:rest _:N4a26fc9e687f4bfda660730718e55700 . + _:N8a37deb026864cdca312209746e2caaa rdf:first ; + rdf:rest _:Nf3dfbb7f98e84c61b58f5b17e3ae9f19 . - _:N835bfbd04e26414fa4e0357251d9e6c7 rdf:first ; - rdf:rest _:Nf1e92f23ec15434084ea8a1bcf7473a8 . + _:N8ad3af20ea5248df91865def0b7a98de rdf:first ; + rdf:rest _:Nd0d48abef81b4c44a952c0925a6e30a9 . - _:N8373dd8071e2429e95b3b0897bdab7de sh:datatype xsd:anyURI ; - sh:maxCount 1 ; + _:N8adbab8e05cf4258a0b7e9eedbd03e5f sh:class ns4:DatasetType ; + sh:in _:N7eb015d497fc4c09bb8530f59c65624d ; sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns2:locator . - - _:N8411f84580e2497da97dab50dc3b4df3 rdf:first ; - rdf:rest _:N80a219d388944c2c9272a65ce39a65d4 . - - _:N8551607a3f804986877c0affaed0b752 rdf:first ; - rdf:rest _:Nfc73e3099ed6465bb089df33bbf469ff . - - _:N86117ed461e44611b359453a2e0ddc6d rdf:first ; - rdf:rest _:N4dc5e2b6b5fa44d79acdc84229f675fe . - - _:N866122f61ea34bdca92b963b42f6fae2 rdf:first ; - rdf:rest () . + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . - _:N86dbcc278d2a463da15bda1f007010e6 rdf:first ; - rdf:rest _:Nab408dbbfc0f4711b251486cdcbf2168 . + _:N8b5253826157456ba3297cf9f4f8db15 rdf:first ; + rdf:rest _:Nff9c0c2a18f24f76bfa32806ec48ce59 . - _:N870a0a4f2a794e2aae2a22975ec6fa49 rdf:first ; - rdf:rest _:N9b270772d72b4f059b6cf8c0703f1948 . + _:N8b86dbc23a22407a9380fbd9376d3b83 rdf:first ; + rdf:rest _:N4f9424fdcb0643a6b8dbd2c83de164a1 . - _:N8746b43004e5422e8a87906a64680ef4 sh:datatype xsd:string ; + _:N8bdb3da6da754d98843024e1dcbe3e43 sh:class ns1:PresenceType ; + sh:in _:Ndc659c8552d54ab684aadbdacdbd7a8d ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:description . + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . - _:N87ef2338681b493982fdd6660c334933 sh:datatype xsd:string ; + _:N8e672d95ff7d48e68c1ed7ecf019b269 sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path . + sh:path ns5:exploited . - _:N87f3315e965b43ebab1aa1b8deccf16f rdf:first ; - rdf:rest _:N6b93f4527c92420f97b4d4d8c27840f3 . + _:N8eab6125211e4549a03d744617823ad5 sh:hasValue ns1:ElementCollection . - _:N88066f14b8624768ac4e2ef3ea08df92 rdf:first ; - rdf:rest _:Ndecce5d991454f63835a411ad5c3d25f . + _:N8ec4229c1a674693bde766506ca93e87 rdf:first ; + rdf:rest _:N5f694c64068844ca80652791ca7749d9 . - _:N885913019f4b4fe7afcd38cc847f9ef6 rdf:first ; - rdf:rest _:N04c56aaa0702449d89c679a6ae2d509e . + _:N8f1dd8dbe42e46fb934adf94515048b1 rdf:first ; + rdf:rest () . - _:N896ec867378949ebbc26581fe9cf864c sh:datatype xsd:string ; + _:N8f24e4128c124ec08b9e80f45a43dd1e sh:datatype xsd:string ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns6:modelExplainability . + sh:path ns1:statement . - _:N89f5ced0d2b44da98e135f5754616ccc sh:class ns1:PositiveIntegerRange ; - sh:maxCount 1 ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns5:byteRange . + _:N8ff2b7ece321489a9ff262a2c697c89c rdf:first ; + rdf:rest _:N542022ab56194a2184bd872572ca204b . - _:N8a37f4cffd6247e08ac9432f8447d89a sh:class ns1:Agent ; + _:N904326509fc04cc4be66ea123ed9fdc4 sh:class ns2:EnergyUnitType ; + sh:in _:N10002d3538094764a9c6d3893234cd04 ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns1:suppliedBy . + sh:path ns2:energyUnit . - _:N8b959a4ad4834d5a96d17ac52b3571cf rdf:first ; - rdf:rest _:N553eab502b9344dfa8c5091d3acb923d . + _:N90cb783276d74a2881e21a08abf01e2f sh:message "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:N986501d57648498ea8ed156092baf32c ; + sh:path rdf:type . - _:N8c0c4aa1f1ae4f7485a88627cfbc1631 rdf:first ; - rdf:rest _:N3cf591f215db46d1b2957c0113ce16f8 . + _:N916e8c3c85774fcd96b700a20240ca75 rdf:first ; + rdf:rest _:Ne976bc717eb6446291a939038610ee2c . - _:N8c3b465b415b409d895456c2f6ee7c50 rdf:first ; - rdf:rest _:N6f822a7a1a0748eaa9f4fe3e881d6726 . - - _:N8d911077b7fd4e4180299a09ca29ea53 sh:class ns2:SsvcDecisionType ; - sh:in _:N443dd85c241c4fe58205e0b7c7f18034 ; + _:N91adaf3024344ddcbcbf3f943faaad6b sh:class ns1:AnnotationType ; + sh:in _:N2aa14aff363e4fc1ab2ed86f71eb8873 ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns2:decisionType . - - _:N8e3eb89dc9a84ae0ae77a3bbc07580c9 rdf:first ; - rdf:rest () . + sh:path ns1:annotationType . - _:N8e8fa340313748a7b459ba889204f2c1 sh:datatype xsd:decimal ; + _:N91d11db27b28462b8545b78734a27503 sh:class ns5:ExploitCatalogType ; + sh:in _:N1a8882804ac24104946e7afa0b36905a ; sh:maxCount 1 ; sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns2:percentile . + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . - _:N9063493949754db985c6c4bb9effda34 rdf:first ; - rdf:rest _:Nd08114b692094bc788d0ff08c066c7fe . + _:N91fee785616543dd9952683d70d387bf rdf:first ; + rdf:rest _:N94e6bbd4fb004035a4cbdb3e969a1fbb . - _:N9177e2ee3c054acba6cd2b8f4d78e4f3 sh:class ns1:SupportType ; - sh:in _:N40b61fa0587f469bb27b3e4ece9283bf ; - sh:nodeKind sh:IRI ; - sh:path ns1:supportLevel . + _:N931294357284457f9a6f643757b29e72 rdf:first ; + rdf:rest _:N687efc23ea2c4c0b9a09c9ca45dc49b3 . - _:N931242be4ac14a95b8ef51122ba2cf40 sh:datatype xsd:anyURI ; - sh:nodeKind sh:Literal ; - sh:path . - - _:N941027defe6c4c49915b8fb72263813e rdf:first ; - rdf:rest _:N353611490d3c430e8e861c3a903369fb . + _:N93d2d1d1dc3e4b7ea516ee004f674bfb rdf:first ; + rdf:rest _:Nc71de92f1cc649fcab4d77d974dac329 . - _:N950494b11f9e43fd9ce4b21264e6a0a8 sh:datatype xsd:string ; + _:N942417ca6d844df0914d75b099a457f8 sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:vectorString . + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N94e6bbd4fb004035a4cbdb3e969a1fbb rdf:first ; + rdf:rest _:Ncf68ed04ac534a92808a38217fa55530 . - _:N9547de9ed84145228bed37ef2d51f84f sh:class ns1:IntegrityMethod ; + _:N951ec4cbce414b3bab847840bf18d59f sh:class ns1:ExternalIdentifier ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:verifiedUsing . + sh:path ns1:externalIdentifier . - _:N9586947b2f2b402c815b61cb75a37942 rdf:first ; - rdf:rest _:Nee384a627c3d4a89bbf6312a1aa64aba . + _:N954579de61d84bef909737ad4568a536 sh:class ns3:SbomType ; + sh:in _:N48b3e9d109d34fdeaa6cbef58c05c171 ; + sh:nodeKind sh:IRI ; + sh:path ns3:sbomType . - _:N96ab198cab814dceb4dc205e80f644d6 sh:class ns1:Element ; + _:N95b6da49b56e4298924cd2f153f00905 sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:subject . + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . - _:N97777d3f00c44071a9af1cf1e9b8d4bd rdf:first ; - rdf:rest () . + _:N95c7a63c89e94f8d9ceb0dd0c34ac9e3 rdf:first ; + rdf:rest _:N348ad67a2abe4f9d929b1e20acc594b5 . - _:N97819d7a350747339be471fc904dd3e6 sh:class ; - sh:maxCount 1 ; + _:N96120491adc84204822952240ddadf13 rdf:first ; + rdf:rest _:Nb0ab9a298e9845b1b1b770398def929d . + + _:N963f7603cd844b03bd4631e0713b1635 sh:class ; + sh:minCount 2 ; sh:nodeKind sh:IRI ; - sh:path ns1:dataLicense . + sh:path ns6:member . - _:N9832a681241a4a91bd95ecdfaa05670d sh:datatype xsd:anyURI ; - sh:nodeKind sh:Literal ; - sh:path ns3:seeAlso . + _:N96c753d614db4e7b844bcb3b5f9ff291 rdf:first ; + rdf:rest _:N168bcfc831bd4f85b6a82742eb7ad4f5 . - _:N99061926c1b041518ba79742537acbaf rdf:first ; - rdf:rest _:Ncadfef9a365e400a9db499b45bcaafcb . + _:N97120636b11b4b158892706019486fb5 rdf:first ; + rdf:rest _:N89d38dc48bd64f1d894f7f8c5494c264 . - _:N99069f06ac76429c9f76e68132e89664 rdf:first ; - rdf:rest _:N835bfbd04e26414fa4e0357251d9e6c7 . + _:N98018fef19484e2fae944af82b21920e sh:class ns1:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:createdBy . - _:N990faf2e9bde43ab98201c748005987c rdf:first ; - rdf:rest _:Na2392fa55f5342ceaccb5f4312194416 . + _:N986501d57648498ea8ed156092baf32c sh:hasValue ns5:VulnAssessmentRelationship . - _:N998d2725c2574c8f8344620b839e2d6f rdf:first ; - rdf:rest _:N9b52daafec44429186724a6d9a846793 . + _:N991d42b910e64656b45d7c4ce9e7f5e3 rdf:first ; + rdf:rest _:N734a831b529349fb969fd328dc6dcb1c . - _:N999ce6cccf4c43f493041f0c109b3166 sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:externalSpdxId . + _:N9a582f09d0b7426d81ae74b09a5ed252 rdf:first ; + rdf:rest _:N7f095ac56c3e4bccbcd4348b29980439 . - _:N99c96394ef494f739f0ba15682e92ea3 rdf:first ; - rdf:rest _:N0eeb34b48dec4bf48dbba6ee4c6f829f . + _:N9b79adf6684a4d328dc28ae0ee98d95d rdf:first ; + rdf:rest _:N5eab3a0a527f4705bdb2f04b7c39e36c . - _:N9a2ece59dbaf463a9c858ceb00db829f rdf:first ; - rdf:rest _:Nbb14891b173645c4a19f0f952441b988 . + _:N9b9dc778bc5c415fad7f82cf4f6047d2 rdf:first ; + rdf:rest _:N68767751c5f64fc1afe82f2dcbae6636 . - _:N9a36e08577374de4a5b5818cbd4e6583 rdf:first ; - rdf:rest _:N73c4669b1ca14351aad291112524e432 . + _:N9bb1cced9aa14e08b36ebf9f952b1d01 rdf:first ; + rdf:rest _:Na3743aad0c334d06a729f81988609c9f . - _:N9a4f2ea8112e48b18e9aaa109a1e02b3 sh:class ns1:Agent ; - sh:minCount 1 ; + _:N9bd771ac02cc41519919a01d4deca105 sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:N96c753d614db4e7b844bcb3b5f9ff291 ; + sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns1:createdBy . + sh:path ns2:safetyRiskAssessment . - _:N9b270772d72b4f059b6cf8c0703f1948 rdf:first ; - rdf:rest _:Ne2f51219aefd476d89347b0e1c485369 . + _:N9c1ccbc2b86f454395a450f736b67eec rdf:first ; + rdf:rest _:N0f4d0a9a8e7d46a0b9cf255274bcce6b . - _:N9b40da1378ab4d6e80898c98996790e2 rdf:first ; - rdf:rest _:Nf05790d65f4b451781271dd86a5b4005 . - - _:N9b52daafec44429186724a6d9a846793 rdf:first ; - rdf:rest () . + _:N9dbe04a2eaac4271aafe4a7650ec4e15 rdf:first ; + rdf:rest _:N261545ecf40d4f65bf47dc050598e90f . - _:N9c23cd2dcd4243b996ef8897bfa8759e rdf:first ; - rdf:rest _:N81c3ab3c353544c9b673be7535094681 . + _:N9e3f2c4f96904bddb1aa46c01701b0f6 rdf:first ; + rdf:rest _:N8ad3af20ea5248df91865def0b7a98de . - _:N9c88962fdf0e47f99a0477fe51b4207d rdf:first ; - rdf:rest _:N1dc8357fca8043ee86196ff6f1400d3f . + _:N9ed65925a89e40e8b7faaa925d739c72 rdf:first ; + rdf:rest () . - _:N9d46caf53cc94a77812c6af4cd5653dd sh:datatype xsd:decimal ; + _:N9eda1b52fa264730ab0b383d300e1726 sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:probability . + sh:path ns3:sourceInfo . + + _:Na00b6f47e860415881f7e8a524a04316 rdf:first ; + rdf:rest _:Nf6f1751e3ea84341bdeec66f7c44a8ce . - _:N9dce65a406e14831b9cc10cfd6e434a6 rdf:first ; - rdf:rest _:N9c23cd2dcd4243b996ef8897bfa8759e . + _:Na0242fde5c314aa599a3a00cfb01634c rdf:first ; + rdf:rest _:N694e3d4238ff4006b46b450b91f4179a . - _:N9dfffc9a0d064fbbb99f222927600262 sh:datatype xsd:string ; + _:Na1cdda0a73e94e598b769cac4a5a5cb8 sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:vectorString . - - _:N9ee209fef169433cbe6e5201db0529b7 rdf:first ; - rdf:rest _:Nd4eff7d7430d4e6f98acd7f97e4910f1 . - - _:N9f2f4966ca1442de8457e4f8329d0710 rdf:first ; - rdf:rest _:Nab78d95787b8439db6189f9699047620 . + sh:path ns2:energyQuantity . - _:N9f5fcae561fb42dbaa23d4b2cbedef0a rdf:first ; - rdf:rest _:Nb37183f337474d0d8058f31577954cf8 . + _:Na1ce1658c3be4bc0b082944caae9ddea sh:message "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:Nff8e6ed55f604249b913b2bbc6d8411d ; + sh:path rdf:type . - _:N9fc754cd17fe403b9e6567ff39e96ef5 sh:datatype xsd:dateTimeStamp ; + _:Na267e7b88a344e4fbd0c59a6dc760e65 sh:class ns4:DatasetAvailabilityType ; + sh:in _:N89d361d3f1d94de5b28ee82b1d3da3de ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns2:publishedTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . - _:Na108e2b1e33249d1a7c16ae86469a51b sh:datatype xsd:string ; + _:Na2b089e6c69d4697ae4de61d18f020f7 sh:datatype xsd:decimal ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns4:datasetUpdateMechanism . + sh:path ns5:score . + + _:Na3743aad0c334d06a729f81988609c9f rdf:first ; + rdf:rest _:N7f2c8d25f5df4c27b35c70d38090eab3 . - _:Na168e6a25ca4415aa927f2d16152226c sh:datatype xsd:positiveInteger ; + _:Na3925605d49b4db382603ae946c37f51 sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:endIntegerRange . - - _:Na1ab85fdd72146cfb0eb275a20aed6fb rdf:first ; - rdf:rest _:N68dfb19b51934b85a897e13ae36b552a . - - _:Na1f3d174a6d64488a8ff34be710850c5 rdf:first ; - rdf:rest _:N1fcc6df939fe4ff6b57639467f64eff7 . - - _:Na2392fa55f5342ceaccb5f4312194416 rdf:first ; - rdf:rest _:N49d9ce37bbb44f77a01b48e5f2009c3f . - - _:Na341e2127b1c4da9b7a2c521b48ba61d rdf:first ; - rdf:rest _:Nc7468096abf8437e9360a8148a93acdf . - - _:Na34b98cc7abc4ac2bb5b1ba9777ec6a0 sh:class ns1:IntegrityMethod ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:verifiedUsing . + sh:path ns1:hashValue . - _:Na40768ed7c6a40fcb01c9e8f1793b8a7 sh:class ns1:Artifact ; + _:Na3b27046864941989a486e5a70e0edb4 sh:datatype xsd:string ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:definingArtifact . + sh:nodeKind sh:Literal ; + sh:path ns6:obsoletedBy . - _:Na4175476fbca48768ff989c226c9a147 sh:datatype xsd:string ; + _:Na3d930b22d4f462cb8bcb86adb108e16 rdf:first ; + rdf:rest _:N236307149ca247fcad8df1b0dd41fcfc . + + _:Na42e3794f624483e818646ed683c5ba2 sh:datatype xsd:string ; sh:nodeKind sh:Literal ; sh:path ns4:dataPreprocessing . - _:Na62fed341d814dc8ac95b17410dd06e9 sh:class ns1:Element ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:to . - - _:Na8a357017cea4aaf8263bb41e69ff340 rdf:first ; - rdf:rest _:Nf385f0cc22b44164be25837552539b1c . + _:Na44640dae5c34e6ab6f3759a75426eb0 rdf:first ; + rdf:rest _:Nbbe9948554644fd8b49899d278739242 . - _:Na9d0fc4b8c454d308184549fca9959b6 sh:class ns4:ConfidentialityLevelType ; - sh:in _:N64aa14b2a42d49a394ae8a9d4febed04 ; + _:Na449b0b56e3540618b2a2698204edde9 sh:class ns5:CvssSeverityType ; + sh:in _:Ndc4add4edebe43f4821fb10dd712e481 ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns4:confidentialityLevel . + sh:path ns5:severity . - _:Na9d7622cd7e94569b9540b0dc94308f3 rdf:first ; - rdf:rest _:Nf43982ec469c40b4b91b9ef5cea7460d . + _:Na461e12485ec495f9d16f08504499025 rdf:first ; + rdf:rest _:N73833299f42a4f78b3a3379f9d2302d7 . - _:Na9e5a2b2a00c4436a1ad0b1cb737f8f7 rdf:first ; - rdf:rest _:N71c5c74023cf4a52a8b457b1547df6f4 . + _:Na5a538a0052340c0ba01747cca3d3da8 sh:message "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:N8115c0678af046f9bb8fe56f1541b92b ; + sh:path rdf:type . - _:Naa8dde945f86469da5292aed6e8c1634 rdf:first ; - rdf:rest _:Nff58f069db3f4f099a21fd26a1b4e17e . + _:Na5ef7f1675b84ce99e4f4ca36d200a91 rdf:first ; + rdf:rest _:N14d7232930234cad917631e1993d7ccd . - _:Naae3483836e249d3a4cdd827af0f8631 rdf:first ; - rdf:rest _:Ndf7f8e578ea545babb3686ec4ccbd3ad . + _:Na79e142094fb464da3de3ceb4108e4ff rdf:first ; + rdf:rest _:N28c7097edd884a9b92697ec6b6729dc9 . - _:Nab408dbbfc0f4711b251486cdcbf2168 rdf:first ; - rdf:rest _:Nad0e6f0b63fa454384d0c495911f493e . + _:Na82fb3a822a04f6180f1ca7808276d8f rdf:first ; + rdf:rest _:Nc6bdb22311b243119db2aee3b54fabe4 . - _:Nab78d95787b8439db6189f9699047620 rdf:first ; - rdf:rest _:N1b99de6ce73e49328dc792c34798532e . - - _:Nad0e6f0b63fa454384d0c495911f493e rdf:first ; - rdf:rest _:Ne1fcb633a4f546229e86a46e5a84a543 . + _:Na8cf54eee3ac40cca0ed6cfdaef6a576 rdf:first ; + rdf:rest () . - _:Nad1212fd5ed241c891f8afc9235f406c sh:class ns2:CvssSeverityType ; - sh:in _:Nfa63aaf3414846a894fd74b0e16b27ef ; + _:Na92e8ceda7e548bb9a144c2e9c857639 sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns2:severity . + sh:nodeKind sh:Literal ; + sh:path . - _:Nad60293878ba46b5b12652a41f9e5b9e sh:datatype xsd:dateTimeStamp ; + _:Na96bc2776ef4488595f136d0fbac26a6 sh:datatype xsd:anyURI ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:publishedTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - - _:Nada0379a8e6840aeab21269255f5c588 sh:class ns1:Hash ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path . + sh:path ns1:namespace . - _:Naee034377c334f78a3af1a4d25c3d468 sh:datatype xsd:string ; + _:Naa7e95f812804669b3e89daed8d27b21 sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:impactStatement . - - _:Nb040ef9136c54fc59750d17abc90a3ea rdf:first ; - rdf:rest _:Nebb958f1bf4c40b2abcb1472090d7504 . + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Nb05234e65ed34c2e86c4abf63f02725c rdf:first ; - rdf:rest _:N30ddffc861f14836a83cde39db10d792 . + _:Nabd40767fbd84edea7e048b911a681e4 rdf:first ; + rdf:rest _:Ncba4137ebcf84a728acd12bde91130e9 . - _:Nb09770ecd1d644e4aa2b0faf704a96de rdf:first ; - rdf:rest _:Neca5f29d67c84d0ba9ac05e9216798e8 . + _:Nac0a6f045e7e4efd9dbaf01201286a14 rdf:first ; + rdf:rest _:N2c7697a923534e9988689746f1d03e41 . - _:Nb134dbc7f13f499887fd10287bcaba2e rdf:first ; - rdf:rest _:Nb55dc8c91e234dedbb3dbcc141a59bc9 . + _:Nad909dcc4fad4339a9eb809fabd6a871 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . - _:Nb1e48771e71b47e98ac6156affc3e067 sh:class ns1:NamespaceMap ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:namespaceMap . + _:Nadc18a90b6ca4cc3af0fb2aa7418dda8 rdf:first ; + rdf:rest _:Nc2ac7680f26b40408ebfc2b4bb40def7 . - _:Nb28e67cb657b4e9e910e0447be07f36b rdf:first ; - rdf:rest _:N76180350f15e4fd0be60faa3412ed1fa . + _:Nadd5d6fa295c47ee82d49e5fde059110 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:listVersionAdded . - _:Nb3642a2160e24cfd8d98230c09e472be rdf:first ; - rdf:rest () . + _:Nadd6173eaf8b4550a3ec8c90524cc599 rdf:first ; + rdf:rest _:N4d86b5ad122d431bbf443326643a51df . - _:Nb37183f337474d0d8058f31577954cf8 rdf:first ; - rdf:rest _:N6197d862963b45bb806101e5df0a51a7 . + _:Nae7b37ebeef141519b9f1102ae1b30c5 rdf:first ; + rdf:rest _:N682abb8a6bbc40e9947aa2d9d66eec4d . - _:Nb387237d7787460e8f7e72786252a39f sh:class ns1:Element ; - sh:nodeKind sh:IRI ; - sh:path ns1:element . + _:Nae8e63939c7c4cf4aa4ba555362d775c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Nb3c96ed9edf047408c12db5df1daaf43 sh:datatype xsd:string ; + _:Naf01116eff7c4759be95f8f97c257d9c sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; sh:path ns1:hashValue . - _:Nb40056258a0d4d96a453b1af72d463fc rdf:first ; - rdf:rest _:N9063493949754db985c6c4bb9effda34 . + _:Nb07efffce0ba43a2bcac0e3a90a48609 rdf:first ; + rdf:rest _:Nb245e59ae52342bea2f1feb05bb80e79 . - _:Nb55dc8c91e234dedbb3dbcc141a59bc9 rdf:first ; - rdf:rest _:Nfe1303da564e44c3ab64d0e8f83a0713 . + _:Nb0ab9a298e9845b1b1b770398def929d rdf:first ; + rdf:rest _:Nabd40767fbd84edea7e048b911a681e4 . - _:Nb6697d6a50a946d9a78f5c1d507fee30 rdf:first ; - rdf:rest _:N3f1a11bf8f004d80a83fff483af24469 . + _:Nb245e59ae52342bea2f1feb05bb80e79 rdf:first ; + rdf:rest _:N6aa0e623203745d7b1fb18b485918354 . - _:Nb6b505dc76be4a36b1710a497695e245 rdf:first ; - rdf:rest _:N6731fd512ee84a2781b8140677b0161e . + _:Nb2747510507b404f9243bfd7225f629d rdf:first ; + rdf:rest _:Nc9235a4485e64fff9b1298095061a58e . - _:Nb6e9515340134630a513fd38825c064d rdf:first ; - rdf:rest _:N88066f14b8624768ac4e2ef3ea08df92 . + _:Nb28702ad1ccc478ba7b8aa42bc12985d rdf:first ; + rdf:rest _:Na3d930b22d4f462cb8bcb86adb108e16 . - _:Nb7591bd67efe44909d92824106c3b13d sh:class ns1:HashAlgorithm ; - sh:in _:N2e8a1060d29d437ba2a94908211b9554 ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:algorithm . + _:Nb2f2a5ddadbe4718954d50737f92e201 rdf:first ; + rdf:rest _:Na44640dae5c34e6ab6f3759a75426eb0 . - _:Nb953247c1d474ff9b1190938b713a604 sh:datatype xsd:anyURI ; - sh:nodeKind sh:Literal ; - sh:path ns1:identifierLocator . - - _:Nb95a1dba72b847409cd9eab4ed5e0033 sh:class ns5:ContentIdentifier ; + _:Nb345ac20ec3244e480ec30eee26dc06e sh:class ns1:IntegrityMethod ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns5:contentIdentifier . + sh:path ns1:verifiedUsing . - _:Nb9bfca375550473584a9365efe4f29a3 rdf:first ; - rdf:rest _:N77693c7bc7954401a66962a8958fac0c . + _:Nb3e77cdb9a14442eafb0659c7081c110 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Nba91218e21de428abcc29e6f6dd70951 rdf:first ; - rdf:rest _:N6717b73c37f1437da67113b68f12bf12 . + _:Nb40076de31ba4cc08826656559e10385 rdf:first ; + rdf:rest _:N59f692071bb64860ab9f02cfb4670088 . - _:Nbb14891b173645c4a19f0f952441b988 rdf:first ; - rdf:rest () . + _:Nb4381a5cee3143a482af28cf9a364f3c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . - _:Nbb554a0d397845a2a23c335ba508c87e rdf:first ; - rdf:rest _:Ncb7110c05f9f446f887398fa2d241dd1 . + _:Nb6e99584403541df96486fcac6d79017 rdf:first ; + rdf:rest _:N4538304380bf48b895869aa8dbea3275 . - _:Nbb8a5798239c4e919f8766e4ec36f99c rdf:first ; - rdf:rest _:Ne84bb159066e48a1a884cceaa3854438 . + _:Nb81407b76fc94f228f1f5ad011d931a5 rdf:first ; + rdf:rest _:Nc82d9b6d9a4a40d6b95e4cd04612ac98 . - _:Nbb925214ef4742999c6047ece09174ec rdf:first ; - rdf:rest _:Nb09770ecd1d644e4aa2b0faf704a96de . + _:Nb850dda843534d3ab3ffbadf70766fef sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . - _:Nbc63e97d65ef4f38936c3be4f51c6827 rdf:first ; - rdf:rest _:N556a43c641024cdb92f4ef30ad62ff89 . + _:Nb8a14d0c45314542aa2d6a98232399be sh:hasValue . - _:Nbd9879e4dffa4f9bbdc67aa2782f06f5 rdf:first ; - rdf:rest _:Ne92d6e989fde455e8e2dd493a67d27bd . + _:Nb9165bd1d4e8406eb56e237a892cfba4 rdf:first ; + rdf:rest _:N0753f471dae945e885cde15702c705bb . - _:Nbe19063f503a46969af5f11469f71a33 rdf:first ; - rdf:rest _:N998d2725c2574c8f8344620b839e2d6f . + _:Nb916f2dfc1c640bd8e0dac9bb5956172 sh:class ns5:VexJustificationType ; + sh:in _:N57e86c05425144f4a08e64395a0d5e1d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . - _:Nbe2a417f2d204fcb9bb60e5d58b0044f rdf:first ; - rdf:rest _:Nca5f3f2dadbd4839a75e31645149c809 . + _:Nba03adbea09d477299a596cac9fd8319 sh:message "https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:Ndbfe3b48ba714fb990a0e903863ea1ed ; + sh:path rdf:type . - _:Nbed681e4050a4ed381ead86181284b9d rdf:first ; - rdf:rest _:N87f3315e965b43ebab1aa1b8deccf16f . + _:Nbac401e4be1249dd86dd149952baf59b sh:message "https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:N5bda6a3731444310990a06326743f6aa ; + sh:path rdf:type . - _:Nbf34bde0e54243da9c73928c648b8ad7 rdf:first ; - rdf:rest _:N1b7b0e6303e14427817b4b206ef940ce . + _:Nbb0a3a63cdba4f078c6de6eef7ff6579 sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:Ncedd59bf4f1a4436ac8325d34d020df5 ; + sh:path rdf:type . - _:Nbf51d2fce0c449ca8df0fa964ec48e89 sh:datatype xsd:string ; + _:Nbbbec88245754e9d9390b9a11f0b67c2 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns6:informationAboutApplication . + sh:path ns6:obsoletedBy . + + _:Nbbe9948554644fd8b49899d278739242 rdf:first ; + rdf:rest _:N7b50bf552c054e5baab961ecc882b722 . - _:Nbfec05fc44f6435dbdeeb9f608a28e4c sh:class ns4:DatasetAvailabilityType ; - sh:in _:N3ef3340b9a594445b7754965e6a0adaf ; + _:Nbc1332652da345c49ad3c948238f404b sh:datatype xsd:anyURI ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns4:datasetAvailability . + sh:nodeKind sh:Literal ; + sh:path ns3:packageUrl . + + _:Nbc8ae53aacf942ca88840a6c1d655d6c rdf:first ; + rdf:rest _:N58021835a49a4b959f9428f8df7f7198 . + + _:Nbd013d07f45a42d99931fe619ee4ca95 rdf:first ; + rdf:rest _:N7583808b54c947658126a7846ad7cc76 . - _:Nc034445fd507418d8439a09bb2e562dc sh:datatype xsd:decimal ; + _:Nbd0d551be201428eb241c70d0e315cfa rdf:first ; + rdf:rest _:Nd0cfba2a98544626a8566f29105598e9 . + + _:Nbd14f0a1267744e89f6930e710689414 sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns6:energyQuantity . + sh:path ns1:identifier . - _:Nc05797f950af44fbadd42eee2e56df6c rdf:first ; - rdf:rest _:N558588160dbd42e28c5618ebcbb6e00a . + _:Nbd45f3e248c84b27b2e1a0da67d47a71 rdf:first ; + rdf:rest _:N54d1f829ecc441b9b7d9248324cbea6b . - _:Nc0df3f2041aa425183862b62f02dd829 sh:datatype xsd:string ; + _:Nbd47cac50394462f9015e00ec4b449a6 sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:specVersion ; - sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + sh:path ns1:key . + + _:Nbdc672a90df4480da8648bd31507d48e sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nbf6c9a626dad41fa8a0422cb3ddab7a3 rdf:first ; + rdf:rest _:Ndcdb30d7deca45a8bc3e563144933f0e . + + _:Nbffaba2351c747ef8e380b89888a5f14 rdf:first ; + rdf:rest _:N288949a61054447689377b531414e0b7 . - _:Nc14cc862b5494776966375d4711f1f8d rdf:first ; - rdf:rest _:Nfafa3bfbbc7b4ea7bd042cec31c4660f . + _:Nc0c94fed0eb041ef8c4fe70f4b1fd7c0 rdf:first ; + rdf:rest () . - _:Nc26fe6b1cfc54bc6811b7d4724089f96 rdf:first ; - rdf:rest _:Ncdcdce99937a4256a16f3f88605197d9 . + _:Nc15495aea74e4883afce40f042a057d5 rdf:first ; + rdf:rest _:N58c3f747313349d396ead702e2de2953 . - _:Nc2c6dbe5330f4b17ae33727e45f3e9d4 rdf:first ; - rdf:rest _:N04f6ef255f0f45e0843face78e6af32f . + _:Nc1bb7a1b7d034342906511e27e066abc rdf:first ; + rdf:rest _:Nf21725c3245f4286b67bd679d3351c59 . - _:Nc416283f46f74c5ca28e42eede357fc1 sh:datatype xsd:string ; + _:Nc22ee04d695b4582bd604f6206900620 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:dataLicense . + + _:Nc2ac7680f26b40408ebfc2b4bb40def7 rdf:first ; + rdf:rest _:Nfd592b5830bc43009e433a4172fb036b . + + _:Nc37985fef6884679b49d387a2ef08d3f sh:datatype xsd:boolean ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:prefix . + sh:path ns6:isFsfLibre . - _:Nc5839c1a42cb4cbf8b8f389491a2b604 sh:datatype xsd:string ; + _:Nc38c872821b548ee8f430a027b2d711f sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + sh:path ns3:homePage . - _:Nc5bf40e3b2584e2eaa4becc473bed079 sh:class ns3:ExtendableLicense ; + _:Nc3c21678fc9a459784f054a6954a9aa8 sh:class ns1:CreationInfo ; sh:maxCount 1 ; sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:creationInfo . + + _:Nc4156282a9c34b6190b0869cdc1793db sh:class ns1:Element ; sh:nodeKind sh:IRI ; - sh:path ns3:subjectExtendableLicense . + sh:path ns1:element . - _:Nc642cb7cb5d441eaaa4a1fc86368d998 sh:class ns2:ExploitCatalogType ; - sh:in _:Nd0989d19000249b7b6abdfee096c9f41 ; + _:Nc4286224070a4248ad8590c45a7c8bc6 rdf:first ; + rdf:rest _:N425d570f86674f7facee623f8d84a311 . + + _:Nc51fb19223644705a84f646344b7e9d3 sh:class ns6:LicenseAddition ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns2:catalogType . - - _:Nc6df8997e25c4618ad64b329bea18fa4 sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns5:downloadLocation . + sh:path ns6:subjectAddition . - _:Nc6fa5c5fdf614c2f88c2b4fc315663fb rdf:first ; - rdf:rest _:Nb6b505dc76be4a36b1710a497695e245 . + _:Nc5485992ed4e4cbea07fa6d87ee716ac rdf:first ; + rdf:rest _:Nc85a3a5deac54465a32d993ba5434b00 . - _:Nc709c441c5e04513bcf2e73d3670fca8 rdf:first ; - rdf:rest _:N78f0595c63a44f9ea394e506cdf868e9 . + _:Nc63741a7112e471ba97ce37e05f2dac1 sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . - _:Nc7468096abf8437e9360a8148a93acdf rdf:first ; - rdf:rest _:Ndee65321b0f14da3a2a5675702243602 . + _:Nc6bdb22311b243119db2aee3b54fabe4 rdf:first ; + rdf:rest () . - _:Nc7ccb8d419ad49ab9f18f22daf82266f sh:datatype xsd:dateTimeStamp ; + _:Nc6d18260ddfa478b84c2dc19c2059aa2 sh:class ns3:File ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:releaseTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:snippetFromFile . - _:Nca5f3f2dadbd4839a75e31645149c809 rdf:first ; - rdf:rest _:N18a257cc80b34d42949a3f99d880f84c . + _:Nc6d7eec7a63445c8a64113d0e59ce02c rdf:first ; + rdf:rest _:N30a10bdc909f4c4bb84f02821147b416 . - _:Ncadfef9a365e400a9db499b45bcaafcb rdf:first ; - rdf:rest _:N092e19c1eb954e979b39018f62ba840a . + _:Nc704d39d408f41caa9805e140ff0016a sh:class ns1:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns1:originatedBy . - _:Ncb7110c05f9f446f887398fa2d241dd1 rdf:first ; - rdf:rest _:N9a2ece59dbaf463a9c858ceb00db829f . + _:Nc71de92f1cc649fcab4d77d974dac329 rdf:first ; + rdf:rest _:Nfc3f4dc279d7471b83aa1a9df09f8d3f . - _:Ncb9989fa0c964e6f8d1f94c2ac8e2674 rdf:first ; - rdf:rest _:N81a9816f437e481bb798da6e731d8252 . + _:Nc7b49cc0a08745e08e5ba42ee492184f rdf:first ; + rdf:rest () . - _:Ncd7fa1f2b5334cd680d0c04e40453667 sh:datatype xsd:string ; + _:Nc7f12b88e8f5489dacbbfeb81192696a sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:comment . + sh:path ns6:isDeprecatedLicenseId . + + _:Nc82d9b6d9a4a40d6b95e4cd04612ac98 rdf:first ; + rdf:rest _:N4ad4011b5f8c44cbb3e76f5da0885cfd . - _:Ncd807f7a6b8b429283fa3418dc19e6d9 rdf:first ; - rdf:rest _:N833899f5b4b1487b8858f9aebd17a95c . + _:Nc85a3a5deac54465a32d993ba5434b00 rdf:first ; + rdf:rest _:Ne7777394524c4639973161dd3aff2db3 . - _:Ncdb4a970c7f542688b373a1da217c447 sh:datatype xsd:string ; + _:Nc8b9ea4213214eccb17ccccf3790161d sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns6:limitation . + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Ncdcdce99937a4256a16f3f88605197d9 rdf:first ; - rdf:rest _:N4cf191c2823c4f9ba2e3124c01643d11 . + _:Nc91762ec925048e0a85d224bd2bd6d32 rdf:first ; + rdf:rest _:Nf028d12b2d0f4f6cb20747b6b39a8b5b . - _:Ncdeee899859040f3903c3212d22c1507 rdf:first ; - rdf:rest _:N349d882683524e14ae98f62402cadf06 . + _:Nc9235a4485e64fff9b1298095061a58e rdf:first ; + rdf:rest _:N05edbc4959e844438800e546abaebaea . - _:Ncf36f0c937574a40957458e67ccab9cc sh:datatype xsd:string ; + _:Nc9ccffdec66347509395f75c9845128f sh:message "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:N8eab6125211e4549a03d744617823ad5 ; + sh:path rdf:type . + + _:Nc9ddcdf86e874968aa8f5ba821975eb4 sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:identifier . + sh:path ns5:percentile . + + _:Nca9532c3dd0b421e95d0800b68e3442a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:comment . - _:Nd08114b692094bc788d0ff08c066c7fe rdf:first ; - rdf:rest _:N229d11f8176c4bb7acd631c6b7187287 . + _:Ncae19f1586924a439b37e75eb5b57ed4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . - _:Nd0989d19000249b7b6abdfee096c9f41 rdf:first ; - rdf:rest _:N082cb9b35b7b4791aa1d9debf6080789 . + _:Ncb6c9deb0ba44382a0b957b7ea80228c rdf:first ; + rdf:rest _:Ne7cb91f8739a4acdb1e220785f261efb . - _:Nd0d9b8cea40d40dc91877f32f673ef66 sh:class ns1:ExternalMap ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:import . + _:Ncba4137ebcf84a728acd12bde91130e9 rdf:first ; + rdf:rest _:N8ec4229c1a674693bde766506ca93e87 . - _:Nd134630c82914216aaa76b9680232c0c rdf:first ; - rdf:rest _:N700fb510f2d245d387b84b64f59e834a . + _:Ncc35596b6f164968b0bd35143cbc52ea rdf:first ; + rdf:rest _:N0dc54ccc3f8d4afe897d7be97f9f6928 . - _:Nd1e13d5c3983406c938eabee95860c0e sh:class ns1:Agent ; + _:Nccde3ac271484f91b83ed5fb2e1d70c9 sh:class ns1:PresenceType ; + sh:in _:N0f568f8825144082a14a0e000b8ff13f ; + sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns1:originatedBy . + sh:path ns2:useSensitivePersonalInformation . - _:Nd217b5feb10442a4b50049ba66de62ed rdf:first ; - rdf:rest _:Ncd807f7a6b8b429283fa3418dc19e6d9 . + _:Nce436d556d4e4606ba37d9ad32d22967 rdf:first ; + rdf:rest _:Ne5e123ab8f7d4aa4b35a7442690fe19d . - _:Nd3eb5f22c3be4e02942314bbb3d6fc3e sh:datatype xsd:anyURI ; + _:Nce6e2333750a40619f2e93e40be35d7e sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path . - - _:Nd43d5a2d7d1648598329bd2d9c226af3 rdf:first ; - rdf:rest _:N9b40da1378ab4d6e80898c98996790e2 . + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Nd4eff7d7430d4e6f98acd7f97e4910f1 rdf:first ; - rdf:rest _:N5e376019b0684f24bf032cb891f1c491 . + _:Nce9a69dc19af4e1394f03174c67c5857 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Nd5b3406d866f449096ede6b24376294b rdf:first ; - rdf:rest _:N7177e8b281d74917a500d212b7382b6b . + _:Ncedd59bf4f1a4436ac8325d34d020df5 sh:hasValue ns6:ExtendableLicense . - _:Nd677bc1745684cf98fb92f17a75ebd52 sh:class ns6:EnergyConsumptionDescription ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:finetuningEnergyConsumption . + _:Ncf68ed04ac534a92808a38217fa55530 rdf:first ; + rdf:rest () . - _:Nd698c35793ab47df8eaa1d9f6fe9f131 rdf:first ; - rdf:rest _:Nea5cd277bd75414183676bf891a32527 . + _:Ncff880d9e9c24887adcf512cbce2a444 rdf:first ; + rdf:rest _:Ne3e1ac11e78640fab50085207414679f . - _:Nd73c665e4d964b40be2d12cdc7ab7fa2 sh:class ns1:DictionaryEntry ; + _:Nd05558aa816f416f8c26895bb8d1d9bb sh:class ns2:EnergyConsumptionDescription ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns4:sensor . + sh:path ns2:inferenceEnergyConsumption . - _:Nd78d72bd38c34a3c804f97f9e6b927a3 sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + _:Nd0cfba2a98544626a8566f29105598e9 rdf:first ; + rdf:rest _:Na79e142094fb464da3de3ceb4108e4ff . - _:Nd7c9818a72e64d35a203d1b243e90dd6 rdf:first ; - rdf:rest _:Nf1c469cfa41644dd9f4cafc8ea99bad5 . + _:Nd0d48abef81b4c44a952c0925a6e30a9 rdf:first ; + rdf:rest _:N9bb1cced9aa14e08b36ebf9f952b1d01 . - _:Nda26387d9677485d8554cf33b606d465 sh:class ns1:CreationInfo ; + _:Nd0ec388aab40469ab0a4297c30e0c906 rdf:first ; + rdf:rest _:N9c1ccbc2b86f454395a450f736b67eec . + + _:Nd11df36dd5014f759eab790e847b9857 sh:class ns1:Element ; sh:maxCount 1 ; sh:minCount 1 ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:creationInfo . - - _:Nda9579bf8aeb475c986dfda97af9e414 sh:class ns1:Element ; sh:nodeKind sh:IRI ; - sh:path ns1:rootElement . + sh:path ns1:from . - _:Ndaea8b0d88324897b34af58f66f51f7c rdf:first ; - rdf:rest _:N9586947b2f2b402c815b61cb75a37942 . + _:Nd1b797da281643468add752e036349fd rdf:first ; + rdf:rest _:N40bcef929ef64825a68929a36aefa27c . - _:Ndaecf52053104527964b081f8f6d4dfe sh:class ns1:Element ; + _:Nd2a11bb8a1a14a82994d02e9dd610275 sh:class ns1:Artifact ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns2:assessedElement . + sh:path ns1:definingArtifact . - _:Ndb56a4a0aad9490faaa05462a9fcc5b9 rdf:first ; - rdf:rest _:Nefe7cf242fd84f90a4f3cc6062e671c8 . + _:Nd33af007bad14a4594f7039df1c5df75 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:licenseXml . - _:Ndb8f89749acf4352b1d62c554af7fde6 rdf:first ; - rdf:rest _:N1fb6b0088d4c43e7b3c2fc9342ceaa64 . + _:Nd385c846dfa14371a0a3697f7168b4c1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . - _:Ndc5c3acba75e4205b113623c75621c6e rdf:first ; - rdf:rest _:N9dce65a406e14831b9cc10cfd6e434a6 . + _:Nd3d538fe1cb544b5808c51dffd844c81 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:standardLicenseTemplate . - _:Nde44f9707bd34a41a8e403a4f539bb2e rdf:first ; - rdf:rest _:Ndfbc16b71fc74cb09458e7b7f0e12f1a . + _:Nd6ca1bcbdc494e39a9c1a4da0c52a0b3 rdf:first ; + rdf:rest _:Nb81407b76fc94f228f1f5ad011d931a5 . - _:Ndecce5d991454f63835a411ad5c3d25f rdf:first ; - rdf:rest _:Ne8307a3d6a8a433fad20e9cf2bd69327 . + _:Nd6f4245b3ebe44e6b100782b191deb97 sh:message "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not _:Nf58f6bed32c5414ca98526a5d6a7b6dc ; + sh:path rdf:type . - _:Ndee65321b0f14da3a2a5675702243602 rdf:first ; - rdf:rest _:N65e7526ffa224998af69bd3d4082b522 . + _:Nd73c69088f734dffb4cc9539c637aecf rdf:first ; + rdf:rest () . - _:Ndf7085005814495cbc9689c68bb9683d sh:datatype xsd:anyURI ; - sh:maxCount 1 ; + _:Nd77657e0b19d459c931f64f48ed7e1a6 sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ns1:locationHint . + sh:path ns6:seeAlso . - _:Ndf7f8e578ea545babb3686ec4ccbd3ad rdf:first ; - rdf:rest _:Na8a357017cea4aaf8263bb41e69ff340 . + _:Nd77e569c4d2d4d2c9bb29ea462bc94cc rdf:first ; + rdf:rest _:N39638ea4b52f4236b7a808cb979d2f4b . - _:Ndfbc16b71fc74cb09458e7b7f0e12f1a rdf:first ; - rdf:rest _:N2bdf11c1b85e405a835c07e19f150556 . + _:Nd83655f2100e4025b2eefd465fc154ab rdf:first ; + rdf:rest _:N0c3b30ca2bdf4cb1839bdc608bc41186 . - _:Ndfeaf41c217c4e0c8c442c54949d7e6a sh:class ns3:License ; + _:Nd8679c5e3311467ca097a4151ac8fa54 sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns3:subjectLicense . + sh:nodeKind sh:Literal ; + sh:path ns1:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Ne0a4093971cc4c949d28cdad8bdcb48d rdf:first ; - rdf:rest _:N46c1d107f9c3474aac7ed47419f9465a . + _:Nd90adf23ae66491daa68ac6dd4501bdf rdf:first ; + rdf:rest _:N243ef6907efb40d38e00f4430d63fc19 . - _:Ne0cb74aabc9c4794b4d9319b9a1fe42b sh:class ns1:HashAlgorithm ; - sh:in _:N4d126f9477f941e8bd279a13b5a8f5bd ; + _:Nd91122440e7149a28656eb9394e082b2 rdf:first ; + rdf:rest _:Nb2f2a5ddadbe4718954d50737f92e201 . + + _:Nd951591fca6c47c2985dd159db6ad52c rdf:first ; + rdf:rest _:N4f7ca95fbfad4d20810e92ab09220394 . + + _:Nda71586c3c6541b4a6a907d316dca405 sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nda791debefe5491aa84d61433873c630 sh:class ns1:SupportType ; + sh:in _:N1a0279389d714631b1d12935e9f2b014 ; sh:nodeKind sh:IRI ; - sh:path ns1:algorithm . + sh:path ns1:supportLevel . - _:Ne1476e00df5f4847a5f13d26ed774a56 sh:datatype xsd:string ; + _:Ndaeba75fb43b4db7b777e9b00ecd7064 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns4:datasetNoise . + sh:path ns6:deprecatedVersion . - _:Ne14b54567e794b13a34acf8718d2ccf6 sh:datatype xsd:string ; + _:Ndb06ff981cef4e94bfdbec22badacd4d sh:class ns1:PresenceType ; + sh:in _:N0e4d30a5dd60459dbbb5efc7333deb37 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Ndb31c53559be41e0b28e79b74da0b557 sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:listVersionAdded . + sh:path ns1:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Ne1fcb633a4f546229e86a46e5a84a543 rdf:first ; - rdf:rest _:N42dac2d2cbe6407596e2fb585812097d . + _:Ndb50eefe33ac4feda6cfb13073b5324e rdf:first ; + rdf:rest _:N8b86dbc23a22407a9380fbd9376d3b83 . - _:Ne202363026264077a74d779bbd16e04c rdf:first ; - rdf:rest _:Nba91218e21de428abcc29e6f6dd70951 . + _:Ndbf7c5384f2242b98dd62b6a8d6a503f rdf:first ; + rdf:rest () . - _:Ne2b61099faaa4dfeb2a1dbb6cb39c943 sh:class ns1:PresenceType ; - sh:in _:N6afb5f6c981f4dc0b9434c037cffebfb ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns6:autonomyType . + _:Ndbfe3b48ba714fb990a0e903863ea1ed sh:hasValue ns1:Artifact . - _:Ne2f51219aefd476d89347b0e1c485369 rdf:first ; - rdf:rest _:Nb6e9515340134630a513fd38825c064d . + _:Ndc4add4edebe43f4821fb10dd712e481 rdf:first ; + rdf:rest _:N8a37deb026864cdca312209746e2caaa . - _:Ne3895908b9eb4cf68888a0b70d8088ff sh:datatype xsd:decimal ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns2:score . + _:Ndc4f18efad334d78a498ea9df84fbd02 sh:class ns1:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:namespaceMap . - _:Ne3abaf912f304b1bbda537f0c9866ce8 sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:issuingAuthority . + _:Ndc659c8552d54ab684aadbdacdbd7a8d rdf:first ; + rdf:rest _:Nf142b126cd744b69be8d6c35ee1361e4 . - _:Ne4619e36e32c4fdc886ba17b636520a3 sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:namespace . + _:Ndcdb30d7deca45a8bc3e563144933f0e rdf:first ; + rdf:rest _:N6be5db9035a14b779b13bfa0a5a51c3e . - _:Ne4c7d5c25b2f46f3b980935a3b7858e2 rdf:first ; - rdf:rest _:Nb28e67cb657b4e9e910e0447be07f36b . + _:Nddcc9ac569c4442b894f208d7722b4f8 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns1:locator . - _:Ne4d0e63a8226430099ec09bd81396164 sh:datatype xsd:decimal ; - sh:maxCount 1 ; - sh:minCount 1 ; + _:Ndde9f898797c42b989ef522557debf64 sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ns2:score . + sh:path ns6:seeAlso . - _:Ne5992967c6784ac0a64f460548c9c73c sh:class ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:extension . + _:Ndfe4dc1d7d574b10a92ee8955837ad9d rdf:first ; + rdf:rest _:N0e31c4b45c4b442e9f1d32ab917a76ae . - _:Ne6082a08d51b4476b3a983aafaf1d69e rdf:first ; - rdf:rest _:N6d28e1bd9c9f4454b0cd19fce2d51a40 . + _:Ne03121e956234709bc0f8f288597ff50 sh:class ns3:SoftwarePurpose ; + sh:in _:N261c61aa119e4f4e9ce3c9387fb29c9f ; + sh:nodeKind sh:IRI ; + sh:path ns3:additionalPurpose . - _:Ne616eaa63e1944649dd12a3061e5726a rdf:first ; + _:Ne06f01bddfb24f69a9e1c0ba9694b11d rdf:first ; rdf:rest () . - _:Ne7755fef413944e6a5bd969d379e8410 sh:datatype xsd:string ; + _:Ne0ff4ba19d0a41c18c6ccfc733f2193d rdf:first ; + rdf:rest _:N4e1bd25f594a483ab492b4c24a5748eb . + + _:Ne11c75cafdb0438299216847b06716cf sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:key . + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Ne8307a3d6a8a433fad20e9cf2bd69327 rdf:first ; - rdf:rest _:N99c96394ef494f739f0ba15682e92ea3 . + _:Ne1917fc7b2894ab7a09e78e8e8b21989 rdf:first ; + rdf:rest _:Nbc8ae53aacf942ca88840a6c1d655d6c . + + _:Ne20cfbefa1424ba79abfc89287f1eef3 sh:class ns1:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . - _:Ne84bb159066e48a1a884cceaa3854438 rdf:first ; - rdf:rest _:N1013910040b04b98b3a99c32bab64312 . + _:Ne21f363965114243b81ce67f76575de3 rdf:first ; + rdf:rest _:Nf6541e98d99947d9a7ccb49088b43ea0 . - _:Ne880e2c5878f4becba59cd843618c77a sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns3:listVersionAdded . + _:Ne223bb746dc9463bbbe16ca844619e98 rdf:first ; + rdf:rest _:N45481eab750645b4929b7b63c8ca7916 . - _:Ne8b93e1651f84d5f8ff94e4b82012f07 sh:class ns1:Element ; - sh:maxCount 1 ; - sh:minCount 1 ; + _:Ne3b40c9739164b2eb0ae163374d9c4ac sh:class ns1:Element ; sh:nodeKind sh:IRI ; - sh:path ns1:from . + sh:path ns1:rootElement . - _:Ne8efa463e51845deb9ed8d60461313c3 rdf:first ; - rdf:rest _:N1f248bb10ce740cc9124e394b35259ba . + _:Ne3e1ac11e78640fab50085207414679f rdf:first ; + rdf:rest _:N510a0fe04f844da5bb96208d9e6a563c . - _:Ne92d6e989fde455e8e2dd493a67d27bd rdf:first ; - rdf:rest _:N2d1a418cbe234eceb99e5900d573b9f0 . + _:Ne41f054fce23460dba46863153e67567 sh:hasValue ns1:IntegrityMethod . - _:Ne9348ee72a18435bbcdf5bb338a3fcb6 rdf:first ; - rdf:rest _:N885913019f4b4fe7afcd38cc847f9ef6 . + _:Ne4baf3becb8740a79f8bceb49f40679f rdf:first ; + rdf:rest _:Nd91122440e7149a28656eb9394e082b2 . - _:Ne9376f7e610a4f378d34348bf09acb82 sh:class ns1:ExternalIdentifierType ; - sh:in _:Nbed681e4050a4ed381ead86181284b9d ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:externalIdentifierType . + _:Ne5e123ab8f7d4aa4b35a7442690fe19d rdf:first ; + rdf:rest _:N072d6f5c7eee40859e3a93d05034536f . - _:Nea5cd277bd75414183676bf891a32527 rdf:first ; - rdf:rest _:Nc26fe6b1cfc54bc6811b7d4724089f96 . + _:Ne64dea82135241279d97934d928f2d35 rdf:first ; + rdf:rest _:Nbf6c9a626dad41fa8a0422cb3ddab7a3 . - _:Nea611e5c42f94004b40d78331b3f6977 sh:datatype xsd:string ; + _:Ne68051bb209048da9a57bc5dbaf28bf0 sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:value . + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - _:Neb11974d792545bab359067d0609d8ef sh:datatype xsd:string ; + _:Ne70b85feb564419597741ca637d61d03 sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:vexVersion . + sh:path . - _:Nebb958f1bf4c40b2abcb1472090d7504 rdf:first ; - rdf:rest () . + _:Ne7777394524c4639973161dd3aff2db3 rdf:first ; + rdf:rest _:N33da303c78e142a2acc0db12f3ee6686 . - _:Nec3642cffbce44abbfb1f66ffa74d5c1 sh:datatype xsd:string ; + _:Ne778a773be4f408192f2ed37c6143a5d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path . + sh:path . + + _:Ne7cb91f8739a4acdb1e220785f261efb rdf:first ; + rdf:rest _:N38aeb59117654398b393a546eaaa5fd9 . - _:Neca5f29d67c84d0ba9ac05e9216798e8 rdf:first ; - rdf:rest _:N682a1c11ac5b4e2ea369c111bf3c01c7 . + _:Ne81afbff18a74c75ac853da24ab327a0 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns6:member . - _:Necfb795205bb49a69ffa1a569c48717a sh:datatype xsd:string ; + _:Ne820a8ec67114d53b03a71f5f7be31f5 sh:datatype xsd:anyURI ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns4:dataCollectionProcess . + sh:path ns5:locator . - _:Nee384a627c3d4a89bbf6312a1aa64aba rdf:first ; - rdf:rest () . + _:Ne883dfda4a7445ceb1e70f39ddd03fea sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:comment . - _:Nee5028549c054614bcad84bd05b4e1a7 rdf:first ; - rdf:rest _:N124216cccbad47f486b33fd9dce70c06 . + _:Ne93ae5d0cb664d7ab2554eaa72a23f25 rdf:first ; + rdf:rest _:Ne94d7f462c66468a8c52086b6b54de89 . - _:Neecbcd12ce83469c90d8e79c41ce15e2 sh:datatype xsd:string ; + _:Ne94d7f462c66468a8c52086b6b54de89 rdf:first ; + rdf:rest _:Nb07efffce0ba43a2bcac0e3a90a48609 . + + _:Ne976bc717eb6446291a939038610ee2c rdf:first ; + rdf:rest _:Nc5485992ed4e4cbea07fa6d87ee716ac . + + _:Nebecc80c7e4045d1b3ad15ab0c1d04ec sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path . + sh:path ns1:externalSpdxId . - _:Nefe7cf242fd84f90a4f3cc6062e671c8 rdf:first ; - rdf:rest _:Nd217b5feb10442a4b50049ba66de62ed . + _:Nece0b4f721a847f98727202b50f4a753 rdf:first ; + rdf:rest _:N210fbcf85b384009a2cee68e4a7e6b78 . - _:Nf05790d65f4b451781271dd86a5b4005 rdf:first ; - rdf:rest _:Na341e2127b1c4da9b7a2c521b48ba61d . + _:Ned1f0afb78d3460c9478383abf3da36b rdf:first ; + rdf:rest _:Na8cf54eee3ac40cca0ed6cfdaef6a576 . - _:Nf0b9c1849e524f0e8b565e2bde495ce5 rdf:first ; - rdf:rest _:N27a589ebe1bb40c483985fcde9a2d5f2 . + _:Nedaa28cbd856413e95e7805cf2d255dd rdf:first ; + rdf:rest _:N2f8145031850475ba01bc466221debed . - _:Nf0d9d94b4d9a4523a1d863217249938a sh:datatype xsd:string ; - sh:maxCount 1 ; + _:Nef3e82bf7eac41aa8dc101eabd0f1815 rdf:first ; + rdf:rest _:N4ac93d52ef544d5cb73aeaeb279b7567 . + + _:Neff5f08fa9fd4aaeb51026e2484443c7 rdf:first ; + rdf:rest _:N16cb468a2dcd423bb3654b71a6f00062 . + + _:Nf028d12b2d0f4f6cb20747b6b39a8b5b rdf:first ; + rdf:rest _:Ncb6c9deb0ba44382a0b957b7ea80228c . + + _:Nf0752cee7bef48efaa39267516a6b21a sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns6:informationAboutTraining . + sh:path ns4:knownBias . - _:Nf1326177a8f54cd38fb0d7aae60d69bf rdf:first ; - rdf:rest () . + _:Nf10e65ca64f84003827c23ef339743e5 rdf:first ; + rdf:rest _:Ne1917fc7b2894ab7a09e78e8e8b21989 . + + _:Nf142b126cd744b69be8d6c35ee1361e4 rdf:first ; + rdf:rest _:N5b2e4dda703849e4933338ff0970e968 . - _:Nf1c469cfa41644dd9f4cafc8ea99bad5 rdf:first ; - rdf:rest _:N99061926c1b041518ba79742537acbaf . + _:Nf21725c3245f4286b67bd679d3351c59 rdf:first ; + rdf:rest _:N916e8c3c85774fcd96b700a20240ca75 . - _:Nf1e92f23ec15434084ea8a1bcf7473a8 rdf:first ; - rdf:rest _:Nb40056258a0d4d96a453b1af72d463fc . + _:Nf26016059c3e414da185e30155b543f5 sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:extension . - _:Nf2495df384ef4dfe9e42259508a5f433 sh:datatype xsd:dateTimeStamp ; + _:Nf284f365ba5c4e4da40d7d7900d82744 sh:datatype xsd:decimal ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:impactStatementTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + sh:path ns5:probability . - _:Nf32238231fca45f1ac5221bd1ecd220c sh:class ns1:LifecycleScopeType ; - sh:in _:Nbb925214ef4742999c6047ece09174ec ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:scope . + _:Nf3c62ca118b94d17a1ef6b04e407421c rdf:first ; + rdf:rest _:N186b972a57284ae1946b3f7d8e762830 . - _:Nf37cc853c16d47099115691bcb77f2e1 sh:datatype xsd:dateTimeStamp ; + _:Nf3dfbb7f98e84c61b58f5b17e3ae9f19 rdf:first ; + rdf:rest _:N565a78360e28494ea80897aadf944c0c . + + _:Nf41c7f62f52f4c10b14344ec13dfe1e5 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:modifiedTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . - - _:Nf385f0cc22b44164be25837552539b1c rdf:first ; - rdf:rest _:N456086b235914b4f9bd89adfd54de37c . + sh:path ns2:informationAboutApplication . - _:Nf3860ad4cc5d4d87be1f408701c9f435 sh:datatype xsd:string ; + _:Nf44042158d4d4c85a5bd6a0fcb538498 sh:datatype xsd:positiveInteger ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:comment . + sh:path ns1:endIntegerRange . - _:Nf39729cdf1294ea88879ccd16e468339 sh:class ns1:RelationshipCompleteness ; - sh:in _:Na9e5a2b2a00c4436a1ad0b1cb737f8f7 ; + _:Nf4609fa7f53e4898a47341b507b5e03e rdf:first ; + rdf:rest () . + + _:Nf4e0c03b381d4fb584571d8fdd2ca0a7 rdf:first ; + rdf:rest _:Nc15495aea74e4883afce40f042a057d5 . + + _:Nf507b9bee5ae4254bafe4ce3c72a9f18 sh:class ns3:SoftwareArtifact ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns1:completeness . + sh:path ns5:assessedElement . - _:Nf4064e5c7fb84a899bffb14df5844894 sh:datatype xsd:dateTimeStamp ; + _:Nf5531d9c16ff4f589dff19f480634c29 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:startTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . - _:Nf43982ec469c40b4b91b9ef5cea7460d rdf:first ; - rdf:rest _:N556257d7798d418ea42ac047b24405ec . + _:Nf58f6bed32c5414ca98526a5d6a7b6dc sh:hasValue . - _:Nf56fec24d5a44761b7a239c789c51504 rdf:first ; - rdf:rest _:N393d2d53bef34fe0846e87c7df91588d . + _:Nf593d6da70614e2581430bd37d9cd4ef rdf:first ; + rdf:rest _:N132cde65c9b14a1694d400388aecf0cc . - _:Nf5e9739ded9643ef8a3fe72118c28135 rdf:first ; - rdf:rest _:N866122f61ea34bdca92b963b42f6fae2 . + _:Nf6541e98d99947d9a7ccb49088b43ea0 rdf:first ; + rdf:rest _:N931294357284457f9a6f643757b29e72 . - _:Nf6a8366ab85b4074b187672b593f3e6e rdf:first ; - rdf:rest () . + _:Nf6a05248229d4fe292d04534a4c4573d rdf:first ; + rdf:rest _:N83935261300041758021c5a3fbdae6c0 . - _:Nf6aee0ab31d04453b5b92d210b1ad859 rdf:first ; - rdf:rest _:N04c144f227684ce48b50371ca423d8ee . + _:Nf6f1751e3ea84341bdeec66f7c44a8ce rdf:first ; + rdf:rest _:N0c49370c41124d50ac6081418cb2432d . - _:Nf7805d1c06ba43eaa22c6043949bd567 sh:class ns5:SoftwarePurpose ; - sh:in _:Nbc63e97d65ef4f38936c3be4f51c6827 ; + _:Nf71f6300b14a4726a20ffad899bed919 sh:class ns1:ExternalIdentifierType ; + sh:in _:N2aa73eafba6f4d55938fb60c96ff2379 ; + sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns5:additionalPurpose . - - _:Nf7e356ac5a1044be99fd42634fb81f7d rdf:first ; - rdf:rest _:N8c0c4aa1f1ae4f7485a88627cfbc1631 . + sh:path ns1:externalIdentifierType . - _:Nf854d2bed3524a08aa85d987a15ae3b4 rdf:first ; - rdf:rest _:N60be8975df7d4f659d6589e10d3c8e19 . + _:Nf7e1508801cf4398b830fad84fe53388 rdf:first ; + rdf:rest _:N62b8677868664944abc9f19745aed957 . - _:Nf98babca843e446f8ddf5dee59296ef5 sh:class ; - sh:minCount 2 ; - sh:nodeKind sh:IRI ; - sh:path ns3:member . - - _:Nf9cc156a3e084f8ab0ce054200c8fca7 sh:datatype xsd:string ; + _:Nf7fd042770064703a84cd9039273e4f7 sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:summary . - - _:Nf9ea823dce8b4178968bb583746dda07 rdf:first ; - rdf:rest _:N7a477b2d627c40bfbee3b6eca010b404 . + sh:path ns1:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . - _:Nfa5229038d564307aa21cdf1f0981a70 rdf:first ; - rdf:rest _:Ndb56a4a0aad9490faaa05462a9fcc5b9 . + _:Nf81435c80dee4c1db825f1917f62e947 rdf:first ; + rdf:rest _:N507c6135f8424e8db67fe59ae93eb464 . - _:Nfa63aaf3414846a894fd74b0e16b27ef rdf:first ; - rdf:rest _:N0c63fb970906431f8ed02f6980609420 . + _:Nf94717c65e4f4b86b4df261ecf26650d rdf:first ; + rdf:rest () . - _:Nfafa3bfbbc7b4ea7bd042cec31c4660f rdf:first ; - rdf:rest _:N7c1de3ae74ec4d1d9b6be8a05eea2f76 . + _:Nf9bf03371d92462f91a54baa946fd625 sh:class ns1:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:lineRange . - _:Nfc1e6fef13174b9e90d4ca817a331079 rdf:first ; - rdf:rest _:Na1f3d174a6d64488a8ff34be710850c5 . + _:Nfa72871f5924444491d18910ec431abb rdf:first ; + rdf:rest () . - _:Nfc73e3099ed6465bb089df33bbf469ff rdf:first ; - rdf:rest _:N1b790cf0ad524fad8d4f129ccda94fa6 . + _:Nfb655ff9dcc6442baa6046d411f0624c rdf:first ; + rdf:rest _:N8711a8ae5ca942d1bbd795a0144ca9a7 . - _:Nfc79218ef172418cad1d73977bceaf78 sh:datatype xsd:string ; + _:Nfbb5f5e996be44989d31d47d46540443 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:comment . + sh:path ns3:copyrightText . - _:Nfc8707d6d8b944508b09d8d3125e53f3 rdf:first ; - rdf:rest _:N3cb5c5f5df694e3aaf52da4c410b011e . + _:Nfbd3df443088485abe551fc6374a3c4c rdf:first ; + rdf:rest _:N1256cfafa26e453a9d5f8b08cc5920d7 . - _:Nfd60dc4acf8f405b86d3ebb119d8edeb sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns4:knownBias . + _:Nfbd5a9c0923c423a84d0bb8fef89f4a3 rdf:first ; + rdf:rest _:Nadc18a90b6ca4cc3af0fb2aa7418dda8 . - _:Nfd92f942c5e84eb79e459f1d3f1ac4a6 rdf:first ; - rdf:rest _:N094c19bcead34504bd0d0b85f8ba1078 . + _:Nfc3f4dc279d7471b83aa1a9df09f8d3f rdf:first ; + rdf:rest _:N64a80dfe5e954cf59753ab8a96e4eff3 . - _:Nfdf2a70978294bcebad4f299b134dc99 sh:datatype xsd:nonNegativeInteger ; + _:Nfc8b91023a9e4e08ae989e08b6c0b9ec rdf:first ; + rdf:rest _:Nf7e1508801cf4398b830fad84fe53388 . + + _:Nfcc30e48020d4dd2b3493a0cd55ea457 sh:datatype xsd:decimal ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns4:datasetSize . + sh:path ns5:score . - _:Nfe1303da564e44c3ab64d0e8f83a0713 rdf:first ; - rdf:rest _:Nde44f9707bd34a41a8e403a4f539bb2e . + _:Nfd592b5830bc43009e433a4172fb036b rdf:first ; + rdf:rest _:N9b9dc778bc5c415fad7f82cf4f6047d2 . - _:Nff58f069db3f4f099a21fd26a1b4e17e rdf:first ; - rdf:rest _:Ne202363026264077a74d779bbd16e04c . + _:Nfe1814d375d7456e843deb8cde1cf341 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:isDeprecatedAdditionId . - _:Nff63d22b8dc54a40a1754583641b37f3 sh:datatype xsd:string ; + _:Nff33e8337dc8421d9e74b338e35a75d5 sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:actionStatement . + sh:path ns1:name . - _:Nff83286adad842f19d79a36e90df97d2 rdf:first ; - rdf:rest _:Ndaea8b0d88324897b34af58f66f51f7c . + _:Nff8e6ed55f604249b913b2bbc6d8411d sh:hasValue ns3:SoftwareArtifact . - _:Nffd32d595d024069b6df3a1ef8da642a sh:class ns6:EnergyConsumptionDescription ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:trainingEnergyConsumption . + _:Nff9c0c2a18f24f76bfa32806ec48ce59 rdf:first ; + rdf:rest _:N64ae0543871444f6b7d2a497fcf55186 . } diff --git a/rdf/spdx-model.ttl b/rdf/spdx-model.ttl index 7150961c54..0af62b8cf1 100644 --- a/rdf/spdx-model.ttl +++ b/rdf/spdx-model.ttl @@ -1,11 +1,10 @@ @prefix dcterms: . @prefix ns1: . -@prefix ns2: . -@prefix ns3: . +@prefix ns2: . +@prefix ns3: . @prefix ns4: . -@prefix ns5: . -@prefix ns6: . -@prefix ns7: . +@prefix ns5: . +@prefix ns6: . @prefix omg-ann: . @prefix owl: . @prefix rdf: . @@ -14,132 +13,132 @@ @prefix spdx: . @prefix xsd: . -ns6:AIPackage a owl:Class, +ns2:AIPackage a owl:Class, sh:NodeShape ; rdfs:comment "Specifies an AI package and its associated information."@en ; - rdfs:subClassOf ns5:Package ; + rdfs:subClassOf ns3:Package ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns1:PresenceType ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns6:useSensitivePersonalInformation ], - [ sh:class ns6:EnergyConsumption ; + sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:energyConsumption ], + sh:path ns2:metric ], [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns6:standardCompliance ], + sh:path ns2:domain ], [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns6:modelDataPreprocessing ], - [ sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:metric ], - [ sh:class ns6:SafetyRiskAssessmentType ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns6:safetyRiskAssessment ], - [ sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:metricDecisionThreshold ], + sh:path ns2:standardCompliance ], [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns6:typeOfModel ], + sh:path ns2:modelDataPreprocessing ], [ sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:hyperparameter ], - [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns6:domain ], + sh:path ns2:hyperparameter ], [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns6:modelExplainability ], + sh:path ns2:typeOfModel ], + [ sh:class ns1:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns6:informationAboutApplication ], + sh:path ns2:limitation ], + [ sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], [ sh:datatype xsd:string ; - sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns6:limitation ], + sh:path ns2:modelExplainability ], [ sh:class ns1:PresenceType ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns6:autonomyType ], + sh:path ns2:useSensitivePersonalInformation ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns6:informationAboutTraining ] . + sh:path ns2:informationAboutApplication ] . a owl:Class, sh:NodeShape ; rdfs:comment "Class that describes a build instance of software/artifacts."@en ; rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:datatype xsd:dateTimeStamp ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], + sh:path ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ], - [ sh:datatype xsd:anyURI ; + [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:class ns1:Hash ; + sh:path ], + [ sh:class ns1:DictionaryEntry ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ], - [ sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ], + sh:path ], + [ sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:datatype xsd:string ; + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ] . + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns1:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . ns1:Annotation a owl:Class, sh:NodeShape ; rdfs:comment "An assertion made in relation to one or more elements."@en ; rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns1:AnnotationType ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:annotationType ], - [ sh:datatype xsd:string ; + sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ns1:contentType ; sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns1:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:subject ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ns1:statement ], - [ sh:class ns1:Element ; + [ sh:class ns1:AnnotationType ; + sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns1:subject ] . + sh:path ns1:annotationType ] . ns1:LifecycleScopedRelationship a owl:Class, sh:NodeShape ; @@ -152,30 +151,37 @@ ns1:LifecycleScopedRelationship a owl:Class, sh:nodeKind sh:IRI ; sh:path ns1:scope ] . -ns1:Organization a owl:Class ; - rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; - rdfs:subClassOf ns1:Agent ; - sh:nodeKind sh:IRI . +ns1:NoAssertionElement a owl:NamedIndividual, + ns1:IndividualElement ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; + ns1:creationInfo . + +ns1:NoneElement a owl:NamedIndividual, + ns1:IndividualElement ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; + ns1:creationInfo . ns1:PackageVerificationCode a owl:Class, sh:NodeShape ; rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; rdfs:subClassOf ns1:IntegrityMethod ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns1:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:algorithm ], + [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; sh:path ns1:packageVerificationCodeExcludedFile ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:hashValue ], - [ sh:class ns1:HashAlgorithm ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:algorithm ] . + sh:path ns1:hashValue ] . ns1:Person a owl:Class ; rdfs:comment "An individual human being."@en ; @@ -192,34 +198,45 @@ ns1:SpdxDocument a owl:Class, rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; rdfs:subClassOf ns1:ElementCollection ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ; + sh:property [ sh:class ns1:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:import ], + [ sh:class ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; sh:path ns1:dataLicense ], [ sh:class ns1:NamespaceMap ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:namespaceMap ], - [ sh:class ns1:ExternalMap ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:import ] . + sh:path ns1:namespaceMap ] . ns4:DatasetPackage a owl:Class, sh:NodeShape ; rdfs:comment "Specifies a data package and its associated information."@en ; - rdfs:subClassOf ns5:Package ; + rdfs:subClassOf ns3:Package ; sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:string ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns4:anonymizationMethodUsed ], + sh:path ns4:datasetSize ], + [ sh:class ns1:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns4:intendedUse ], - [ sh:class ns1:PresenceType ; - sh:in ( ) ; + sh:path ns4:datasetNoise ], + [ sh:datatype xsd:string ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns4:hasSensitivePersonalInformation ], + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], [ sh:class ns4:DatasetType ; sh:in ( ) ; sh:minCount 1 ; @@ -229,39 +246,28 @@ ns4:DatasetPackage a owl:Class, sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ns4:datasetUpdateMechanism ], - [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns4:dataPreprocessing ], - [ sh:class ns4:ConfidentialityLevelType ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns4:confidentialityLevel ], [ sh:class ns4:DatasetAvailabilityType ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; sh:path ns4:datasetAvailability ], - [ sh:class ns1:DictionaryEntry ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns4:sensor ], [ sh:datatype xsd:string ; - sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns4:datasetNoise ], + sh:path ns4:dataPreprocessing ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ns4:dataCollectionProcess ], - [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns4:knownBias ], - [ sh:datatype xsd:nonNegativeInteger ; + [ sh:class ns1:PresenceType ; + sh:in ( ) ; sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ], + [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns4:datasetSize ] . + sh:path ns4:knownBias ] . -ns3:ConjunctiveLicenseSet a owl:Class, +ns6:ConjunctiveLicenseSet a owl:Class, sh:NodeShape ; rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where all elements apply."""@en ; @@ -270,19 +276,19 @@ where all elements apply."""@en ; sh:property [ sh:class ; sh:minCount 2 ; sh:nodeKind sh:IRI ; - sh:path ns3:member ] . + sh:path ns6:member ] . -ns3:CustomLicense a owl:Class ; +ns6:CustomLicense a owl:Class ; rdfs:comment "A license that is not listed on the SPDX License List."@en ; - rdfs:subClassOf ns3:License ; + rdfs:subClassOf ns6:License ; sh:nodeKind sh:IRI . -ns3:CustomLicenseAddition a owl:Class ; +ns6:CustomLicenseAddition a owl:Class ; rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; - rdfs:subClassOf ns3:LicenseAddition ; + rdfs:subClassOf ns6:LicenseAddition ; sh:nodeKind sh:IRI . -ns3:DisjunctiveLicenseSet a owl:Class, +ns6:DisjunctiveLicenseSet a owl:Class, sh:NodeShape ; rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where only one of the elements applies."""@en ; @@ -291,248 +297,250 @@ only one of the elements applies."""@en ; sh:property [ sh:class ; sh:minCount 2 ; sh:nodeKind sh:IRI ; - sh:path ns3:member ] . + sh:path ns6:member ] . -ns3:ListedLicense a owl:Class, +ns6:ListedLicense a owl:Class, sh:NodeShape ; rdfs:comment "A license that is listed on the SPDX License List."@en ; - rdfs:subClassOf ns3:License ; + rdfs:subClassOf ns6:License ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:deprecatedVersion ], + sh:path ns6:listVersionAdded ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:listVersionAdded ] . + sh:path ns6:deprecatedVersion ] . -ns3:ListedLicenseException a owl:Class, +ns6:ListedLicenseException a owl:Class, sh:NodeShape ; rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; - rdfs:subClassOf ns3:LicenseAddition ; + rdfs:subClassOf ns6:LicenseAddition ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:deprecatedVersion ], + sh:path ns6:listVersionAdded ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:listVersionAdded ] . + sh:path ns6:deprecatedVersion ] . -ns3:NoAssertionLicense a owl:NamedIndividual, - ns3:IndividualLicensingInfo ; +ns6:NoAssertionLicense a owl:NamedIndividual, + ns6:IndividualLicensingInfo ; rdfs:comment """An Individual Value for License when no assertion can be made about its actual value."""@en ; - rdfs:range ns3:IndividualLicensingInfo ; - owl:sameAs . + owl:sameAs ; + ns1:creationInfo . -ns3:NoneLicense a owl:NamedIndividual, - ns3:IndividualLicensingInfo ; +ns6:NoneLicense a owl:NamedIndividual, + ns6:IndividualLicensingInfo ; rdfs:comment """An Individual Value for License where the SPDX data creator determines that no license is present."""@en ; - rdfs:range ns3:IndividualLicensingInfo ; - owl:sameAs . + owl:sameAs ; + ns1:creationInfo . -ns3:OrLaterOperator a owl:Class, +ns6:OrLaterOperator a owl:Class, sh:NodeShape ; rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, of the indicated License."""@en ; - rdfs:subClassOf ns3:ExtendableLicense ; + rdfs:subClassOf ns6:ExtendableLicense ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns3:License ; + sh:property [ sh:class ns6:License ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns3:subjectLicense ] . + sh:path ns6:subjectLicense ] . -ns3:WithAdditionOperator a owl:Class, +ns6:WithAdditionOperator a owl:Class, sh:NodeShape ; rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional text applied to it."""@en ; rdfs:subClassOf ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns3:LicenseAddition ; + sh:property [ sh:class ns6:ExtendableLicense ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns3:subjectAddition ], - [ sh:class ns3:ExtendableLicense ; + sh:path ns6:subjectExtendableLicense ], + [ sh:class ns6:LicenseAddition ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns3:subjectExtendableLicense ] . + sh:path ns6:subjectAddition ] . a owl:Class, sh:NodeShape ; rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; rdfs:subClassOf ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:class ; sh:minCount 1 ; sh:nodeKind sh:BlankNodeOrIRI ; sh:path ] . -ns2:CvssV2VulnAssessmentRelationship a owl:Class, +ns5:CvssV2VulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:score ], + sh:path ns5:score ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:vectorString ] . + sh:path ns5:vectorString ] . -ns2:CvssV3VulnAssessmentRelationship a owl:Class, +ns5:CvssV3VulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:vectorString ], - [ sh:class ns2:CvssSeverityType ; + sh:path ns5:vectorString ], + [ sh:class ns5:CvssSeverityType ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns2:severity ], + sh:path ns5:severity ], [ sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:score ] . + sh:path ns5:score ] . -ns2:CvssV4VulnAssessmentRelationship a owl:Class, +ns5:CvssV4VulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns2:CvssSeverityType ; + sh:property [ sh:class ns5:CvssSeverityType ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns2:severity ], - [ sh:datatype xsd:string ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:vectorString ], - [ sh:datatype xsd:decimal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:score ] . + sh:path ns5:vectorString ] . -ns2:EpssVulnAssessmentRelationship a owl:Class, +ns5:EpssVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:percentile ], + sh:path ns5:percentile ], [ sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:probability ] . + sh:path ns5:probability ] . -ns2:ExploitCatalogVulnAssessmentRelationship a owl:Class, +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:exploited ], - [ sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns2:locator ], - [ sh:class ns2:ExploitCatalogType ; + sh:path ns5:exploited ], + [ sh:class ns5:ExploitCatalogType ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns2:catalogType ] . + sh:path ns5:catalogType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . -ns2:SsvcVulnAssessmentRelationship a owl:Class, +ns5:SsvcVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns2:SsvcDecisionType ; + sh:property [ sh:class ns5:SsvcDecisionType ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns2:decisionType ] . + sh:path ns5:decisionType ] . -ns2:VexAffectedVulnAssessmentRelationship a owl:Class, +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment """Connects a vulnerability and an element designating the element as a product affected by the vulnerability."""@en ; - rdfs:subClassOf ns2:VexVulnAssessmentRelationship ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:actionStatementTime ; + sh:path ns5:actionStatementTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:actionStatement ] . + sh:path ns5:actionStatement ] . -ns2:VexFixedVulnAssessmentRelationship a owl:Class ; +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where a fix has been applied and are no longer affected."""@en ; - rdfs:subClassOf ns2:VexVulnAssessmentRelationship ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; sh:nodeKind sh:IRI . -ns2:VexNotAffectedVulnAssessmentRelationship a owl:Class, +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment """Links a vulnerability and one or more elements designating the latter as products not affected by the vulnerability."""@en ; - rdfs:subClassOf ns2:VexVulnAssessmentRelationship ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns2:VexJustificationType ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns2:justificationType ], - [ sh:datatype xsd:string ; + sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:impactStatement ], + sh:path ns5:impactStatement ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:impactStatementTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ] . -ns2:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; rdfs:comment """Designates elements as products where the impact of a vulnerability is being investigated."""@en ; - rdfs:subClassOf ns2:VexVulnAssessmentRelationship ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; sh:nodeKind sh:IRI . -ns2:Vulnerability a owl:Class, +ns5:Vulnerability a owl:Class, sh:NodeShape ; rdfs:comment "Specifies a vulnerability and its associated information."@en ; rdfs:subClassOf ns1:Artifact ; @@ -540,17 +548,17 @@ ns2:Vulnerability a owl:Class, sh:property [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:modifiedTime ; + sh:path ns5:modifiedTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:withdrawnTime ; + sh:path ns5:publishedTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:publishedTime ; + sh:path ns5:withdrawnTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . a owl:Class, @@ -583,34 +591,64 @@ ns2:Vulnerability a owl:Class, sh:nodeKind sh:Literal ; sh:path ] . -ns5:Sbom a owl:Class, +ns3:Sbom a owl:Class, sh:NodeShape ; rdfs:comment "A collection of SPDX Elements describing a single package."@en ; rdfs:subClassOf ns1:Bom ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns5:SbomType ; + sh:property [ sh:class ns3:SbomType ; sh:in ( ) ; sh:nodeKind sh:IRI ; - sh:path ns5:sbomType ] . + sh:path ns3:sbomType ] . -ns5:Snippet a owl:Class, +ns3:Snippet a owl:Class, sh:NodeShape ; rdfs:comment "Describes a certain part of a file."@en ; - rdfs:subClassOf ns5:SoftwareArtifact ; + rdfs:subClassOf ns3:SoftwareArtifact ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns5:File ; + sh:property [ sh:class ns1:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:byteRange ], + [ sh:class ns3:File ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns5:snippetFromFile ], - [ sh:class ns1:PositiveIntegerRange ; - sh:maxCount 1 ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns5:lineRange ], + sh:path ns3:snippetFromFile ], [ sh:class ns1:PositiveIntegerRange ; sh:maxCount 1 ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns5:byteRange ] . + sh:path ns3:lineRange ] . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . + + a ns1:CreationInfo ; + rdfs:comment "This individual element was defined by the spec."@en ; + ns1:created "2024-11-22T03:00:01Z"^^xsd:dateTimeStamp ; + ns1:createdBy ns1:SpdxOrganization ; + ns1:specVersion "3.0.1" . spdx: a owl:Ontology ; rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; @@ -624,125 +662,125 @@ spdx: a owl:Ontology ; omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . a owl:NamedIndividual, - ns6:EnergyUnitType ; + ns2:EnergyUnitType ; rdfs:label "kilowattHour" ; rdfs:comment "Kilowatt-hour."@en . a owl:NamedIndividual, - ns6:EnergyUnitType ; + ns2:EnergyUnitType ; rdfs:label "megajoule" ; rdfs:comment "Megajoule."@en . a owl:NamedIndividual, - ns6:EnergyUnitType ; + ns2:EnergyUnitType ; rdfs:label "other" ; rdfs:comment "Any other units of energy measurement."@en . a owl:NamedIndividual, - ns6:SafetyRiskAssessmentType ; + ns2:SafetyRiskAssessmentType ; rdfs:label "high" ; rdfs:comment "The second-highest level of risk posed by an AI system."@en . a owl:NamedIndividual, - ns6:SafetyRiskAssessmentType ; + ns2:SafetyRiskAssessmentType ; rdfs:label "low" ; rdfs:comment "Low/no risk is posed by an AI system."@en . a owl:NamedIndividual, - ns6:SafetyRiskAssessmentType ; + ns2:SafetyRiskAssessmentType ; rdfs:label "medium" ; rdfs:comment "The third-highest level of risk posed by an AI system."@en . a owl:NamedIndividual, - ns6:SafetyRiskAssessmentType ; + ns2:SafetyRiskAssessmentType ; rdfs:label "serious" ; rdfs:comment "The highest level of risk posed by an AI system."@en . -ns6:autonomyType a owl:ObjectProperty ; +ns2:autonomyType a owl:ObjectProperty ; rdfs:comment """Indicates whether the system can perform a decision or action without human involvement or guidance."""@en ; rdfs:range ns1:PresenceType . -ns6:domain a owl:DatatypeProperty ; +ns2:domain a owl:DatatypeProperty ; rdfs:comment "Captures the domain in which the AI package can be used."@en ; rdfs:range xsd:string . -ns6:energyConsumption a owl:ObjectProperty ; +ns2:energyConsumption a owl:ObjectProperty ; rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; - rdfs:range ns6:EnergyConsumption . + rdfs:range ns2:EnergyConsumption . -ns6:energyQuantity a owl:DatatypeProperty ; +ns2:energyQuantity a owl:DatatypeProperty ; rdfs:comment "Represents the energy quantity."@en ; rdfs:range xsd:decimal . -ns6:energyUnit a owl:ObjectProperty ; +ns2:energyUnit a owl:ObjectProperty ; rdfs:comment "Specifies the unit in which energy is measured."@en ; - rdfs:range ns6:EnergyUnitType . + rdfs:range ns2:EnergyUnitType . -ns6:finetuningEnergyConsumption a owl:ObjectProperty ; +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is being used in the AI system."""@en ; - rdfs:range ns6:EnergyConsumptionDescription . + rdfs:range ns2:EnergyConsumptionDescription . -ns6:hyperparameter a owl:ObjectProperty ; +ns2:hyperparameter a owl:ObjectProperty ; rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI package."""@en ; rdfs:range ns1:DictionaryEntry . -ns6:inferenceEnergyConsumption a owl:ObjectProperty ; +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model that is being used in the AI system."""@en ; - rdfs:range ns6:EnergyConsumptionDescription . + rdfs:range ns2:EnergyConsumptionDescription . -ns6:informationAboutApplication a owl:DatatypeProperty ; +ns2:informationAboutApplication a owl:DatatypeProperty ; rdfs:comment """Provides relevant information about the AI software, not including the model description."""@en ; rdfs:range xsd:string . -ns6:informationAboutTraining a owl:DatatypeProperty ; +ns2:informationAboutTraining a owl:DatatypeProperty ; rdfs:comment "Describes relevant information about different steps of the training process."@en ; rdfs:range xsd:string . -ns6:limitation a owl:DatatypeProperty ; +ns2:limitation a owl:DatatypeProperty ; rdfs:comment "Captures a limitation of the AI software."@en ; rdfs:range xsd:string . -ns6:metric a owl:ObjectProperty ; +ns2:metric a owl:ObjectProperty ; rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; rdfs:range ns1:DictionaryEntry . -ns6:metricDecisionThreshold a owl:ObjectProperty ; +ns2:metricDecisionThreshold a owl:ObjectProperty ; rdfs:comment """Captures the threshold that was used for computation of a metric described in the metric field."""@en ; rdfs:range ns1:DictionaryEntry . -ns6:modelDataPreprocessing a owl:DatatypeProperty ; +ns2:modelDataPreprocessing a owl:DatatypeProperty ; rdfs:comment """Describes all the preprocessing steps applied to the training data before the model training."""@en ; rdfs:range xsd:string . -ns6:modelExplainability a owl:DatatypeProperty ; +ns2:modelExplainability a owl:DatatypeProperty ; rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; rdfs:range xsd:string . -ns6:safetyRiskAssessment a owl:ObjectProperty ; +ns2:safetyRiskAssessment a owl:ObjectProperty ; rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; - rdfs:range ns6:SafetyRiskAssessmentType . + rdfs:range ns2:SafetyRiskAssessmentType . -ns6:standardCompliance a owl:DatatypeProperty ; +ns2:standardCompliance a owl:DatatypeProperty ; rdfs:comment "Captures a standard that is being complied with."@en ; rdfs:range xsd:string . -ns6:trainingEnergyConsumption a owl:ObjectProperty ; +ns2:trainingEnergyConsumption a owl:ObjectProperty ; rdfs:comment """Specifies the amount of energy consumed when training the AI model that is being used in the AI system."""@en ; - rdfs:range ns6:EnergyConsumptionDescription . + rdfs:range ns2:EnergyConsumptionDescription . -ns6:typeOfModel a owl:DatatypeProperty ; +ns2:typeOfModel a owl:DatatypeProperty ; rdfs:comment "Records the type of the model used in the AI software."@en ; rdfs:range xsd:string . -ns6:useSensitivePersonalInformation a owl:ObjectProperty ; +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; rdfs:comment """Records if sensitive personal information is used during model training or could be used during the inference."""@en ; rdfs:range ns1:PresenceType . @@ -789,7 +827,7 @@ invoke a build."""@en ; a owl:NamedIndividual, ns1:AnnotationType ; rdfs:label "other" ; - rdfs:comment "Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element)."@en . + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . a owl:NamedIndividual, ns1:AnnotationType ; @@ -830,7 +868,7 @@ ns1:Bundle a owl:Class, a owl:NamedIndividual, ns1:ExternalIdentifierType ; rdfs:label "email" ; - rdfs:comment "Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3."@en . + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . a owl:NamedIndividual, ns1:ExternalIdentifierType ; @@ -860,7 +898,7 @@ ns1:Bundle a owl:Class, a owl:NamedIndividual, ns1:ExternalIdentifierType ; rdfs:label "swid" ; - rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3."@en . + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . a owl:NamedIndividual, ns1:ExternalIdentifierType ; @@ -1127,19 +1165,10 @@ ns1:Bundle a owl:Class, rdfs:label "test" ; rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . -ns1:NoAssertionElement a owl:NamedIndividual, - ns1:Element ; - rdfs:comment """An Individual Value for Element representing a set of Elements of unknown -identify or cardinality (number)."""@en ; - rdfs:range ns1:Element ; - owl:sameAs ns1:NoAssertionElement . - -ns1:NoneElement a owl:NamedIndividual, - ns1:Element ; - rdfs:comment """An Individual Value for Element representing a set of Elements with -cardinality (number/count) of zero."""@en ; - rdfs:range ns1:Element ; - owl:sameAs ns1:NoneElement . +ns1:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns1:Agent ; + sh:nodeKind sh:IRI . a owl:NamedIndividual, ns1:ProfileIdentifierType ; @@ -1164,7 +1193,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual, ns1:ProfileIdentifierType ; rdfs:label "expandedLicensing" ; - rdfs:comment "the element follows the expanded Licensing profile specification"@en . + rdfs:comment "the element follows the ExpandedLicensing profile specification"@en . a owl:NamedIndividual, ns1:ProfileIdentifierType ; @@ -1184,7 +1213,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual, ns1:ProfileIdentifierType ; rdfs:label "simpleLicensing" ; - rdfs:comment "the element follows the simple Licensing profile specification"@en . + rdfs:comment "the element follows the SimpleLicensing profile specification"@en . a owl:NamedIndividual, ns1:ProfileIdentifierType ; @@ -1449,7 +1478,7 @@ cardinality (number/count) of zero."""@en ; a owl:NamedIndividual, ns1:RelationshipType ; rdfs:label "other" ; - rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless)."@en . + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . a owl:NamedIndividual, ns1:RelationshipType ; @@ -1622,8 +1651,8 @@ ns1:externalRefType a owl:ObjectProperty ; rdfs:range ns1:ExternalRefType . ns1:externalSpdxId a owl:DatatypeProperty ; - rdfs:comment """Identifies an external Element used within a Document but defined external to -that Document."""@en ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; rdfs:range xsd:anyURI . ns1:from a owl:ObjectProperty ; @@ -1914,60 +1943,60 @@ ns4:sensor a owl:ObjectProperty ; rdfs:comment "Describes a sensor used for collecting the data."@en ; rdfs:range ns1:DictionaryEntry . -ns3:additionText a owl:DatatypeProperty ; +ns6:additionText a owl:DatatypeProperty ; rdfs:comment "Identifies the full text of a LicenseAddition."@en ; rdfs:range xsd:string . -ns3:isDeprecatedAdditionId a owl:DatatypeProperty ; +ns6:isDeprecatedAdditionId a owl:DatatypeProperty ; rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; rdfs:range xsd:boolean . -ns3:isDeprecatedLicenseId a owl:DatatypeProperty ; +ns6:isDeprecatedLicenseId a owl:DatatypeProperty ; rdfs:comment """Specifies whether a license or additional text identifier has been marked as deprecated."""@en ; rdfs:range xsd:boolean . -ns3:isFsfLibre a owl:DatatypeProperty ; +ns6:isFsfLibre a owl:DatatypeProperty ; rdfs:comment """Specifies whether the License is listed as free by the Free Software Foundation (FSF)."""@en ; rdfs:range xsd:boolean . -ns3:isOsiApproved a owl:DatatypeProperty ; +ns6:isOsiApproved a owl:DatatypeProperty ; rdfs:comment """Specifies whether the License is listed as approved by the Open Source Initiative (OSI)."""@en ; rdfs:range xsd:boolean . -ns3:standardAdditionTemplate a owl:DatatypeProperty ; +ns6:standardAdditionTemplate a owl:DatatypeProperty ; rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; rdfs:range xsd:string . -ns3:standardLicenseHeader a owl:DatatypeProperty ; +ns6:standardLicenseHeader a owl:DatatypeProperty ; rdfs:comment """Provides a License author's preferred text to indicate that a file is covered by the License."""@en ; rdfs:range xsd:string . -ns3:standardLicenseTemplate a owl:DatatypeProperty ; +ns6:standardLicenseTemplate a owl:DatatypeProperty ; rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; rdfs:range xsd:string . -ns3:subjectAddition a owl:ObjectProperty ; +ns6:subjectAddition a owl:ObjectProperty ; rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; - rdfs:range ns3:LicenseAddition . + rdfs:range ns6:LicenseAddition . -ns3:subjectExtendableLicense a owl:ObjectProperty ; +ns6:subjectExtendableLicense a owl:ObjectProperty ; rdfs:comment "A License participating in a 'with addition' model."@en ; - rdfs:range ns3:ExtendableLicense . + rdfs:range ns6:ExtendableLicense . -ns3:subjectLicense a owl:ObjectProperty ; +ns6:subjectLicense a owl:ObjectProperty ; rdfs:comment "A License participating in an 'or later' model."@en ; - rdfs:range ns3:License . + rdfs:range ns6:License . a owl:DatatypeProperty ; - rdfs:comment "A name used in a CdxExtension name-value pair."@en ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; rdfs:range xsd:string . a owl:DatatypeProperty ; - rdfs:comment "A value used in a CdxExtension name-value pair."@en ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; rdfs:range xsd:string . a owl:ObjectProperty ; @@ -1975,121 +2004,121 @@ ns3:subjectLicense a owl:ObjectProperty ; rdfs:range . a owl:NamedIndividual, - ns2:ExploitCatalogType ; + ns5:ExploitCatalogType ; rdfs:label "kev" ; rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . a owl:NamedIndividual, - ns2:ExploitCatalogType ; + ns5:ExploitCatalogType ; rdfs:label "other" ; rdfs:comment "Other exploit catalogs"@en . a owl:NamedIndividual, - ns2:SsvcDecisionType ; + ns5:SsvcDecisionType ; rdfs:label "act" ; rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . a owl:NamedIndividual, - ns2:SsvcDecisionType ; + ns5:SsvcDecisionType ; rdfs:label "attend" ; rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . a owl:NamedIndividual, - ns2:SsvcDecisionType ; + ns5:SsvcDecisionType ; rdfs:label "track" ; rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . a owl:NamedIndividual, - ns2:SsvcDecisionType ; + ns5:SsvcDecisionType ; rdfs:label "trackStar" ; rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "componentNotPresent" ; rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "inlineMitigationsAlreadyExist" ; rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "vulnerableCodeNotInExecutePath" ; rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . a owl:NamedIndividual, - ns2:VexJustificationType ; + ns5:VexJustificationType ; rdfs:label "vulnerableCodeNotPresent" ; rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . -ns2:actionStatement a owl:DatatypeProperty ; +ns5:actionStatement a owl:DatatypeProperty ; rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product is affected by it."""@en ; rdfs:range xsd:string . -ns2:actionStatementTime a owl:DatatypeProperty ; +ns5:actionStatementTime a owl:DatatypeProperty ; rdfs:comment """Records the time when a recommended action was communicated in a VEX statement to mitigate a vulnerability."""@en ; rdfs:range xsd:dateTimeStamp . -ns2:assessedElement a owl:ObjectProperty ; +ns5:assessedElement a owl:ObjectProperty ; rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was found."""@en ; - rdfs:range ns1:Element . + rdfs:range ns3:SoftwareArtifact . -ns2:catalogType a owl:ObjectProperty ; +ns5:catalogType a owl:ObjectProperty ; rdfs:comment "Specifies the exploit catalog type."@en ; - rdfs:range ns2:ExploitCatalogType . + rdfs:range ns5:ExploitCatalogType . -ns2:decisionType a owl:ObjectProperty ; +ns5:decisionType a owl:ObjectProperty ; rdfs:comment """Provide the enumeration of possible decisions in the [Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; - rdfs:range ns2:SsvcDecisionType . + rdfs:range ns5:SsvcDecisionType . -ns2:exploited a owl:DatatypeProperty ; +ns5:exploited a owl:DatatypeProperty ; rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; rdfs:range xsd:boolean . -ns2:impactStatement a owl:DatatypeProperty ; +ns5:impactStatement a owl:DatatypeProperty ; rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable justification label."""@en ; rdfs:range xsd:string . -ns2:impactStatementTime a owl:DatatypeProperty ; +ns5:impactStatementTime a owl:DatatypeProperty ; rdfs:comment "Timestamp of impact statement."@en ; rdfs:range xsd:dateTimeStamp . -ns2:justificationType a owl:ObjectProperty ; +ns5:justificationType a owl:ObjectProperty ; rdfs:comment """Impact justification label to be used when linking a vulnerability to an element representing a VEX product with a VexNotAffectedVulnAssessmentRelationship relationship."""@en ; - rdfs:range ns2:VexJustificationType . + rdfs:range ns5:VexJustificationType . -ns2:locator a owl:DatatypeProperty ; +ns5:locator a owl:DatatypeProperty ; rdfs:comment "Provides the location of an exploit catalog."@en ; rdfs:range xsd:anyURI . -ns2:percentile a owl:DatatypeProperty ; +ns5:percentile a owl:DatatypeProperty ; rdfs:comment "The percentile of the current probability score."@en ; rdfs:range xsd:decimal . -ns2:probability a owl:DatatypeProperty ; +ns5:probability a owl:DatatypeProperty ; rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; rdfs:range xsd:decimal . -ns2:statusNotes a owl:DatatypeProperty ; +ns5:statusNotes a owl:DatatypeProperty ; rdfs:comment "Conveys information about how VEX status was determined."@en ; rdfs:range xsd:string . -ns2:vexVersion a owl:DatatypeProperty ; +ns5:vexVersion a owl:DatatypeProperty ; rdfs:comment "Specifies the version of a VEX statement."@en ; rdfs:range xsd:string . @@ -2107,203 +2136,158 @@ License Addition to its URI ID."""@en ; rdfs:range xsd:string . a owl:NamedIndividual, - ns5:ContentIdentifierType ; + ns3:ContentIdentifierType ; rdfs:label "gitoid" ; rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . a owl:NamedIndividual, - ns5:ContentIdentifierType ; + ns3:ContentIdentifierType ; rdfs:label "swhid" ; rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . a owl:NamedIndividual, - ns5:FileKindType ; + ns3:FileKindType ; rdfs:label "directory" ; rdfs:comment "The file represents a directory and all content stored in that directory."@en . a owl:NamedIndividual, - ns5:FileKindType ; + ns3:FileKindType ; rdfs:label "file" ; rdfs:comment "The file represents a single file (default)."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "analyzed" ; rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "build" ; rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "deployed" ; rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "design" ; rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "runtime" ; rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . a owl:NamedIndividual, - ns5:SbomType ; + ns3:SbomType ; rdfs:label "source" ; rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . -ns5:additionalPurpose a owl:ObjectProperty ; +ns3:additionalPurpose a owl:ObjectProperty ; rdfs:comment "Provides additional purpose information of the software artifact."@en ; - rdfs:range ns5:SoftwarePurpose . + rdfs:range ns3:SoftwarePurpose . -ns5:attributionText a owl:DatatypeProperty ; +ns3:attributionText a owl:DatatypeProperty ; rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for a software Package, File or Snippet."""@en ; rdfs:range xsd:string . -ns5:byteRange a owl:DatatypeProperty ; +ns3:byteRange a owl:DatatypeProperty ; rdfs:comment """Defines the byte range in the original host file that the snippet information applies to."""@en ; rdfs:range ns1:PositiveIntegerRange . -ns5:contentIdentifier a owl:DatatypeProperty ; +ns3:contentIdentifier a owl:DatatypeProperty ; rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be used for verifying its identity and/or integrity."""@en ; - rdfs:range ns5:ContentIdentifier . + rdfs:range ns3:ContentIdentifier . -ns5:contentIdentifierType a owl:ObjectProperty ; +ns3:contentIdentifierType a owl:ObjectProperty ; rdfs:comment "Specifies the type of the content identifier."@en ; - rdfs:range ns5:ContentIdentifierType . + rdfs:range ns3:ContentIdentifierType . -ns5:contentIdentifierValue a owl:DatatypeProperty ; +ns3:contentIdentifierValue a owl:DatatypeProperty ; rdfs:comment "Specifies the value of the content identifier."@en ; rdfs:range xsd:anyURI . -ns5:copyrightText a owl:DatatypeProperty ; +ns3:copyrightText a owl:DatatypeProperty ; rdfs:comment """Identifies the text of one or more copyright notices for a software Package, File or Snippet, if any."""@en ; rdfs:range xsd:string . -ns5:downloadLocation a owl:DatatypeProperty ; +ns3:downloadLocation a owl:DatatypeProperty ; rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time that the document was created."""@en ; rdfs:range xsd:anyURI . -ns5:fileKind a owl:ObjectProperty ; +ns3:fileKind a owl:ObjectProperty ; rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; - rdfs:range ns5:FileKindType . + rdfs:range ns3:FileKindType . -ns5:homePage a owl:DatatypeProperty ; +ns3:homePage a owl:DatatypeProperty ; rdfs:comment """A place for the SPDX document creator to record a website that serves as the package's home page."""@en ; rdfs:range xsd:anyURI . -ns5:lineRange a owl:DatatypeProperty ; +ns3:lineRange a owl:DatatypeProperty ; rdfs:comment """Defines the line range in the original host file that the snippet information applies to."""@en ; rdfs:range ns1:PositiveIntegerRange . -ns5:packageUrl a owl:DatatypeProperty ; +ns3:packageUrl a owl:DatatypeProperty ; rdfs:comment """Provides a place for the SPDX data creator to record the package URL string (in accordance with the Package URL specification) for a software Package."""@en ; rdfs:range xsd:anyURI . -ns5:packageVersion a owl:DatatypeProperty ; +ns3:packageVersion a owl:DatatypeProperty ; rdfs:comment "Identify the version of a package."@en ; rdfs:range xsd:string . -ns5:primaryPurpose a owl:ObjectProperty ; +ns3:primaryPurpose a owl:ObjectProperty ; rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; - rdfs:range ns5:SoftwarePurpose . + rdfs:range ns3:SoftwarePurpose . -ns5:sbomType a owl:ObjectProperty ; +ns3:sbomType a owl:ObjectProperty ; rdfs:comment "Provides information about the type of an SBOM."@en ; - rdfs:range ns5:SbomType . + rdfs:range ns3:SbomType . -ns5:snippetFromFile a owl:ObjectProperty ; +ns3:snippetFromFile a owl:ObjectProperty ; rdfs:comment "Defines the original host file that the snippet information applies to."@en ; - rdfs:range ns5:File . + rdfs:range ns3:File . -ns5:sourceInfo a owl:DatatypeProperty ; +ns3:sourceInfo a owl:DatatypeProperty ; rdfs:comment """Records any relevant background information or additional comments about the origin of the package."""@en ; rdfs:range xsd:string . -ns6:EnergyConsumption a owl:Class, +ns2:EnergyConsumption a owl:Class, sh:NodeShape ; rdfs:comment """A class for describing the energy consumption incurred by an AI model in different stages of its lifecycle."""@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:class ns6:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:inferenceEnergyConsumption ], - [ sh:class ns6:EnergyConsumptionDescription ; + sh:path ns2:trainingEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:finetuningEnergyConsumption ], - [ sh:class ns6:EnergyConsumptionDescription ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns6:trainingEnergyConsumption ] . - -ns1:CreationInfo a owl:Class, - sh:NodeShape ; - rdfs:comment "Provides information about the creation of the Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:created ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:comment ], - [ sh:class ns1:Tool ; - sh:nodeKind sh:IRI ; - sh:path ns1:createdUsing ], - [ sh:class ns1:Agent ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:createdBy ], - [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:specVersion ; - sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . - -ns1:ElementCollection a ns7:AbstractClass, - owl:Class, - sh:NodeShape ; - rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; - rdfs:subClassOf ns1:Element ; - sh:nodeKind sh:IRI ; - sh:property [ sh:class ns1:ProfileIdentifierType ; - sh:in ( ) ; - sh:nodeKind sh:IRI ; - sh:path ns1:profileConformance ], - [ sh:class ns1:Element ; - sh:nodeKind sh:IRI ; - sh:path ns1:element ], - [ sh:class ns1:Element ; - sh:nodeKind sh:IRI ; - sh:path ns1:rootElement ] . + sh:path ns2:inferenceEnergyConsumption ] . ns1:ExternalIdentifier a owl:Class, sh:NodeShape ; rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:comment ], - [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; sh:path ns1:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:issuingAuthority ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; @@ -2312,7 +2296,7 @@ ns1:ExternalIdentifier a owl:Class, [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:issuingAuthority ], + sh:path ns1:comment ], [ sh:class ns1:ExternalIdentifierType ; sh:in ( ) ; sh:maxCount 1 ; @@ -2322,14 +2306,13 @@ ns1:ExternalIdentifier a owl:Class, ns1:ExternalMap a owl:Class, sh:NodeShape ; - rdfs:comment """A map of Element identifiers that are used within a Document but defined -external to that Document."""@en ; - sh:nodeKind sh:BlankNode ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:externalSpdxId ], + sh:path ns1:locationHint ], [ sh:class ns1:IntegrityMethod ; sh:nodeKind sh:BlankNodeOrIRI ; sh:path ns1:verifiedUsing ], @@ -2339,17 +2322,15 @@ external to that Document."""@en ; sh:path ns1:definingArtifact ], [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:locationHint ] . + sh:path ns1:externalSpdxId ] . ns1:ExternalRef a owl:Class, sh:NodeShape ; rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns1:locator ], - [ sh:class ns1:ExternalRefType ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns1:ExternalRefType ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; @@ -2362,44 +2343,47 @@ ns1:ExternalRef a owl:Class, [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:comment ] . + sh:path ns1:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns1:locator ] . ns1:Hash a owl:Class, sh:NodeShape ; rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; rdfs:subClassOf ns1:IntegrityMethod ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:hashValue ], - [ sh:class ns1:HashAlgorithm ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns1:HashAlgorithm ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns1:algorithm ] . + sh:path ns1:algorithm ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:hashValue ] . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "adler32" ; - rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3."@en . + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "blake2b256" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "blake2b384" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "blake2b512" ; - rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4."@en . + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; @@ -2424,17 +2408,17 @@ ns1:Hash a owl:Class, a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "md2" ; - rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/)."@en . + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "md4" ; - rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186)."@en . + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "md5" ; - rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321)."@en . + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; @@ -2449,22 +2433,22 @@ ns1:Hash a owl:Class, a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha1" ; - rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174)."@en . + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha224" ; - rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874)."@en . + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha256" ; - rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha384" ; - rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . a owl:NamedIndividual, ns1:HashAlgorithm ; @@ -2489,12 +2473,18 @@ ns1:Hash a owl:Class, a owl:NamedIndividual, ns1:HashAlgorithm ; rdfs:label "sha512" ; - rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)."@en . + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns1:IndividualElement a owl:Class ; + rdfs:comment """A concrete subclass of Element used by Individuals in the +Core profile."""@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI . ns1:NamespaceMap a owl:Class, sh:NodeShape ; rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:minCount 1 ; @@ -2511,36 +2501,36 @@ ns1:Relationship a owl:Class, rdfs:comment "Describes a relationship between one or more elements."@en ; rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns1:RelationshipType ; + sh:property [ sh:class ns1:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:to ], + [ sh:class ns1:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:completeness ], + [ sh:class ns1:RelationshipType ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; sh:path ns1:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ns1:endTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:class ns1:Element ; - sh:minCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:to ], [ sh:class ns1:Element ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns1:from ], - [ sh:class ns1:RelationshipCompleteness ; - sh:in ( ) ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns1:completeness ], - [ sh:datatype xsd:dateTimeStamp ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:startTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + sh:path ns1:from ] . ns1:Tool a owl:Class ; rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; @@ -2565,38 +2555,44 @@ ns1:verifiedUsing a owl:ObjectProperty ; asserted."""@en ; rdfs:range ns1:IntegrityMethod . -ns3:deprecatedVersion a owl:DatatypeProperty ; +ns6:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns6:deprecatedVersion a owl:DatatypeProperty ; rdfs:comment """Specifies the SPDX License List version in which this license or exception identifier was deprecated."""@en ; rdfs:range xsd:string . -ns3:licenseXml a owl:DatatypeProperty ; +ns6:licenseXml a owl:DatatypeProperty ; rdfs:comment """Identifies all the text and metadata associated with a license in the license XML format."""@en ; rdfs:range xsd:string . -ns3:listVersionAdded a owl:DatatypeProperty ; +ns6:listVersionAdded a owl:DatatypeProperty ; rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or ListedLicenseException identifier was first added."""@en ; rdfs:range xsd:string . -ns3:member a owl:ObjectProperty ; +ns6:member a owl:ObjectProperty ; rdfs:comment "A license expression participating in a license set."@en ; rdfs:range . -ns3:obsoletedBy a owl:DatatypeProperty ; +ns6:obsoletedBy a owl:DatatypeProperty ; rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated License or LicenseAddition."""@en ; rdfs:range xsd:string . -ns3:seeAlso a owl:DatatypeProperty ; +ns6:seeAlso a owl:DatatypeProperty ; rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; rdfs:range xsd:anyURI . a owl:Class, sh:NodeShape ; rdfs:comment "A property name with an associated value."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; @@ -2608,43 +2604,43 @@ ns3:seeAlso a owl:DatatypeProperty ; sh:path ] . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "critical" ; rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "high" ; rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "low" ; rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "medium" ; rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . a owl:NamedIndividual, - ns2:CvssSeverityType ; + ns5:CvssSeverityType ; rdfs:label "none" ; rdfs:comment "When a CVSS score is 0.0"@en . -ns2:modifiedTime a owl:DatatypeProperty ; +ns5:modifiedTime a owl:DatatypeProperty ; rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; rdfs:range xsd:dateTimeStamp . -ns2:publishedTime a owl:DatatypeProperty ; +ns5:publishedTime a owl:DatatypeProperty ; rdfs:comment "Specifies the time when a vulnerability was published."@en ; rdfs:range xsd:dateTimeStamp . -ns2:severity a owl:ObjectProperty ; +ns5:severity a owl:ObjectProperty ; rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; - rdfs:range ns2:CvssSeverityType . + rdfs:range ns5:CvssSeverityType . -ns2:withdrawnTime a owl:DatatypeProperty ; +ns5:withdrawnTime a owl:DatatypeProperty ; rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; rdfs:range xsd:dateTimeStamp . @@ -2652,210 +2648,229 @@ ns2:withdrawnTime a owl:DatatypeProperty ; rdfs:comment "Identifies the full text of a License or Addition."@en ; rdfs:range xsd:string . -ns5:ContentIdentifier a owl:Class, +ns3:ContentIdentifier a owl:Class, sh:NodeShape ; rdfs:comment "A canonical, unique, immutable identifier"@en ; rdfs:subClassOf ns1:IntegrityMethod ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns5:contentIdentifierValue ], - [ sh:class ns5:ContentIdentifierType ; + sh:path ns3:contentIdentifierValue ], + [ sh:class ns3:ContentIdentifierType ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns5:contentIdentifierType ] . + sh:path ns3:contentIdentifierType ] . -ns5:File a owl:Class, +ns3:File a owl:Class, sh:NodeShape ; rdfs:comment "Refers to any object that stores content on a computer."@en ; - rdfs:subClassOf ns5:SoftwareArtifact ; + rdfs:subClassOf ns3:SoftwareArtifact ; sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:contentType ; - sh:pattern "^[^\\/]+\\/[^\\/]+$" ], - [ sh:class ns5:FileKindType ; + sh:property [ sh:class ns3:FileKindType ; sh:in ( ) ; sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns5:fileKind ] . + sh:path ns3:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . -ns5:Package a owl:Class, +ns3:Package a owl:Class, sh:NodeShape ; rdfs:comment """Refers to any unit of content that can be associated with a distribution of software."""@en ; - rdfs:subClassOf ns5:SoftwareArtifact ; + rdfs:subClassOf ns3:SoftwareArtifact ; sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:anyURI ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns5:homePage ], - [ sh:datatype xsd:string ; + sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns5:sourceInfo ], + sh:path ns3:packageVersion ], [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns5:packageUrl ], + sh:path ns3:downloadLocation ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns5:packageVersion ], + sh:path ns3:sourceInfo ], [ sh:datatype xsd:anyURI ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns5:downloadLocation ] . + sh:path ns3:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:homePage ] . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "application" ; - rdfs:comment "the Element is a software application"@en . + rdfs:comment "The Element is a software application."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "archive" ; - rdfs:comment "the Element is an archived collection of one or more files (.tar, .zip, etc)"@en . + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "bom" ; - rdfs:comment "Element is a bill of materials"@en . + rdfs:comment "The Element is a bill of materials."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "configuration" ; - rdfs:comment "Element is configuration data"@en . + rdfs:comment "The Element is configuration data."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "container" ; - rdfs:comment "the Element is a container image which can be used by a container runtime application"@en . + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "data" ; - rdfs:comment "Element is data"@en . + rdfs:comment "The Element is data."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "device" ; - rdfs:comment "the Element refers to a chipset, processor, or electronic board"@en . + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "deviceDriver" ; - rdfs:comment "Element represents software that controls hardware devices"@en . + rdfs:comment "The Element represents software that controls hardware devices."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "diskImage" ; - rdfs:comment "the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "documentation" ; - rdfs:comment "Element is documentation"@en . + rdfs:comment "The Element is documentation."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "evidence" ; - rdfs:comment "the Element is the evidence that a specification or requirement has been fulfilled"@en . + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "executable" ; - rdfs:comment "Element is an Artifact that can be run on a computer"@en . + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "file" ; - rdfs:comment "the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc)"@en . + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "filesystemImage" ; - rdfs:comment "the Element is a file system image that can be written to a disk (or virtual) partition"@en . + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "firmware" ; - rdfs:comment "the Element provides low level control over a device's hardware"@en . + rdfs:comment "The Element provides low level control over a device's hardware."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "framework" ; - rdfs:comment "the Element is a software framework"@en . + rdfs:comment "The Element is a software framework."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "install" ; - rdfs:comment "the Element is used to install software on disk"@en . + rdfs:comment "The Element is used to install software on disk."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "library" ; - rdfs:comment "the Element is a software library"@en . + rdfs:comment "The Element is a software library."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "manifest" ; - rdfs:comment "the Element is a software manifest"@en . + rdfs:comment "The Element is a software manifest."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "model" ; - rdfs:comment "the Element is a machine learning or artificial intelligence model"@en . + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "module" ; - rdfs:comment "the Element is a module of a piece of software"@en . + rdfs:comment "The Element is a module of a piece of software."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "operatingSystem" ; - rdfs:comment "the Element is an operating system"@en . + rdfs:comment "The Element is an operating system."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "other" ; - rdfs:comment "the Element doesn't fit into any of the other categories"@en . + rdfs:comment "The Element doesn't fit into any of the other categories."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "patch" ; - rdfs:comment "Element contains a set of changes to update, fix, or improve another Element"@en . + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "platform" ; - rdfs:comment "Element represents a runtime environment"@en . + rdfs:comment "The Element represents a runtime environment."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "requirement" ; - rdfs:comment "the Element provides a requirement needed as input for another Element"@en . + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "source" ; - rdfs:comment "the Element is a single or a collection of source files"@en . + rdfs:comment "The Element is a single or a collection of source files."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "specification" ; - rdfs:comment "the Element is a plan, guideline or strategy how to create, perform or analyse an application"@en . + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . a owl:NamedIndividual, - ns5:SoftwarePurpose ; + ns3:SoftwarePurpose ; rdfs:label "test" ; - rdfs:comment "The Element is a test used to verify functionality on an software element"@en . + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + +ns1:ElementCollection a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns1:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns1:profileConformance ], + [ sh:class ns1:Element ; + sh:nodeKind sh:IRI ; + sh:path ns1:element ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns1:ElementCollection ] ; + sh:path rdf:type ], + [ sh:class ns1:Element ; + sh:nodeKind sh:IRI ; + sh:path ns1:rootElement ] . a owl:NamedIndividual, ns1:PresenceType ; @@ -2876,50 +2891,52 @@ ns1:contentType a owl:DatatypeProperty ; rdfs:comment "Provides information about the content type of an Element or a Property."@en ; rdfs:range xsd:string . - a ns7:AbstractClass, - owl:Class ; - rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; - sh:nodeKind sh:BlankNode . - -ns2:score a owl:DatatypeProperty ; +ns5:score a owl:DatatypeProperty ; rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; rdfs:range xsd:decimal . -ns2:vectorString a owl:DatatypeProperty ; +ns5:vectorString a owl:DatatypeProperty ; rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; rdfs:range xsd:string . -ns5:SoftwareArtifact a ns7:AbstractClass, - owl:Class, +ns1:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns1:PositiveIntegerRange a owl:Class, sh:NodeShape ; - rdfs:comment "A distinct article or unit related to Software."@en ; - rdfs:subClassOf ns1:Artifact ; - sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:string ; - sh:nodeKind sh:Literal ; - sh:path ns5:attributionText ], - [ sh:datatype xsd:string ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:datatype xsd:positiveInteger ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns5:copyrightText ], - [ sh:class ns5:SoftwarePurpose ; - sh:in ( ) ; + sh:path ns1:beginIntegerRange ], + [ sh:datatype xsd:positiveInteger ; sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns5:primaryPurpose ], - [ sh:class ns5:ContentIdentifier ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns5:contentIdentifier ], - [ sh:class ns5:SoftwarePurpose ; - sh:in ( ) ; - sh:nodeKind sh:IRI ; - sh:path ns5:additionalPurpose ] . + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:endIntegerRange ] . -ns1:AnnotationType a owl:Class ; - rdfs:comment "Specifies the type of an annotation."@en . + a owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:message "https://spdx.org/rdf/3.0.1/terms/Extension/Extension is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ] . -ns1:Artifact a ns7:AbstractClass, - owl:Class, +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns3:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns3:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns1:Artifact a owl:Class, sh:NodeShape ; rdfs:comment "A distinct article or unit within the digital domain."@en ; rdfs:subClassOf ns1:Element ; @@ -2929,18 +2946,24 @@ ns1:Artifact a ns7:AbstractClass, sh:nodeKind sh:Literal ; sh:path ns1:builtTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:datatype xsd:dateTimeStamp ; + [ sh:class ns1:Agent ; sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:validUntilTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + sh:nodeKind sh:IRI ; + sh:path ns1:suppliedBy ], [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; sh:path ns1:standardName ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns1:Artifact ] ; + sh:path rdf:type ], [ sh:class ns1:Agent ; - sh:maxCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns1:suppliedBy ], + sh:path ns1:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], [ sh:class ns1:SupportType ; sh:in ( ) ; sh:nodeKind sh:IRI ; @@ -2949,83 +2972,76 @@ ns1:Artifact a ns7:AbstractClass, sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ns1:releaseTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:class ns1:Agent ; - sh:nodeKind sh:IRI ; - sh:path ns1:originatedBy ] . + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . -ns1:PositiveIntegerRange a owl:Class, - sh:NodeShape ; - rdfs:comment "A tuple of two positive integers that define a range."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:positiveInteger ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:beginIntegerRange ], - [ sh:datatype xsd:positiveInteger ; - sh:maxCount 1 ; - sh:minCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:endIntegerRange ] . +ns1:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . -ns3:ExtendableLicense a ns7:AbstractClass, - owl:Class ; - rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; - rdfs:subClassOf ; - sh:nodeKind sh:IRI . +ns1:SpdxOrganization a owl:NamedIndividual, + ns1:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; + ns1:creationInfo . -ns3:IndividualLicensingInfo a owl:Class ; - rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the -ExpandedLicensing profile."""@en ; +ns1:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns6:ExtendableLicense a owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; rdfs:subClassOf ; - sh:nodeKind sh:IRI . + sh:nodeKind sh:IRI ; + sh:property [ sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns6:ExtendableLicense ] ; + sh:path rdf:type ] . -ns3:License a ns7:AbstractClass, - owl:Class, +ns6:License a owl:Class, sh:NodeShape ; rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; - rdfs:subClassOf ns3:ExtendableLicense ; + rdfs:subClassOf ns6:ExtendableLicense ; sh:nodeKind sh:IRI ; - sh:property [ sh:datatype xsd:string ; + sh:property [ sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:standardLicenseHeader ], - [ sh:datatype xsd:boolean ; + sh:path ns6:isOsiApproved ], + [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:isDeprecatedLicenseId ], + sh:path ns6:standardLicenseHeader ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns6:License ] ; + sh:path rdf:type ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:standardLicenseTemplate ], + sh:path ns6:licenseXml ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:obsoletedBy ], + sh:path ns6:obsoletedBy ], [ sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:isFsfLibre ], - [ sh:datatype xsd:string ; + sh:path ns6:isFsfLibre ], + [ sh:datatype xsd:boolean ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:licenseXml ], + sh:path ns6:isDeprecatedLicenseId ], [ sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ], - [ sh:datatype xsd:boolean ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns3:isOsiApproved ], + sh:path ns6:standardLicenseTemplate ], [ sh:datatype xsd:anyURI ; sh:nodeKind sh:Literal ; - sh:path ns3:seeAlso ] . + sh:path ns6:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . -ns3:LicenseAddition a ns7:AbstractClass, - owl:Class, +ns6:LicenseAddition a owl:Class, sh:NodeShape ; rdfs:comment """Abstract class for additional text intended to be added to a License, but which is not itself a standalone License."""@en ; @@ -3033,108 +3049,156 @@ which is not itself a standalone License."""@en ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:standardAdditionTemplate ], - [ sh:datatype xsd:anyURI ; - sh:nodeKind sh:Literal ; - sh:path ns3:seeAlso ], + sh:path ns6:additionText ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:obsoletedBy ], + sh:path ns6:standardAdditionTemplate ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns6:LicenseAddition ] ; + sh:path rdf:type ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:licenseXml ], - [ sh:datatype xsd:boolean ; + sh:path ns6:obsoletedBy ], + [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:isDeprecatedAdditionId ], - [ sh:datatype xsd:string ; + sh:path ns6:licenseXml ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns6:seeAlso ], + [ sh:datatype xsd:boolean ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns3:additionText ] . + sh:path ns6:isDeprecatedAdditionId ] . -ns2:ExploitCatalogType a owl:Class ; - rdfs:comment "Specifies the exploit catalog type."@en . - -ns2:VexVulnAssessmentRelationship a ns7:AbstractClass, - owl:Class, +ns5:VexVulnAssessmentRelationship a owl:Class, sh:NodeShape ; - rdfs:comment "Asbtract ancestor class for all VEX relationships"@en ; - rdfs:subClassOf ns2:VulnAssessmentRelationship ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; sh:nodeKind sh:IRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:statusNotes ], + sh:path ns5:statusNotes ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:vexVersion ] . - -ns5:ContentIdentifierType a owl:Class ; - rdfs:comment "Specifies the type of a content identifier."@en . + sh:path ns5:vexVersion ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns5:VexVulnAssessmentRelationship ] ; + sh:path rdf:type ] . -ns5:FileKindType a owl:Class ; - rdfs:comment "Enumeration of the different kinds of SPDX file."@en . - -ns6:EnergyUnitType a owl:Class ; - rdfs:comment "Specifies the unit of energy consumption."@en . - -ns1:RelationshipCompleteness a owl:Class ; - rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . - -ns1:comment a owl:DatatypeProperty ; - rdfs:comment """Provide consumers with comments by the creator of the Element about the -Element."""@en ; - rdfs:range xsd:string . - -ns6:EnergyConsumptionDescription a owl:Class, +ns2:EnergyConsumptionDescription a owl:Class, sh:NodeShape ; rdfs:comment """The class that helps note down the quantity of energy consumption and the unit used for measurement."""@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:class ns6:EnergyUnitType ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns2:EnergyUnitType ; sh:in ( ) ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:IRI ; - sh:path ns6:energyUnit ], + sh:path ns2:energyUnit ], [ sh:datatype xsd:decimal ; sh:maxCount 1 ; sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns6:energyQuantity ] . + sh:path ns2:energyQuantity ] . -ns6:SafetyRiskAssessmentType a owl:Class ; +ns2:SafetyRiskAssessmentType a owl:Class ; rdfs:comment "Specifies the safety risk level."@en . -ns1:IntegrityMethod a ns7:AbstractClass, - owl:Class, +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns3:SoftwareArtifact a owl:Class, sh:NodeShape ; - rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; - sh:nodeKind sh:BlankNode ; - sh:property [ sh:datatype xsd:string ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns1:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SoftwarePurpose ; + sh:in ( ) ; sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:primaryPurpose ], + [ sh:datatype xsd:string ; sh:nodeKind sh:Literal ; - sh:path ns1:comment ] . + sh:path ns3:attributionText ], + [ sh:class ns3:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:contentIdentifier ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns3:SoftwareArtifact ] ; + sh:path rdf:type ], + [ sh:class ns3:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:additionalPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:copyrightText ] . -ns4:ConfidentialityLevelType a owl:Class ; - rdfs:comment "Categories of confidentiality level."@en . +ns1:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:class ns1:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns1:createdUsing ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns1:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns1:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:comment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . -ns2:SsvcDecisionType a owl:Class ; - rdfs:comment "Specifies the SSVC decision type."@en . +ns1:IntegrityMethod a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:property [ sh:message "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns1:IntegrityMethod ] ; + sh:path rdf:type ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:comment ] . ns4:DatasetAvailabilityType a owl:Class ; rdfs:comment "Availability of dataset."@en . -ns2:VexJustificationType a owl:Class ; +ns5:VexJustificationType a owl:Class ; rdfs:comment "Specifies the VEX justification type."@en . -ns2:VulnAssessmentRelationship a ns7:AbstractClass, - owl:Class, +ns1:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns5:VulnAssessmentRelationship a owl:Class, sh:NodeShape ; rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; rdfs:subClassOf ns1:Relationship ; @@ -3146,30 +3210,27 @@ ns2:VulnAssessmentRelationship a ns7:AbstractClass, [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:withdrawnTime ; + sh:path ns5:modifiedTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns5:VulnAssessmentRelationship ] ; + sh:path rdf:type ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:publishedTime ; + sh:path ns5:publishedTime ; sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], - [ sh:class ns1:Element ; - sh:maxCount 1 ; - sh:nodeKind sh:IRI ; - sh:path ns2:assessedElement ], [ sh:datatype xsd:dateTimeStamp ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns2:modifiedTime ; - sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . - -ns1:LifecycleScopeType a owl:Class ; - rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . - -ns2:CvssSeverityType a owl:Class ; - rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:SoftwareArtifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ] . -ns5:SbomType a owl:Class ; +ns3:SbomType a owl:Class ; rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that tools may create."""@en . @@ -3184,66 +3245,65 @@ ns1:Agent a owl:Class ; rdfs:subClassOf ns1:Element ; sh:nodeKind sh:IRI . - a ns7:AbstractClass, - owl:Class ; - rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; - rdfs:subClassOf ns1:Element ; - sh:nodeKind sh:IRI . - -ns7:AbstractClass a owl:Class . - ns1:ProfileIdentifierType a owl:Class ; rdfs:comment "Enumeration of the valid profiles."@en . + a owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns1:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:message "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ] ; + sh:path rdf:type ] . + ns1:ExternalIdentifierType a owl:Class ; rdfs:comment "Specifies the type of an external identifier."@en . ns1:DictionaryEntry a owl:Class, sh:NodeShape ; rdfs:comment "A key with an associated value."@en ; - sh:nodeKind sh:BlankNode ; + sh:nodeKind sh:BlankNodeOrIRI ; sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; - sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:key ], + sh:path ns1:value ], [ sh:datatype xsd:string ; sh:maxCount 1 ; + sh:minCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:value ] . + sh:path ns1:key ] . ns4:DatasetType a owl:Class ; rdfs:comment "Enumeration of dataset types."@en . -ns1:HashAlgorithm a owl:Class ; - rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . - -ns1:Element a ns7:AbstractClass, - owl:Class, +ns1:Element a owl:Class, sh:NodeShape ; rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; sh:nodeKind sh:IRI ; - sh:property [ sh:class ns1:ExternalRef ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:externalRef ], - [ sh:class ns1:ExternalIdentifier ; - sh:nodeKind sh:BlankNodeOrIRI ; - sh:path ns1:externalIdentifier ], - [ sh:datatype xsd:string ; - sh:maxCount 1 ; - sh:nodeKind sh:Literal ; - sh:path ns1:name ], - [ sh:datatype xsd:string ; + sh:property [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ns1:description ], [ sh:class ns1:IntegrityMethod ; sh:nodeKind sh:BlankNodeOrIRI ; sh:path ns1:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns1:summary ], + [ sh:class ns1:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:externalRef ], [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; sh:path ns1:comment ], + [ sh:class ns1:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns1:externalIdentifier ], + [ sh:message "https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead."@en ; + sh:not [ sh:hasValue ns1:Element ] ; + sh:path rdf:type ], [ sh:class ns1:CreationInfo ; sh:maxCount 1 ; sh:minCount 1 ; @@ -3255,9 +3315,12 @@ ns1:Element a ns7:AbstractClass, [ sh:datatype xsd:string ; sh:maxCount 1 ; sh:nodeKind sh:Literal ; - sh:path ns1:summary ] . + sh:path ns1:name ] . + +ns1:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . -ns5:SoftwarePurpose a owl:Class ; +ns3:SoftwarePurpose a owl:Class ; rdfs:comment "Provides information about the primary purpose of an Element."@en . ns1:ExternalRefType a owl:Class ; diff --git a/rdf/spdx-model.xml b/rdf/spdx-model.xml index c6155ac047..5b69204215 100644 --- a/rdf/spdx-model.xml +++ b/rdf/spdx-model.xml @@ -1,137 +1,157 @@ - - - - - - - - funding - A reference to funding information related to a package. - - - - - timestamp - data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. - - - + + - - - - track - The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. - - - - + + + - - + + + 1 - - - - System Package Data Exchange (SPDX) Ontology - This ontology defines the terms and relationships used in the SPDX specification to describe system packages - 2024-04-05 - SPDX Project - - - System Package Data Exchange (SPDX) Ontology - Copyright (C) 2024 SPDX Project + + + + + + 1 - + + + + support + A reference to the software support channel or other support information for a package. + + - descendantOf - The `from` Element is a descendant of each `to` Element. + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. - - Captures a standard that is being complied with. - - + + + - + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + 3.0.1 + + - - syntactic - data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). - - - + + + + + 1 + 1 - + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + + + 1 + 1 + + - - Specifies a data package and its associated information. - + Agent represents anything with the potential to act on a system. + - - - - - - - - - - - - - - + - - doesNotAffect - The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. - - - + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + 1 - - - + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + - - - + + + + A canonical, unique, immutable identifier + + + + - + - - vulnerableCodeNotInExecutePath - The affected code is not reachable through the execution of the code, including non-anticipated states of the product. - - - Specifies the exploit catalog type. - - + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). - + - - build - SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Describes a mechanism to update the dataset. + + @@ -139,183 +159,168 @@ hasHost The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). - + - eolNotice - A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + other + Used when the type does not match any of the other options. - - - - cpe23 - [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + 1 + 1 - + - - generates - The `from` Element generates each `to` Element. + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. - - - - productMetadata - A reference to additional product metadata such as reference within organization's product catalog. + + + + An SPDX Element containing an SPDX license expression string. + + + + + - - - + + + + 1 1 - - - - - - - Specifies an Extension characterization of some aspect of an Element. - - - - - - + + + 1 - + + + + A collection of Elements that have a shared context. + + + + + - - trackStar - ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + funding + A reference to funding information related to a package. - - + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + - + - A mapping between prefixes and namespace partial URIs. - - - + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + - - Specifies a time when a vulnerability assessment was modified - - + + + - - Provides a place for the SPDX data creator to record the package URL string -(in accordance with the Package URL specification) for a software Package. + + A probability score between 0 and 1 of a vulnerability being exploited. - + - + - - sha3_224 - SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). - - - Describes the confidentiality level of the data points contained in the dataset. - - + + modifiedBy + The `from` Element is modified by each `to` Element. - + - - blake2b384 - BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4. - - - - - A canonical, unique, immutable identifier - - - - - - - - - A collection of SPDX Elements describing a single package. - - - + + configuration + The Element is configuration data. - - - - - Base domain class from which all other SPDX-3.0 domain classes derive. - - - - - - - - - - - - - - + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project - + - - ai - the element follows the AI profile specification + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. - - - - - 1 + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + - - - - Describes a certain part of a file. - - - - - + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. - - - - Refers to any unit of content that can be associated with a distribution of -software. - + + + - - - - - - - - - - + 1 1 - + + + + + - - configures - The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + @@ -323,580 +328,550 @@ software. republishedBy Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. - - - + + Defines the beginning of a range. + + - - - - - 1 + + + + A mapping between prefixes and namespace partial URIs. + + + - - - - categorical - data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + + A license or addition that is not listed on the SPDX License List. + + + - + - - adler32 - Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3. + + clear + Dataset may be distributed freely, without restriction. - + - - blake2b256 - BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4. + + sourceArtifact + A reference to an artifact containing the sources for a package. - + + + + A distinct article or unit related to Software. + + + + + + + + + + - - blake3 - [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). - - - ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ - + + + - 1 1 - + - - securityAdversaryModel - A reference to the security adversary model for a package. + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. - - Defines the original host file that the snippet information applies to. - - + + + + + 1 - - - + + + + + + + Abstract class representing a License or an OrLaterOperator. + + - - 1 - + - modifiedBy - The `from` Element is modified by each `to` Element. + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). - - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + 1 - - - - - - - - Portion of an AnyLicenseInfo representing a set of licensing information where -only one of the elements applies. - - - + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. - - - + + + + design + A relationship has specific context implications during an element's design. - - Describes methods that can be used to explain the results from the AI model. + + Provides relevant information about the AI software, not including the model +description. - - - - fixedIn - A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + - - - + + + - + 1 1 - - - - - 1 + + + + noAssertion + Makes no assertion about the field. - - Defines the byte range in the original host file that the snippet information -applies to. - - - - - - - limitedSupport - the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + - - - - graph - data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + - - - - gitoid - [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + - - - + + Identifies the full text of a License or Addition. + + - - + + 1 1 - + - - cpe22 - [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. - + - - extension - the element follows the Extension profile specification + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. - - - + + + + megajoule + Megajoule. - - - - - + + + + + 1 1 - - + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + 1 1 - - + + + + bom + The Element is a bill of materials. + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + ^[^\/]+\/[^\/]+$ 1 - - Timestamp of impact statement. - - - - - - - - - - - requirement - the Element provides a requirement needed as input for another Element - - - - + + + - + - - Connects a vulnerability and an element designating the element as a product -affected by the vulnerability. + Designates elements as products where the impact of a vulnerability is being +investigated. - - - - - A substitute for a URI. - - - + - - vcs - A reference to a version control system related to a software artifact. + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) - + - - copiedTo - The `from` Element has been copied to each `to` Element. + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) - + - - install - the Element is used to install software on disk - - - - - + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). - - - + + + - - - - + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). - - - + + + 1 1 - - - + + + - - - - - 1 - 1 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. - - - - - 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). - - - - An assertion made in relation to one or more elements. - - - - - - + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). - + - - A tuple of two positive integers that define a range. - - - + Specifies the SSVC decision type. - - - + + + + + + + - + + 1 + 1 - - - An individual human being. - + + + + + 1 - + + + + + + + + + + + + + - - secureSoftwareAttestation - A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. - + + + + + + + + + - - high - The second-highest level of risk posed by an AI system. + + structured + data is stored in tabular format or retrieved from a relational database. - - - - A map of Element identifiers that are used within a Document but defined -external to that Document. - - - - - - - - - + + + - 2 - + - - Specifies an AI package and its associated information. - - - - - - - - - - - - - - - - - - - - - + Specifies the type of a content identifier. - - - + + + - - - + + + - 1 + - - - + + + + A collection of SPDX Elements describing a single package. + + + - - - - hasAssociatedVulnerability - Used to associate a `from` Artifact with each `to` Vulnerability. - - - - - buildMeta - A reference build metadata related to a published package. - - - Identifies the tooling that was used during the creation of the Element. - - - - - - - certificationReport - A reference to a certification report for a package from an accredited/independent body. + + + + A collection of Elements, not necessarily with unifying context. + + + + + + - - Property describing the start time of a build. - - + + + + + 1 + 1 - - + + 1 - - - - audio - data is audio based, such as a collection of music from the 80s. - - - - - - - - + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + - - 1 - 1 - - - - - - - - - - - - - - - - design - A relationship has specific context implications during an element's design. + + + - + - - availableFrom - The `from` Element is available from the additional supplier described by each `to` Element. - - - - - - 1 - - - - + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. - + - socialMedia - A reference to a social media channel for a package. - - - - - - 1 - 1 + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. - + - - noAssertion - Makes no assertion about the field. - - - Describes what the given dataset should be used for. - - + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) - - - - clickthrough - the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + - + - - md6 - [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + patch + The Element contains a set of changes to update, fix, or improve another Element. - - - + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + - - - + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + - 1 - 1 + + - + - - amber - Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + lite + the element follows the Lite profile specification - - Records a hyperparameter used to build the AI model contained in the AI -package. - - + + + - + - - analyzed - SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. - - - + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. - + - A mathematically calculated representation of a grouping of data. - - - - + Provides information about the creation of the Element. + + + + + + - + + + + + - - A distinct article or unit related to Software. - + A collection of SPDX Elements that could potentially be serialized. + - - - - - + + + - - + + - 1 1 - - Provides additional purpose information of the software artifact. - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 - - Specifies the type of the external reference. - - + + + + yes + Indicates presence of the field. - - - + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + - + 1 + 1 + + + + + + + + + @@ -904,307 +879,371 @@ package. core the element follows the Core profile specification - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 + + + - + - - qualityAssessmentReport - A reference to a quality assessment for a package. + + expandedLicensing + the element follows the ExpandedLicensing profile specification - - - - md5 - MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321). + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + - - - + + + + - - - - Describes a relationship between one or more elements. - - - - - - - - - - - - - - 1 - - - A buildType is a hint that is used to indicate the toolchain, platform, or -infrastructure that the build was invoked on. + + Describes potentially noisy elements of the dataset. - + - - - - hasProvidedDependency - The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + - + - - endOfSupport - there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. - - - The percentile of the current probability score. - - + + serious + The highest level of risk posed by an AI system. - - + + 1 - - - - - - 1 + + + - + - - vulnerabilityExploitabilityAssessment - A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. - + - - scrapingScript - the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + other + Any other units of energy measurement. - - Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + Describes a sensor used for collecting the data. - + - + - - deployed - in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + - - Specifies until when the artifact can be used before its usage needs to be -reassessed. - - + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. - - - + + + - - 1 - 1 - - - + + + + + - - A license expression participating in a license set. - - + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. - + - - green - Dataset can be shared within a community of peers and partners. + + ai + the element follows the AI profile specification - + + The result of applying a hash algorithm to an Element. + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + - - low - Low/no risk is posed by an AI system. + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). - - - - - 1 + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. - - - + + + + data + The Element is data. - + - mavenCentral - A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + issueTracker + A reference to the issue tracker for a package. - + - - exportControlAssessment - A reference to a export control assessment for a package. + + + An Individual Value for License when no assertion can be made about its actual +value. + - - - + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + - - - + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + - - - - kev - CISA's Known Exploited Vulnerability (KEV) Catalog + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + - - - + + + 1 1 - - Gives information about the circumstances or unifying properties -that Elements of the bundle have been assembled under. + + Describes the anonymization methods used. - - - + + + + 1 1 - - - - - - Property describing a parameter used in an instance of a build. - - + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). - - - + + + - - - - Provides a CVSS version 4 assessment for a vulnerability. - - - - - + + + - + - - container - the Element is a container image which can be used by a container runtime application - - - - + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). - - - + + + + runtime + A relationship has specific context implications during the execution phase of an element. - + - hasAssessmentFor - Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. - - - + + A name used in a CdxPropertyEntry name-value pair. + + - + - - componentNotPresent - The software is not affected because the vulnerable component is not in the product. - - - - - - - 1 - 1 + + releaseHistory + A reference to a published list of releases for a package. - - - + + Provides information about the creation of the Element. + + - - - - act - The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + - - - + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + + + + + - - 1 + 2 - - - + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. - + + + + + - coordinatedBy - The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. - + + + + library + The Element is a software library. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + - other - data is of a type not included in this list. + audio + data is audio based, such as a collection of music from the 80s. - - - - Provides an EPSS assessment for a vulnerability. - - - - + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + extension + the element follows the Extension profile specification + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + + @@ -1212,192 +1251,170 @@ that Elements of the bundle have been assembled under. directory The file represents a directory and all content stored in that directory. - - + + Refers to one or more Elements that are part of an ElementCollection. + + + + + Provides information about the primary purpose of the software artifact. + + + + + - 1 - - - - - Provides an independently reproducible mechanism that permits verification of a specific Element. - - + + + + + 1 + 1 - + - - registration - the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. - - - A License participating in a 'with addition' model. - - + + buildSystem + A reference build system used to create or publish the package. - - - - data - Element is data + + + + + 1 - - + + 1 - - - - swid - Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3. - - + 1 1 - - - - - - - + + + + Provides a CVSS version 4 assessment for a vulnerability. + - 1 + + + - - - + + + - + - - invokedBy - The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). - - - Provides a place for the SPDX data creator to record acknowledgement text for -a software Package, File or Snippet. - - + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + - - The relative file name of a file to be excluded from the -`PackageVerificationCode`. + + Specifies the version of a VEX statement. - - - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + 1 - - - + + + - - - - + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + - + - - trainedOn - The `from` Element has been trained on the `to` Element(s). + + framework + The Element is a software framework. - + - A license that is listed on the SPDX License List. - + Class that describes a build instance of software/artifacts. + - - + + + + + + + + + + + + + - - - + + + Specifies the VEX justification type. - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - + + + + + + 1 1 - - Conveys information about how VEX status was determined. - - + + Identifies from where or whom the Element originally came. + + - + - - test - The Element is a test used to verify functionality on an software element + + chat + A reference to the instant messaging system used by the maintainer for a package. - - - - swhid - SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. - - - - hasSpecification - Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. - - - Describes all the preprocessing steps applied to the training data before the -model training. - - - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - + + + + 1 1 - - - - hasOptionalComponent - Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). - - - - - nuget - A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + 1 - - - - Class that describes a build instance of software/artifacts. - + + + - - - - - - - - - + + 1 @@ -1405,763 +1422,856 @@ model training. releaseNotes A reference to the release notes for a package. - - - - hasStaticLink - The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + - - - - swhid - SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + - - - + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + - - Identifies all the text and metadata associated with a license in the license -XML format. + + Specifies the CVSS vector string for a vulnerability. - + + Timestamp of impact statement. + + + + - - noAssertion - data type is not known. + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). - - - + + + - - - + + + + + + 1 - - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + - 1 1 - - Identifies when the Element was originally created. + + + + + 1 + + + Specifies the time from which an element is applicable / valid. - - - - - 1 + + + + firmware + The Element provides low level control over a device's hardware. - - - - - 1 + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). - - - - - 1 + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + - - Specifies the level of support associated with an artifact. - - + + + - - + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + 1 1 - - - + + + + - - - + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). - - + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ 1 - + - + 1 1 - + + + + + 1 + 1 + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + - hasDependencyManifest - The `from` Element has manifest files that contain dependency information in each `to` Element. + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. - + + + + + - testedOn - The `from` Element has been tested on the `to` Element(s). + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). - - - + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. - + - A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. - - - - - - + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + - - - - binaryArtifact - A reference to binary artifacts related to a package. + + + - - - + + + + + 1 - - - + + Specifies the level of support associated with an artifact. + + - - - ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ - + + + + contains + The `from` Element contains each `to` Element. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + 1 - + - chat - A reference to the instant messaging system used by the maintainer for a package. - - - - + metrics + A reference to metrics related to package such as OpenSSF scorecards. - - - - Links a vulnerability and one or more elements designating the latter as products -not affected by the vulnerability. - - - - - + + + - - - - - - 1 - 1 + + + - - - - An Individual Value for License where the SPDX data creator determines that no -license is present. - - - - - - - - - - - - - - - - - - - - - 1 - 1 - - - - - security - the element follows the Security profile specification + + Specifies the type of the external identifier. + + - - - - evidence - the Element is the evidence that a specification or requirement has been fulfilled + + + - - Specifies the time from which an element is no longer applicable / valid. + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. - - - - model - the Element is a machine learning or artificial intelligence model - - + - - packageUrl - Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + buildMeta + A reference build metadata related to a published package. - - - + + + 1 1 - - - - - - - - archive - the Element is an archived collection of one or more files (.tar, .zip, etc) - - - - - inlineMitigationsAlreadyExist - Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. - - + - Specifies the VEX justification type. + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + - - - - attend - The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 - Abstract ancestor class for all vulnerability assessments + + + + + + - - - - - - - - - - critical - When a CVSS score is between 9.0 - 10.0 - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 - - - - - privacyAssessment - A reference to a privacy assessment for a package. - - - - - 1 + + + - - - + + + - + - - buildSystem - A reference build system used to create or publish the package. - - - - - - - - - - - 1 + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. - - - - + + + - + - - bom - Element is a bill of materials + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. - + - hasMetadata - Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). - - - - + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). - + - delegatedTo - The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. - - Provides information about the type of an SBOM. - - + + + + Abstract ancestor class for all VEX relationships + + + + + - + - Specifies the type of a content identifier. + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + - - - + + + Provides information about the primary purpose of an Element. - + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + - sha3_384 - SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). - - + + + 1 1 - - - - - - - Identifies the full text of a LicenseAddition. - - - - - - - - - Records any relevant background information or additional comments -about the origin of the package. - - + + + Specifies the unit of energy consumption. - + - - hasEvidence - Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). - - - - - - - 1 + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. - - Provides a detailed description of the Element. - - + + An Element an annotator has made an assertion about. + + - - - + + Captures the threshold that was used for computation of a metric described in +the metric field. + + - - - + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. - - + + - 1 - 1 - - - + + + - + - - cve - Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. - - - - test - A relationship has specific context implications during an element's testing phase, during development. - - - - - cwe - [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). - - - Specifies whether the License is listed as approved by the -Open Source Initiative (OSI). - - + + Provides an ExternalMap of Element identifiers. + + - - Contains a URL where the License or LicenseAddition can be found in use. - - + + + + A tuple of two positive integers that define a range. + + + - - Provides a reference number that can be used to understand how to parse and -interpret an Element. - - + + + + A license that is listed on the SPDX License List. + + + + - - Records the results of general safety risk assessment of the AI system. - - + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + - - - + + + + + 1 + 1 - - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + 1 - - This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + References the Element on the left-hand side of a relationship. - - Impact justification label to be used when linking a vulnerability to an element -representing a VEX product with a VexNotAffectedVulnAssessmentRelationship -relationship. - - + + + Specifies the exploit catalog type. - - + + 1 - + + + + https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + + + + + + Identifies the full text of a LicenseAddition. + + + + - - incomplete - The relationship is known not to be exhaustive. + + securityOther + Used when there is a security related identifier of unspecified type. - + + + + + - Portion of an AnyLicenseInfo representing this version, or any later version, -of the indicated License. - + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + - + + - - - - A reference to a resource outside the scope of SPDX-3.0 content related to an Element. - - - - - + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. - - + + + + install + The Element is used to install software on disk. + + + + + operatingSystem + The Element is an operating system. + + + - - Indicates the amount of energy consumption incurred by an AI model. - - + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. - + - Provides an exploit assessment of a vulnerability. - + Describes a relationship between one or more elements. + - - - + + + + + + + + + + - - - + + + - - - + + + + complete + The relationship is known to be exhaustive. - - - - + + + - - - + + + + + 1 - + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + Defines the original host file that the snippet information applies to. + + + + - An SPDX Element containing an SPDX license expression string. - + Describes a certain part of a file. + - - - - - - Information about the relationship between two Elements. - - + + + - - Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + Specifies an Extension characterization of some aspect of an Element. - - - - Provides information about the content type of an Element or a Property. - - + - - + + 1 1 - - - - securityThreatModel - A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 + + Property that describes the digest of the build configuration file used to +invoke a build. + + - - - + + + - 1 + 1 - - - + + + - - Specified the time and date when a vulnerability was withdrawn. + + Provides the location of an external reference. - + - + + Describes the confidentiality level of the data points contained in the dataset. + + + + + Identifies who or what created the Element. + + + + - md2 - MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/). + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. - - - + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. - - - - - - 1 + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). - - Describes a sensor used for collecting the data. - - + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. - - Specifies whether an additional text identifier has been marked as deprecated. - - + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. - - Records the type of the model used in the AI software. - - + + + + exportControlAssessment + A reference to a export control assessment for a package. - - - + + + - - - - - 1 + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + - + + + + + - - source - SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. - - - + + Describes relevant information about different steps of the training process. + + - - - - - 1 - 1 + + + - - - - + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + - - - + + + - 1 - 1 - - - + + + - - - + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + - - - + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + - - Describes one a profile which the creator of this ElementCollection intends to -conform to. + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. - - - - - + - - - - foundBy - Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + - + - - Abstract class representing a License or an OrLaterOperator. - + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + - + - securityAdvisory - A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + securityAdversaryModel + A reference to the security adversary model for a package. - - - - - 1 - 1 + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. - - - + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. - + + + + + - Indicates the type of support that is associated with an artifact. + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + - - - - + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + An entity that is authorized to issue identification credentials. + + @@ -2169,1026 +2279,871 @@ conform to. medium The third-highest level of risk posed by an AI system. - - - + + + - - - - deployed - SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + - - - - - 1 - 1 + + + - - - - - 1 + + + A concrete subclass of Element used by Individuals in the +Core profile. + + - + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + 3.0.1 + + + + + + - - hasInput - The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + + - + - - - - - - - - + + + ^[^\/]+\/[^\/]+$ + - 1 1 - - - - - - - A probability score between 0 and 1 of a vulnerability being exploited. - - + + + - - Identifies who or what created the Element. - - + + + + A type of extension consisting of a list of name value pairs. + + + - - - + + + + software + the element follows the Software profile specification - - Specifies an Element contained in a piece of software where a vulnerability was -found. - - - - - Provide the enumeration of possible decisions in the -[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). - - - - - - - - + - - other - Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless). - - - - + + certificationReport + A reference to a certification report for a package from an accredited/independent body. - - The result of applying a hash algorithm to an Element. + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. - + - - + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ 1 - - Specifies the SPDX License List version in which this license or exception -identifier was deprecated. - - - - - - - - - - - A collection of SPDX Elements that could potentially be serialized. - - - - - - - + - - platform - Element represents a runtime environment - - - - A container for a grouping of SPDX-3.0 content characterizing details -(provenence, composition, licensing, etc.) about a product. - - + + review + Used when someone reviews the Element. - - - - - 2 + + + + + 1 - + - - vulnerabilityDisclosureReport - A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + green + Dataset can be shared within a community of peers and partners. - - - - - Abstract class for the portion of an AnyLicenseInfo representing a license. - - - - - - - - - - - - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - + + + - 1 - 1 - - - - runtime - SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + - - A canonical, unique, immutable identifier of the artifact content, that may be -used for verifying its identity and/or integrity. - - + + + - - - - structured - data is stored in tabular format or retrieved from a relational database. + + + + https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - + + + 1 1 - - - - - - 1 + + + - - + + - 1 - - - - - 1 + 1 - - - - + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). - - Provides advise on how to mitigate or remediate a vulnerability when a VEX product -is affected by it. + + Provides a detailed description of the Element. - - - - hasRequirement - The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. - - - - - hasDeclaredLicense - The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. - - - Identifies the full text of a LicenseAddition, in SPDX templating format. + + Provides a License author's preferred text to indicate that a file is covered +by the License. - - - - - - - + + + + An assertion made in relation to one or more elements. + + + + + + - - - + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. - + - - exploitCreatedBy - The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. - + - - hasOptionalDependency - The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. - - A buildId is a locally unique identifier used by a builder to identify a unique -instance of a build produced by it. - - + + + - - - + + + An element of hardware and/or software utilized to carry out a particular function. + - 1 - - - - metrics - A reference to metrics related to package such as OpenSSF scorecards. + + + - - Points to a resource outside the scope of the SPDX-3.0 content -that provides additional characteristics of an Element. + + Property describing a parameter used in an instance of a build. - - - - - - complete - The relationship is known to be exhaustive. - - - - - - - - + - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - + + + + 1 1 - - - - noAssertion - No assertion can be made about the completeness of the relationship. - - - - - - - - - - + + + + + 1 - - - - + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + 1 - - - - firmware - the Element provides low level control over a device's hardware - - - - + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + - - Refers to one or more Elements that are part of an ElementCollection. + + A License participating in a 'with addition' model. - + - - - - - - 1 - 1 + + + - - - + + + - - Captures a limitation of the AI software. + + + + + + Specifies the time an artifact was released. - + - - - + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). - - - - - A collection of Elements, not necessarily with unifying context. - - - - - + + + + + 1 - - - + + Specifies a time when a vulnerability assessment was modified + + - - Identifies the name of an Element as designated by the creator. + + Provides the location for more information regarding an external identifier. - + - - - + + Specifies the value of the content identifier. + + - + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + - Provides a CVSS version 3 assessment for a vulnerability. - + Refers to any object that stores content on a computer. + - - - - - - - + + - - Provides a License author's preferred text to indicate that a file is covered -by the License. - - + + + - + - Specifies the unit of energy consumption. + + A key with an associated value. + + + - - - + + + - - - - - - 1 - 1 + + + + binaryArtifact + A reference to binary artifacts related to a package. - - - - + + + - - - + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + - - 1 - - - + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + - - + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + - 1 1 - + - documentation - Element is documentation - - - - + manifest + The Element is a software manifest. - + - - hasDistributionArtifact - The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. - - - - fixedBy - Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + - - - + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + - + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + + + A property name with an associated value. + + + + + - contains - The `from` Element contains each `to` Element. - - - - + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. - + - - staticAnalysisReport - A reference to a static analysis report for a package. + + incomplete + The relationship is known not to be exhaustive. - - Defines the line range in the original host file that the snippet information -applies to. - - + + + - - Specifies the unit in which energy is measured. + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. - - - - - - hasDocumentation - The `from` Element is documented by each `to` Element. + - - - - other - the Element doesn't fit into any of the other categories + + + + + 1 - + - - Asbtract ancestor class for all VEX relationships - - - - + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + - - - + + + - - - - patchedBy - Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + - - - Designates elements as products where the impact of a vulnerability is being -investigated. - - + + + - - - - design - SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 - - Provides the location for more information regarding an external identifier. + + Captures the size of the dataset. - - - - - - blake2b512 - BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4. + - + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + + + + + + + + + + + + + + - - ancestorOf - The `from` Element is an ancestor of each `to` Element. + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. - - Maps a LicenseRef or AdditionRef string for a Custom License or a Custom -License Addition to its URI ID. - - + + + - + - + - - - + + + - - - - hasAddedFile - Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + - - - + + + - - - - support - the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + 1 + 1 - - - - dynamicAnalysisReport - A reference to a dynamic analysis report for a package. + + + + - - Property that describes the URI of the build configuration source file. + + + + + + + + Specifies the type of an annotation. + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. - + - - - + + + A license that is not listed on the SPDX License List. + - - + - A key with an associated value. - - - + Provides an EPSS assessment for a vulnerability. + + + + - - - - - 1 + + + + 1 - - - - - + - - dependsOn - The `from` Element depends on each `to` Element, during a LifecycleScopeType period. - - - - - - - - - - - - + + simpleLicensing + the element follows the SimpleLicensing profile specification - + - - diskImage - the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + none + When a CVSS score is 0.0 - - - + + + + Provide context for a relationship that occurs in the lifecycle. + + + - - - - + + + + https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - + + + 1 - - - - other - Any other units of energy measurement. - - - Records the measurement of prediction quality of the AI model. - - - - - The field describes the availability of a dataset. - - - - - Specifies the version of a VEX statement. - - - - - - - usesTool - The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + 1 - - - + + + + - + - - hasOutput - The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) - + - - vulnerableCodeNotPresent - The product is not affected because the code underlying the vulnerability is not present in the product. + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. - + - - An Individual Value for License when no assertion can be made about its actual -value. - - + + requirement + The Element provides a requirement needed as input for another Element. - - - - - Abstract class for additional text intended to be added to a License, but -which is not itself a standalone License. - - - - - - - - + + + - - - - issueTracker - A reference to the issue tracker for a package. + + + - - An Element an annotator has made an assertion about. - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 - + - - hasDeletedFile - Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. - - - + + + - + - - other - Used when the type does not match any of the other options. - - - Identify the version of a package. - - + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. - - A name used in a CdxExtension name-value pair. + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. - - - - purchaseOrder - A reference to a purchase order for a package. - - - - - - + - - - A distinct article or unit within the digital domain. - - - - - - - - - - - - Provides a map of a property names to a values. - - - - - - - - - Specifies whether the License is listed as free by the -Free Software Foundation (FSF). - - - - - - - - 1 - 1 - - - - - - - - - - - 1 + + A mathematically calculated representation of a grouping of data. + + + + - - Provides the location of an external reference. + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. - - - - kilowattHour - Kilowatt-hour. + + + - - - - hasConcludedLicense - The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + - - Commentary on an assertion that an annotator has made. - - + + Capture the scope of information about a specific relationship between elements. + + - + - - low - When a CVSS score is between 0.1 - 3.9 + + source + The Element is a single or a collection of source files. - - Captures the domain in which the AI package can be used. - - + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + 3.0.1 - - Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. - - + + + + socialMedia + A reference to a social media channel for a package. - - Specifies the SPDX License List version in which this ListedLicense or -ListedLicenseException identifier was first added. + + + + + 1 + + + The name of a relevant standard that may apply to an artifact. - - - - - 1 - 1 - - + - describes - The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. - + - A type of extension consisting of a list of name value pairs. - - - + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + - - - + + + - - - + + + + - - - + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). - - - - - 1 + + + - - - + + Captures a standard that is being complied with. + + - - - - none - When a CVSS score is 0.0 + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + - - - + + + - - Describes if a given file is a directory or non-directory kind of file. + + Provides a map of a property names to a values. - - - - - - + - + - - runtimeAnalysisReport - A reference to a runtime analysis report for a package. - - - - + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. - + - A class for describing the energy consumption incurred by an AI model in -different stages of its lifecycle. - - - - + Provides an exploit assessment of a vulnerability. + + + + + - - Represents the energy quantity. - - + + + - - A short description of an Element. - - + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + 3.0.1 - + - - text - data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. - + - - hasTestCase - Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + numeric + data consists only of numeric entries. - - - + + + - - - - securityOther - A reference to related security information of unspecified type. + + + - - - - + + + - - - - expandsTo - The `from` archive expands out as an artifact described by each `to` Element. + + + - + - - sha3_256 - SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + altDownloadLocation + A reference to an alternative download location. - - Identifies the text of one or more copyright notices for a software Package, -File or Snippet, if any. + + + + + + Specifies whether an additional text identifier has been marked as deprecated. - + + + + + + + + 1 + 1 @@ -3196,2391 +3151,2579 @@ File or Snippet, if any. video data is video based, such as a collection of movie clips featuring Tom Hanks. - - Describes the preprocessing steps that were applied to the raw data to create the given dataset. - - - - - - - yes - Indicates presence of the field. - - - - - - - - - - - - - other - any hashing algorithm that does not exist in this list of entries - - - - A license that is not listed on the SPDX License List. - - - - - + + - - - - - - - - An SPDX version 2.X compatible verification method for software packages. - - - - - - - - - - - - 1 + + + + - - Records if sensitive personal information is used during model training or -could be used during the inference. - - + + + - + - - sha224 - SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874). - - - - + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. - - - - Provides information about the creation of the Element. - - - - - - + + + - + - - md4 - MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186). + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). - - - - + + + + 1 - - Describes a mechanism to update the dataset. - - + + + + + 1 + 1 - - Specifies whether a license or additional text identifier has been marked as -deprecated. + + Identifies when the Element was originally created. - + - + - - publishedBy - Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + An Organization representing the SPDX Project. + - - - + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + - - - + + + - - - + + + - - Provides relevant information about the AI software, not including the model -description. - - + + + - + - - sha512 - SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234). + + image + data is a collection of images such as pictures of animals. - - - + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + - 1 + - - - Specifies the exploit catalog type. + + + - - Specifies the amount of energy consumed when finetuning the AI model that is -being used in the AI system. - - + + + - - - + + + + development + A relationship has specific context implications during development phase of an element. - - - + + + + + 1 - - - + + Defines the end of a range. + + - + - - sha1 - SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174). + + documentation + The Element is documentation. - + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + + + + + + 1 + + - - clear - Dataset may be distributed freely, without restriction. + + copiedTo + The `from` Element has been copied to each `to` Element. - - Identifies the download Uniform Resource Identifier for the package at the time -that the document was created. - - + + + + high + When a CVSS score is between 7.0 - 8.9 - + - - runtime - A relationship has specific context implications during the execution phase of an element. + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. - - - + + + + + + 1 + 1 + + + + + + + + 1 - + + + + + - - noSupport - there is no support for the artifact from the supplier, consumer assumes any support obligations. + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). - - - + + + - - - + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. - - Provides information about the creation of the Element. + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. - + - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - + + + + + + + 1 - - Provides the license under which the SPDX documentation of the Element can be -used. - - - - - - + + + + + + 1 - - - - Provides a CVSS version 2.0 assessment for a vulnerability. - + + + - - + 1 - - - + + + - - - - vulnerableCodeCannotBeControlledByAdversary - The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + 1 - + - - specification - the Element is a plan, guideline or strategy how to create, perform or analyse an application - - - - - + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. - - - - altWebPage - A reference to an alternative web page. + + + - - - - bower - A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + 1 - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - + + + 1 - - - - - - - - - + - - altDownloadLocation - A reference to an alternative download location. + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). - - - + + + 1 1 - - - + + + - - - + + + - + + + + + - - configuration - Element is configuration data + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). - + + + + - - framework - the Element is a software framework + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). - + + + + + + - - packagedBy - Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. - - - + + Identifies the name of an Element as designated by the creator. + + - - - - Provide context for a relationship that occurs in the lifecycle. - - - + + + - - - + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. - - - - A license or addition that is not listed on the SPDX License List. - - - + + + - - Specifies the CVSS vector string for a vulnerability. - - + + + + - - The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + + Describes methods that can be used to explain the results from the AI model. - - Specifies the value of the content identifier. - - + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. - - - - A license exception that is listed on the SPDX Exceptions list. - - - - + + + - + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + security + the element follows the Security profile specification + + - - Abstract class representing a license combination consisting of one or more licenses. - + An individual human being. + - - - + + + - - - + + + - - - + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). - - - + + + + - - - + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - 1 + + + - - + + Describes the type of annotation. + + + + + + 1 - - Provides an IntegrityMethod with which the integrity of an Element can be -asserted. - - - - - + + + 1 Records the biases that the dataset is known to encompass. - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + Indicates the type of support that is associated with an artifact. + + - - serious - The highest level of risk posed by an AI system. + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. - - - + + + - - - Agent represents anything with the potential to act on a system. - + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + + + + + + + 2 - - - + + + + + 1 - - + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + + + 1 - - - + + A substitute for a URI. + + - - - A group of people who work together in an organized way for a shared purpose. - - + + + - - - + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Property describing the session in which a build is invoked. + + + + + + - 1 1 - - Explains why a VEX product is not affected by a vulnerability. It is an -alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable -justification label. + + + + + 1 + + + Provides a numerical (0-10) representation of the severity of a vulnerability. - + - - - - gitoid - [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + 1 - - - + + + - - 1 + 1 - - - - sha3_512 - SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Enumeration of dataset types. - + + + + + 1 + + - affects - The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. - + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Property that describes the URI of the build configuration source file. + + + + - Specifies a vulnerability and its associated information. - + A license exception that is listed on the SPDX Exceptions list. + - - - - - - - Categories of confidentiality level. - - - - + + - - - - - 1 + + + + https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - + + + + - - - + + + - - Identifies an external Element used within a Document but defined external to -that Document. - - + + + Information about the relationship between two Elements. - - - - - 1 + + + Availability of dataset. - - - + + + + https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - + - - securityPolicy - A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. - - - - - 1 - 1 + + References an Element on the right-hand side of a relationship. + + - + + Provides additional purpose information of the software artifact. + + + + - executable - Element is an Artifact that can be run on a computer - - - - ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ - - - - - - + module + The Element is a module of a piece of software. - - - - - 1 + + + + low + Low/no risk is posed by an AI system. - + - sha256 - SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234). + other + any hashing algorithm that does not exist in this list of entries - - - + + + - - - + + + - + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + Uniquely identifies an external element. + + + + - - application - the Element is a software application + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. - + - - noAssertion - no assertion about the type of support is made. This is considered the default if no other support type is used. + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. - + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + - serializedInArtifact - The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. - - - - - 1 + + + - - - - + + + + amendedBy + The `from` Element is amended by each `to` Element. - - - + + + - - - ^[^\/]+\/[^\/]+$ + + + + + + 1 - - - + + Property describing the start time of a build. + + + + + + + + + + - 1 - - - + + + - + + + + + - - hasDynamicLink - The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). - - Property that describes the digest of the build configuration file used to -invoke a build. - - + + + A software agent. + + - - - + + + - - - + + Information about the relationship between two Elements. + + - + + + + + - - Portion of an AnyLicenseInfo representing a set of licensing information -where all elements apply. - + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + - - - - + + + Specifies the CVSS base, temporal, threat, or environmental severity type. - - - - hasDataFile - The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + - - - + + + - + - - crystalsKyber - [Kyber](https://pq-crystals.org/kyber/) + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). - - - - Provides an SSVC assessment for a vulnerability. - + + + - - + + + + + - Provides information about the primary purpose of an Element. + A mathematical algorithm that maps data of arbitrary size to a bit string. - + - - device - the Element refers to a chipset, processor, or electronic board - - - - - - 1 - - - Uniquely identifies an external element. - - + + noAssertion + data type is not known. - - - + + + + hasDocumentation + The `from` Element is documented by each `to` Element. - - - A concrete subclass of AnyLicenseInfo used by Individuals in the -ExpandedLicensing profile. - - + + + - - - + + + - - Describes relevant information about different steps of the training process. + + Defines the line range in the original host file that the snippet information +applies to. - - - - - + - - - + + + - - + + 1 - - - + + + - - - + + + - - - Specifies the CVSS base, temporal, threat, or environmental severity type. + + + - - + + + + + + 1 + 1 + + + + + + 1 + + + - 1 1 - - Capture the scope of information about a specific relationship between elements. - - + + A value used in a generic key-value pair. + + - + - - An Individual Value for Element representing a set of Elements with -cardinality (number/count) of zero. - - + + test + A relationship has specific context implications during an element's testing phase, during development. - - - + + Identifies the tooling that was used during the creation of the Element. + + - - - Specifies the type of an external reference. + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + - - - - + + + + 1 1 - - - + + + - - Specifies the time from which an element is applicable / valid. - - + + + - + + + + altWebPage + A reference to an alternative web page. + + + + + + - hasVariant - Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. - - - - Portion of an AnyLicenseInfo representing a License which has additional -text applied to it. - - - - + + + - - - + + - - + + + + + + 1 - - - - development - the artifact is in active development and is not considered ready for formal support from the supplier. - - - - + + + + - - - + + + - - - + + + + + 1 - + - - timeseries - data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + license + A reference to additional license information related to an artifact. - + + + + + + + + - hasPrerequisite - The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + descendantOf + The `from` Element is a descendant of each `to` Element. - - - - + + + + 1 - - - - directDownload - the dataset is publicly available and can be downloaded directly. + + + - - - + + + + + + + + + + + 1 1 - - Identifies from where or whom the Element originally came. - - - - + - - securityPenTestReport - A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. - - - - - - - - + + medium + When a CVSS score is between 4.0 - 6.9 - - - + + + + - - - - operatingSystem - the Element is an operating system + + Describes the type of the given dataset. + + - - Captures the size of the dataset. + + Conveys information about how VEX status was determined. - + - - - - falcon - [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. - - - ^[^\/]+\/[^\/]+$ + + 1 - - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 - + - - sha384 - SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234). + + noAssertion + No assertion can be made about the completeness of the relationship. - + - - riskAssessment - A reference to a risk assessment for a package. + + other + data is of a type not included in this list. - - - + + + - - - - - 1 + + Describes how the dataset was collected. + + - - - - + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. - - - - Refers to any object that stores content on a computer. - - - - + + + - - - - - 1 - 1 + + + - - - + + + - - + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + - 1 - - - + + + - - - - other - Used when the type does not match any of the other options. + + Property that describes the time at which a build stops. + + - - Property describing the session in which a build is invoked. + + Specifies the unit in which energy is measured. - + - - - + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). - - - - + + + + 1 - - - + + A LicenseAddition participating in a 'with addition' model. + + - - + + 1 - - - - - - - - - - - - The class that helps note down the quantity of energy consumption and the unit -used for measurement. - - - + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 - - A place for the SPDX document creator to record a website that serves as the -package's home page. + + Specified the time and date when a vulnerability was withdrawn. - + - - - + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. - + - Enumeration of the different kinds of SPDX file. + Abstract class representing a license combination consisting of one or more licenses. + + + - - - Specifies the safety risk level. + + + - - Specifies the amount of energy consumed when training the AI model that is -being used in the AI system. - - + + + - + - - manifest - the Element is a software manifest + + kilowattHour + Kilowatt-hour. - - + + + 1 - - - - A property name with an associated value. - - - + + Describes what the given dataset should be used for. + + - - + + + + https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + + + 1 1 - - - + + + - - A License participating in an 'or later' model. - - + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + - - Captures the threshold that was used for computation of a metric described in -the metric field. - - + + + + + 1 + 1 - - References the Element on the left-hand side of a relationship. - - + + + + + + 1 - + + Identify the version of a package. + + + + + + + + + + + + - Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + Provides an SSVC assessment for a vulnerability. + + + - - - - numeric - data consists only of numeric entries. + + + - - Indicates whether the system can perform a decision or action without human -involvement or guidance. - - + + + + A distinct article or unit within the digital domain. + + + + + + + + + + - - - - high - When a CVSS score is between 7.0 - 8.9 + + + + + 1 + 1 + + + Commentary on an assertion that an annotator has made. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + - - - + + + - - - + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + - - Specifies the algorithm used for calculating the hash value. - - + + + - - - - - 1 - 1 + + + - + + + + + - library - the Element is a software library + deviceDriver + The Element represents software that controls hardware devices. - - - An element of hardware and/or software utilized to carry out a particular function. - - + + + - + + + + + + + + https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead. + + - - dataset - the element follows the Dataset profile specification + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. - - - + + + - - - + + + - - Describes the type of the given dataset. - - + + + + + 1 - - - Specifies the SSVC decision type. + + + - - - + + + - - - + + + Specifies the type of the content identifier. - - - - - - - - urlScheme - [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + - - Defines the beginning of a range. - - + + + - + - - crystalsDilithium - [Dilithium](https://pq-crystals.org/dilithium/) - - - - + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. - - A key used in a generic key-value pair. + + Identifies the full text of a License, in SPDX templating format. - - - + + Records the measurement of prediction quality of the AI model. + + - - - + + + - - - + + Records if sensitive personal information is used during model training or +could be used during the inference. + + - - - + + + - - - + + + Specifies the type of an external identifier. - - A value used in a generic key-value pair. + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. - + - - - - filesystemImage - the Element is a file system image that can be written to a disk (or virtual) partition + + + - - - + + + + - + - support - A reference to the software support channel or other support information for a package. - - - - - - - - - A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. - + securityOther + A reference to related security information of unspecified type. - + - - image - data is a collection of images such as pictures of animals. + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. - - Specifies the amount of energy consumed during inference time by an AI model -that is being used in the AI system. - - + + + + + 1 + 1 - - - + + + + + + 1 - - - + + + - - - + + + - - - - - 1 + + + - + + + + + - - query - the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). - + + + + + + + + + + + + + - A software agent. - - + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. - + - - releaseHistory - A reference to a published list of releases for a package. - - - - + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. - - - + + + - - - + + + + + + 1 + 1 - + - - reportedBy - Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog - + + + + + - - underInvestigationFor - The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) - - - - + + + + + 1 + 1 - - Property describes the invocation entrypoint of a build. - - + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. - - - + + + + other + Other exploit catalogs - - - + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) - - - + + + - + - - software - the element follows the Software profile specification + + critical + When a CVSS score is between 9.0 - 10.0 - + - hasTest - Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. - - - - - An Individual Value for Element representing a set of Elements of unknown -identify or cardinality (number). - - + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. - - - + + + + - - - + + + - 1 1 - - - Enumeration of the valid profiles. - - - - + + + - - - + + + + - + - - source - the Element is a single or a collection of source files - - - - Provide an enumerated set of lifecycle phases that can provide context to relationships. + + generates + The `from` Element generates each `to` Element. - + - - email - Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3. - - - - - - - - - - - - Information about the relationship between two Elements. - - - - + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). - - - + + + - - - + + + - 1 - - - + + Records a hyperparameter used to build the AI model contained in the AI +package. + + - - - + + + + https://spdx.org/rdf/3.0.1/terms/Extension/Extension is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - - + + + - - Specifies the licenseId that is preferred to be used in place of a deprecated -License or LicenseAddition. + + A key used in a generic key-value pair. - - - - hasExample - Every `to` Element is an example for the `from` Element (`from` hasExample `to`). - - - - + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + - - Specifies the type of the external identifier. + + Provides the license under which the SPDX documentation of the Element can be +used. - + - - Describes if any sensitive personal information is present in the dataset. + + Specifies the type of the external reference. - + - - - + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + + + + - 1 1 - - - - - + - deviceDriver - Element represents software that controls hardware devices + device + The Element refers to a chipset, processor, or electronic board. - - - + + + - - - - license - A reference to additional license information related to an artifact. + + + + + 1 - - Provides an unambiguous mechanism for conveying a URI fragment portion of an -Element ID. - - + + + - - The version of the SPDX License List used in the license expression. + + + + + 1 + + + Records the type of the model used in the AI software. - - - + + + + https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - + + + - - - Links a vulnerability and elements representing products (in the VEX sense) where -a fix has been applied and are no longer affected. - - + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. - - - + + + + - + - - file - The file represents a single file (default). + + purchaseOrder + A reference to a purchase order for a package. - + - - lite - the element follows the Lite profile specification + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). - - - - - 1 - 1 + + + - - Provides a numerical (0-10) representation of the severity of a vulnerability. - - + + + + low + When a CVSS score is between 0.1 - 3.9 - + - - red - Data points in the dataset are highly confidential and can only be shared with named recipients. + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). - - - + + + - - Describes the anonymization methods used. + + + + + + + + + The field describes the availability of a dataset. + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. - - - + + Specifies the exploit catalog type. + + + + + A short description of an Element. + + + + + + + + + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. - - Provide consumers with comments by the creator of the Element about the -Element. - - + + + - + - - patch - Element contains a set of changes to update, fix, or improve another Element + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. - + - Enumeration of dataset types. + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. - - - + + + + vcs + A reference to a version control system related to a software artifact. - - - + + A string in the license expression format. + + - - - + + + - - - + + + - - - + + + - - - + + + - - - + + + - - - + + + - - - A mathematical algorithm that maps data of arbitrary size to a bit string. + + + + https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead. - - - + + + A group of people who work together in an organized way for a shared purpose. + + - - - + + + - - - + + + + - - - + + + + - - - - - - 1 - 1 + + + - - Specifies the time an artifact was released. + + Specifies the time an artifact was built. - - - - - - - + + + + file + The file represents a single file (default). - - - - - 1 + + + - - - Provides a set of values to be used to describe the common types of SBOMs that -tools may create. + + A value used in a CdxPropertyEntry name-value pair. + + - - Provides information about the primary purpose of the software artifact. + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). - + - - + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + 1 1 - - - + + + - + - - expandedLicensing - the element follows the expanded Licensing profile specification - - - - + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). - - Artifact representing a serialization instance of SPDX data containing the -definition of a particular Element. + + A License participating in an 'or later' model. - - - - - + - - - ^[^\/]+\/[^\/]+$ + + 1 - - - + + + - - - - - 1 + + + - - - - other - Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element). + + + + - - - + + A license expression participating in a license set. + + - - - + + + - + - - amendedBy - The `from` Element is amended by each `to` Element. - - - - + + other + Used when the type does not match any of the other options. - - - + + + - + - componentAnalysisReport - A reference to a Software Composition Analysis (SCA) report. + mailingList + A reference to the mailing list used by the maintainer for a package. - - - + + + - - - - other - Other exploit catalogs + + + This individual element was defined by the spec. + 2024-11-22T03:00:01Z + + 3.0.1 - - - + + Provides information about the completeness of relationships. + + - + - - securityFix - A reference to the patch or source code that fixes a vulnerability. + + no + Indicates absence of the field. - - - + + + - - - + + + + + + + + + 1 + 1 Specifies the time when a vulnerability was published. - - Provides a reference to a resource outside the scope of SPDX-3.0 content -that uniquely identifies an Element. - - + + + Enumeration of the valid profiles. - - - + + + + executable + The Element is an Artifact that can be run on a computer. - - - + + + - - Describes potentially noisy elements of the dataset. + + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + The percentile of the current probability score. - + - - - + + + - - - - npm - A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + - - - + + + + dataset + the element follows the Dataset profile specification - - Property that describes the time at which a build stops. - - + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) - - - + + + - - Provides an ExternalMap of Element identifiers. - - + + + + privacyAssessment + A reference to a privacy assessment for a package. - - - + + + - - - + + + - + - - review - Used when someone reviews the Element. + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. - + - - no - Indicates absence of the field. - - - Specifies the time an artifact was built. - - + + application + The Element is a software application. - - A value used in a CdxExtension name-value pair. - - + + + - - - - + + + - - - - + + + - + - - - - + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. - - Identifies the full text of a License, in SPDX templating format. - - + + + + + 1 - - - - module - the Element is a module of a piece of software + + Indicates the amount of energy consumption incurred by an AI model. + + - - - + + + - - - - A collection of Elements that have a shared context. - - - + + + - - - + + + - - - Specifies the type of an annotation. + + Provides an indication of where to retrieve an external Element. + + - - - + + + - - - + + + - - - - securityOther - Used when there is a security related identifier of unspecified type. + + + - - Identifies the full text of a License or Addition. - - + + + - - Describes the type of annotation. - - + + + - - Records the time when a recommended action was communicated in a VEX statement -to mitigate a vulnerability. - - + + + + test + The Element is a test used to verify functionality on an software element. - - - + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. - - - + + + Specifies the safety risk level. - - - + + + + documentation + A reference to the documentation for a package. - - A string in the license expression format. + + + + + + Provides information about the content type of an Element or a Property. - - - + + + - - - - + + + + platform + The Element represents a runtime environment. - - - + + + - - - - sensor - data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + - - Provides information about the completeness of relationships. - - + + + + + 1 - - Identifies who or what supplied the artifact or VulnAssessmentRelationship -referenced by the Element. + + + + + + Describes if a given file is a directory or non-directory kind of file. - + - - - - + + + + + 1 - - - + + + + other + The Element doesn't fit into any of the other categories. - + - - documentation - A reference to the documentation for a package. + + high + The second-highest level of risk posed by an AI system. - - - + + - - - + + + - - References an Element on the right-hand side of a relationship. - - + + Represents the energy quantity. + + - - - + + + - - - + + - - - + + + Categories of confidentiality level. - - - + + + - - - + + + - - - + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + - - - + + + Specifies the type of an external reference. - - - + + + - - - + + + - - A LicenseAddition participating in a 'with addition' model. - - + + + + - - - + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + - - - + + + - - - + + Provides information about the type of an SBOM. + + - + - + - - - Categories of presence or absence. + + + - + + + + + - - other - A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + testedOn + The `from` Element has been tested on the `to` Element(s). - - Provides an indication of where to retrieve an external Element. + + Provides the location of an exploit catalog. - - - - - - - - - - - - - - - - - - - - + + + - + - - mailingList - A reference to the mailing list used by the maintainer for a package. + + build + the element follows the Build profile specification - - - + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + - - - - medium - When a CVSS score is between 4.0 - 6.9 + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + - - - - file - the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc) + + - - - - sourceArtifact - A reference to an artifact containing the sources for a package. + + + - - - A license addition that is not listed on the SPDX Exceptions List. - - + + Records any relevant background information or additional comments +about the origin of the package. + + - - Defines the end of a range. + + The version of the SPDX License List used in the license expression. - + - - - + + + - - - - + + + - - - + + Property describes the invocation entrypoint of a build. + + + + + + - - + + - - - + + + - - - + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). - - - + + + - - - + + + - - - + + + + - - - - build - the element follows the Build profile specification + + + - - - + + + - - - + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. - - - + + + - - - + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + - - - - development - A relationship has specific context implications during development phase of an element. + + Records the results of general safety risk assessment of the AI system. + + - - - - + + + - - - - megajoule - Megajoule. + + + - - - + + - - - + + + - - - - - + + + - - - + + Captures the domain in which the AI package can be used. + + - - - + + + - - - + + + - - - + + + - - - + + + - + + Categories of presence or absence. - - - - - - Provides the location of an exploit catalog. - - - - - An entity that is authorized to issue identification credentials. + + Captures a limitation of the AI software. - - - + + + - - - + + - - - - simpleLicensing - the element follows the simple Licensing profile specification + + + - - - + + + - - - Specifies the type of an external identifier. + + + - - - - build - A relationship has specific context implications during an element's build phase, during development. + + + - - - + + + - - - Availability of dataset. + + + - - - + + + - - - + + + - - - + + - - - - - 1 + + - - Describes how the dataset was collected. - - + + + - - - + + - - + + + + + + + Enumeration of the different kinds of SPDX file. + + + + + + + + + + + + + + + + + + + + + + +