[ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Property describing the session in which a build is invoked." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasEvidence" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies an external Element used within a Document but defined external to\nthat Document." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides information about the creation of the Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Categories of presence or absence." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides information about the primary purpose of an Element." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Timestamp of impact statement." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://www.rfc-editor.org/info/rfc1186)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "md4" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasOptionalComponent" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes a certain part of a file." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Nc75401efcc2546d0bfc236b367ea6dea" }, { "@id": "_:Naf563737b00549c6b4d2b84b8b9fbad3" }, { "@id": "_:Ne31445828dd446afac71c0d4dcf6a0f5" } ] }, { "@id": "_:Nc75401efcc2546d0bfc236b367ea6dea", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" } ] }, { "@id": "_:Naf563737b00549c6b4d2b84b8b9fbad3", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" } ] }, { "@id": "_:Ne31445828dd446afac71c0d4dcf6a0f5", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to funding information related to a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "funding" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A relationship has specific context implications during the execution phase of an element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "runtime" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies who or what created the Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A short description of an Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "publishedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a machine learning or artificial intelligence model" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "model" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Element is configuration data" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "configuration" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The field describes the availability of a dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "swhid" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Property describing a parameter used in an instance of a build." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "fixedIn" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the Lite profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "lite" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is the evidence that a specification or requirement has been fulfilled" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "evidence" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Records the type of the model used in the AI software." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Abstract class representing a License or an OrLaterOperator." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies whether an additional text identifier has been marked as deprecated." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element doesn't fit into any of the other categories" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "describes" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the exploit catalog type." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "exploitCreatedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a software manifest" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "manifest" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element is an ancestor of each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "ancestorOf" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Represents the energy quantity." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Captures the size of the dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "When a CVSS score is between 0.1 - 3.9" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "low" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies from where or whom the Element originally came." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides information about the completeness of relationships." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Used when someone reviews the Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "review" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sha512" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes how the dataset was collected." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Defines the end of a range." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "crystalsDilithium" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes the anonymization methods used." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A collection of SPDX Elements describing a single package." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N05f447a9347d44428f95df5a52c0adc8" } ] }, { "@id": "_:N05f447a9347d44428f95df5a52c0adc8", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" } ] } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "endOfSupport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a certification report for a package from an accredited/independent body." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "certificationReport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the SSVC decision type." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Element contains a set of changes to update, fix, or improve another Element" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "patch" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides an indication of where to retrieve an external Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the time an artifact was released." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element has been tested on the `to` Element(s)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "testedOn" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The name of a relevant standard that may apply to an artifact." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A mapping between prefixes and namespace partial URIs." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N260eb4cebc1f4976a6759726a4d2ed47" }, { "@id": "_:Nfeae67b5b4e14df5b6141bd00ee80e44" } ] }, { "@id": "_:N260eb4cebc1f4976a6759726a4d2ed47", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" } ] }, { "@id": "_:Nfeae67b5b4e14df5b6141bd00ee80e44", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasDeletedFile" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element is modified by each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "modifiedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A relationship has specific context implications during development phase of an element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "development" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies a vulnerability and its associated information." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Nb80371596e3c4cc48baeee06b0503788" }, { "@id": "_:N592992511579400da1973bdfe7e4cf63" }, { "@id": "_:N88aa3809aaa446bbabc22af8a8eafa45" } ] }, { "@id": "_:Nb80371596e3c4cc48baeee06b0503788", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:N592992511579400da1973bdfe7e4cf63", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:N88aa3809aaa446bbabc22af8a8eafa45", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data type is not known." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "noAssertion" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "securityThreatModel" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An assertion made in relation to one or more elements." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N9cbb0c3b2b5343f28e9b41ebd6a464e6" }, { "@id": "_:N4bb59d3268cd4dacbe428a11dc90bed2" }, { "@id": "_:Nf3d65c16affe489fa6acaf5d763b69bb" }, { "@id": "_:Nec5e5a936e2f49de85a04d9eda3ba646" } ] }, { "@id": "_:N9cbb0c3b2b5343f28e9b41ebd6a464e6", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" } ] }, { "@id": "_:N4bb59d3268cd4dacbe428a11dc90bed2", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^[^\\/]+\\/[^\\/]+$" } ] }, { "@id": "_:Nf3d65c16affe489fa6acaf5d763b69bb", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" } ] }, { "@id": "_:Nec5e5a936e2f49de85a04d9eda3ba646", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A license that is listed on the SPDX License List." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N15f020cdec2047389c1fb9408426097c" }, { "@id": "_:Ncc530b105a214cdc85643a6e7102d8f4" } ] }, { "@id": "_:N15f020cdec2047389c1fb9408426097c", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" } ] }, { "@id": "_:Ncc530b105a214cdc85643a6e7102d8f4", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the AI profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "ai" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes the type of annotation." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Abstract ancestor class for all vulnerability assessments" } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N8c46d722a4e841989a4034b572da6c5a" }, { "@id": "_:Nfd4ebe34a8da47bbb7d0143a3b279bac" }, { "@id": "_:N7ff1278b95704c58b3eca62f2148c0db" }, { "@id": "_:N4ebcc090a8f24d32b92810f8d55bd61e" }, { "@id": "_:Naac9d4c126754aa1a3ba06711bad8ef9" } ] }, { "@id": "_:N8c46d722a4e841989a4034b572da6c5a", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" } ] }, { "@id": "_:Nfd4ebe34a8da47bbb7d0143a3b279bac", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:N7ff1278b95704c58b3eca62f2148c0db", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" } ] }, { "@id": "_:N4ebcc090a8f24d32b92810f8d55bd61e", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:Naac9d4c126754aa1a3ba06711bad8ef9", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Megajoule." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "megajoule" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A value used in a CdxPropertyEntry name-value pair." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "foundBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A License participating in a 'with addition' model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasPrerequisite" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "file" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides an exploit assessment of a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N3463cdcb292e4ac4be3f95577b10f803" }, { "@id": "_:Ncb82769c5a6841e3869a038f7f49a8c2" }, { "@id": "_:N526dc7f813e244709bdb33c552b77b9e" } ] }, { "@id": "_:N3463cdcb292e4ac4be3f95577b10f803", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" } ] }, { "@id": "_:Ncb82769c5a6841e3869a038f7f49a8c2", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" } ] }, { "@id": "_:N526dc7f813e244709bdb33c552b77b9e", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a social media channel for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "socialMedia" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the Software profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "software" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "When a CVSS score is between 4.0 - 6.9" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "medium" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "cwe" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies a data package and its associated information." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N77640883ca174eae8c3919276f8c2d7a" }, { "@id": "_:Ne79cb42d44ae45f499e5327c14517d17" }, { "@id": "_:N51a251dc2a104e0d836a9a69bbda4be1" }, { "@id": "_:N68343c21771b4c4280540e38680bc223" }, { "@id": "_:N83fdba34a1c7443fa481cedbed5b3757" }, { "@id": "_:N3e1ff3fbca4b4f4bb02363c84c775e7d" }, { "@id": "_:N4e1d72fe2de84c119a23ade0a95d04fe" }, { "@id": "_:N231ae9f1d9764c4eb1a77e8e31558d67" }, { "@id": "_:N539faec1e337450099d8068fb3d1bce1" }, { "@id": "_:N909bfde0022c4e45828774f7bddc2e04" }, { "@id": "_:N074cf682c01e4f639ade4cb1893588c4" }, { "@id": "_:N588382b9083447b288a0568007b6c503" }, { "@id": "_:Nba978b26fa634d70971f2698e784ac2d" } ] }, { "@id": "_:N77640883ca174eae8c3919276f8c2d7a", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" } ] }, { "@id": "_:Ne79cb42d44ae45f499e5327c14517d17", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" } ] }, { "@id": "_:N51a251dc2a104e0d836a9a69bbda4be1", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" } ] }, { "@id": "_:N68343c21771b4c4280540e38680bc223", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" } ] }, { "@id": "_:N83fdba34a1c7443fa481cedbed5b3757", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" } ] }, { "@id": "_:N3e1ff3fbca4b4f4bb02363c84c775e7d", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" } ] }, { "@id": "_:N4e1d72fe2de84c119a23ade0a95d04fe", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" } ] }, { "@id": "_:N231ae9f1d9764c4eb1a77e8e31558d67", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" } ] } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" } ] }, { "@id": "_:N539faec1e337450099d8068fb3d1bce1", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" } ] }, { "@id": "_:N909bfde0022c4e45828774f7bddc2e04", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" } ] }, { "@id": "_:N074cf682c01e4f639ade4cb1893588c4", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" } ] }, { "@id": "_:N588382b9083447b288a0568007b6c503", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" } ] }, { "@id": "_:Nba978b26fa634d70971f2698e784ac2d", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A name used in a CdxPropertyEntry name-value pair." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasMetadata" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A relationship has specific context implications during an element's design." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "design" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Property describing the start time of a build." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a privacy assessment for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "privacyAssessment" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data is stored in tabular format or retrieved from a relational database." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "structured" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Used when there is a security related identifier of unspecified type." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "securityOther" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Refers to any object that stores content on a computer." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N9597150cda2c48d0a9db78e83e9878f0" }, { "@id": "_:N6bfab227a3c94f7791588048f26954fe" } ] }, { "@id": "_:N9597150cda2c48d0a9db78e83e9878f0", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^[^\\/]+\\/[^\\/]+$" } ] }, { "@id": "_:N6bfab227a3c94f7791588048f26954fe", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "vulnerabilityExploitabilityAssessment" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a software application" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "application" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ] }, { "@id": "http://spdx.invalid./AbstractClass", "@type": [ "http://www.w3.org/2002/07/owl#Class" ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A substitute for a URI." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a module of a piece of software" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "module" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a purchase order for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "purchaseOrder" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides the location for more information regarding an external identifier." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the time an artifact was built." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A collection of Elements, not necessarily with unifying context." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N1f75725af27e4db6979adef44b28c572" }, { "@id": "_:N7258e42a69b24db2b0cc6810498788c9" }, { "@id": "_:Nfaef825485cb4779b2e77b61893061e2" } ] }, { "@id": "_:N1f75725af27e4db6979adef44b28c572", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" } ] }, { "@id": "_:N7258e42a69b24db2b0cc6810498788c9", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" } ] }, { "@id": "_:Nfaef825485cb4779b2e77b61893061e2", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" } ] } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/Element" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/2002/07/owl#sameAs": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "packagedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "securityPolicy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides relevant information about the AI software, not including the model\ndescription." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Conveys information about how VEX status was determined." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "packageUrl" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the type of the content identifier." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "When a CVSS score is between 7.0 - 8.9" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "high" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "limitedSupport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a version control system related to a software artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "vcs" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element is amended by each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "amendedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A License participating in an 'or later' model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is an operating system" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "operatingSystem" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "inlineMitigationsAlreadyExist" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "any hashing algorithm that does not exist in this list of entries" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A string in the license expression format." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "fixedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "md6" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Indicates presence of the field." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "yes" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a Software Composition Analysis (SCA) report." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "componentAnalysisReport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Other exploit catalogs" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "swhid" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A collection of Elements that have a shared context." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N186133fa83f044aa9541f001f4768932" } ] }, { "@id": "_:N186133fa83f044aa9541f001f4768932", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies the full text of a LicenseAddition." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Dataset can be shared within a community of peers and partners." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "green" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides the location of an exploit catalog." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "categorical" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasAssociatedVulnerability" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A distinct article or unit within the digital domain." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N49d3b0657dac4b85b52fb194fe80b959" }, { "@id": "_:N2110a44fa4d94dca80b2c59122c8f59f" }, { "@id": "_:N893d30f4dada40c18b975b36138b3560" }, { "@id": "_:N33fee7629d7c4ac6b9597865c87a9cf9" }, { "@id": "_:N601e0064d13e4fc782cf8ce6734f5fc9" }, { "@id": "_:N9f17a77eaf5844bb91b314e0b04291cf" }, { "@id": "_:N90717ae4ab9143fabc8e9f7b776361ff" } ] }, { "@id": "_:N49d3b0657dac4b85b52fb194fe80b959", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" } ] }, { "@id": "_:N2110a44fa4d94dca80b2c59122c8f59f", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" } ] }, { "@id": "_:N893d30f4dada40c18b975b36138b3560", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:N33fee7629d7c4ac6b9597865c87a9cf9", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:N601e0064d13e4fc782cf8ce6734f5fc9", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:N9f17a77eaf5844bb91b314e0b04291cf", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" } ] }, { "@id": "_:N90717ae4ab9143fabc8e9f7b776361ff", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" } ] } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the value of the content identifier." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a map of a property names to a values." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A key with an associated value." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N5a1c2eb5e3414221beff938b844469a6" }, { "@id": "_:Na3db4279da83416ba0b62aac2327e2cc" } ] }, { "@id": "_:N5a1c2eb5e3414221beff938b844469a6", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" } ] }, { "@id": "_:Na3db4279da83416ba0b62aac2327e2cc", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the type of an annotation." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a plan, guideline or strategy how to create, perform or analyse an application" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "specification" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "eolNotice" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "support" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element contains each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "contains" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Enumeration of the different kinds of SPDX file." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Records the biases that the dataset is known to encompass." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Kilowatt-hour." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "kilowattHour" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a CVSS version 3 assessment for a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Ncd5f46e8610744ddb5a8f8edb076a9a7" }, { "@id": "_:Na92382519c9d4d03986778d7f305ce97" }, { "@id": "_:N6ffade5a70d24cbd8957c961bc85556b" } ] }, { "@id": "_:Ncd5f46e8610744ddb5a8f8edb076a9a7", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" } ] }, { "@id": "_:Na92382519c9d4d03986778d7f305ce97", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" } ] }, { "@id": "_:N6ffade5a70d24cbd8957c961bc85556b", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Property describes the invocation entrypoint of a build." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to binary artifacts related to a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "binaryArtifact" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" } ], "http://www.w3.org/2002/07/owl#sameAs": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the time when a vulnerability was published." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies an Extension characterization of some aspect of an Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasAddedFile" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The relationship is known to be exhaustive." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "complete" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the Core profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "core" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Information about the relationship between two Elements." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies the full text of a License, in SPDX templating format." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasVariant" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A key used in a generic key-value pair." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A license that is not listed on the SPDX License List." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "vulnerableCodeCannotBeControlledByAdversary" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Defines the original host file that the snippet information applies to." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An entity that is authorized to issue identification credentials." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "invokedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An SPDX Element containing an SPDX license expression string." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Ndcb7d9ed5dde4f968eb1c59df39ac41e" }, { "@id": "_:N5e0eea11ba85426494505a8a8f967bca" }, { "@id": "_:Nee8099913ff34d93a2fe9ba4ed56561e" } ] }, { "@id": "_:Ndcb7d9ed5dde4f968eb1c59df39ac41e", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" } ] }, { "@id": "_:N5e0eea11ba85426494505a8a8f967bca", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" } ] }, { "@id": "_:Nee8099913ff34d93a2fe9ba4ed56561e", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes potentially noisy elements of the dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element is available from the additional supplier described by each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "availableFrom" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "red" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to the release notes for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "releaseNotes" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes the type of the given dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Used to store extra information about an Element which is not part of a Review (e.g. extra information provided during the creation of the Element)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to the issue tracker for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "issueTracker" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A LicenseAddition participating in a 'with addition' model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N5c70f6cd1aba4d13af9be8f149a3ea8f" }, { "@id": "_:Na01a317c2c99455a86ae85b915b40e75" } ] }, { "@id": "_:N5c70f6cd1aba4d13af9be8f149a3ea8f", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" } ] }, { "@id": "_:Na01a317c2c99455a86ae85b915b40e75", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Categories of confidentiality level." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://www.rfc-editor.org/info/rfc1321)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "md5" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the Extension profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "extension" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Element is data" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "data" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies the full text of a License or Addition." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasDependencyManifest" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Commentary on an assertion that an annotator has made." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Information about the relationship between two Elements." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "timeseries" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "delegatedTo" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "References an Element on the right-hand side of a relationship." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "query" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasInput" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes a relationship between one or more elements." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N1ba4f45bd7d14c5c882ea2bee07f134e" }, { "@id": "_:N55c367dc5c244080bafe7d341084d612" }, { "@id": "_:N155fe384db3642e8b57f166491e95072" }, { "@id": "_:N1ea87fb7175549c9bde79f04e48e4cf5" }, { "@id": "_:Nd4c57a103c3f4dc99c588675494f8381" }, { "@id": "_:Nfa0300656b7344bfa733d63230dd6e2e" } ] }, { "@id": "_:N1ba4f45bd7d14c5c882ea2bee07f134e", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" } ] }, { "@id": "_:N55c367dc5c244080bafe7d341084d612", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" } ] }, { "@id": "_:N155fe384db3642e8b57f166491e95072", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" } ] }, { "@id": "_:N1ea87fb7175549c9bde79f04e48e4cf5", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" } ] }, { "@id": "_:Nd4c57a103c3f4dc99c588675494f8381", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:Nfa0300656b7344bfa733d63230dd6e2e", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "cve" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sha3_512" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Contains a URL where the License or LicenseAddition can be found in use." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element has been trained on the `to` Element(s)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "trainedOn" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasStaticLink" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Low/no risk is posed by an AI system." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "low" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element refers to a chipset, processor, or electronic board" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "device" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to the documentation for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "documentation" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Element is an Artifact that can be run on a computer" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "executable" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "scrapingScript" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to the instant messaging system used by the maintainer for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "chat" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Abstract class representing a license combination consisting of one or more licenses." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes if a given file is a directory or non-directory kind of file." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes methods that can be used to explain the results from the AI model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the Security profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "security" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Enumeration of dataset types." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasRequirement" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasDynamicLink" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Any other units of energy measurement." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a container image which can be used by a container runtime application" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "container" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Used when the type does not match any of the other options." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "graph" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The file represents a single file (default)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "file" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a software framework" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "framework" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a risk assessment for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "riskAssessment" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the unit in which energy is measured." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "securityPenTestReport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the Build profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "build" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://www.rfc-editor.org/info/rfc1950) Section 2.3." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "adler32" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the dataset is publicly available and can be downloaded directly." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "directDownload" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "attend" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Records the results of general safety risk assessment of the AI system." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to additional product metadata such as reference within organization's product catalog." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "productMetadata" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasHost" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "act" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Defines the line range in the original host file that the snippet information\napplies to." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes a mechanism to update the dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "securityAdvisory" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A license or addition that is not listed on the SPDX License List." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N702ae240a2d0485ca5c5a71a4afafbc1" } ] }, { "@id": "_:N702ae240a2d0485ca5c5a71a4afafbc1", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to metrics related to package such as OpenSSF scorecards." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "metrics" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a file system image that can be written to a disk (or virtual) partition" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "filesystemImage" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "video" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The percentile of the current probability score." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A license exception that is listed on the SPDX Exceptions list." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N34a4cd7a149d4f2fb8fce6ff226d2f14" }, { "@id": "_:N1c64697fc66c43cab225274b47b1cd42" } ] }, { "@id": "_:N34a4cd7a149d4f2fb8fce6ff226d2f14", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" } ] }, { "@id": "_:N1c64697fc66c43cab225274b47b1cd42", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data is audio based, such as a collection of music from the 80s." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "audio" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "reportedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the algorithm used for calculating the hash value." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "coordinatedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "usesTool" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/Element" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/2002/07/owl#sameAs": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The version of the SPDX License List used in the license expression." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to an artifact containing the sources for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sourceArtifact" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data is a collection of images such as pictures of animals." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "image" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to the patch or source code that fixes a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "securityFix" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the expanded Licensing profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "expandedLicensing" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies when the Element was originally created." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N6677ad876b3b419b9d7930371726856c" }, { "@id": "_:N5a8cd2f080354b72aea7b0fd71e9c316" }, { "@id": "_:N57c7a48c1e3d45e3a2c912a7fb8f7092" }, { "@id": "_:Nae7da22aa2524fb790851df9c214e82c" } ] }, { "@id": "_:N6677ad876b3b419b9d7930371726856c", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" } ] }, { "@id": "_:N5a8cd2f080354b72aea7b0fd71e9c316", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" } ] }, { "@id": "_:N57c7a48c1e3d45e3a2c912a7fb8f7092", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^[^\\/]+\\/[^\\/]+$" } ] }, { "@id": "_:Nae7da22aa2524fb790851df9c214e82c", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" } ], "http://www.w3.org/2002/07/owl#sameAs": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element generates each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "generates" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sha3_384" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides the location of an external reference." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A mathematically calculated representation of a grouping of data." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N00d2fdad16c84233ac0a13741290c456" }, { "@id": "_:N923b72ff07bd4cb3b05431450a8c71ba" } ] }, { "@id": "_:N00d2fdad16c84233ac0a13741290c456", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" } ] }, { "@id": "_:N923b72ff07bd4cb3b05431450a8c71ba", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides information about the primary purpose of the software artifact." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the type of the external identifier." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to an alternative web page." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "altWebPage" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/", "@type": [ "http://www.w3.org/2002/07/owl#Ontology" ], "http://purl.org/dc/terms/abstract": [ { "@language": "en", "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" } ], "http://purl.org/dc/terms/created": [ { "@type": "http://www.w3.org/2001/XMLSchema#date", "@value": "2024-04-05" } ], "http://purl.org/dc/terms/creator": [ { "@language": "en", "@value": "SPDX Project" } ], "http://purl.org/dc/terms/license": [ { "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" } ], "http://purl.org/dc/terms/references": [ { "@id": "https://spdx.dev/specifications/" } ], "http://purl.org/dc/terms/title": [ { "@language": "en", "@value": "System Package Data Exchange (SPDX) Ontology" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@language": "en", "@value": "System Package Data Exchange (SPDX) Ontology" } ], "http://www.w3.org/2002/07/owl#versionIRI": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/" } ], "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ { "@language": "en", "@value": "Copyright (C) 2024 SPDX Project" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes if any sensitive personal information is present in the dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "References the Element on the left-hand side of a relationship." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sha384" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasOptionalDependency" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies an AI package and its associated information." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N1cce2a2d306e4d6f9334aeff9e16329f" }, { "@id": "_:Nabcf7d357bde445b94462ca51ac032ee" }, { "@id": "_:N344345e704f747e1b8e6249e70d9d62d" }, { "@id": "_:N6899162ea9fb41a9982edd42eb6dab85" }, { "@id": "_:N7bb973af166a4080986bdd7dd5a6d460" }, { "@id": "_:N08d1d2409c4e4efda335b1b85294ee84" }, { "@id": "_:N464e2869986948329b65f3a575b14f56" }, { "@id": "_:N5d3116612037495cb8fa77053b7457b3" }, { "@id": "_:N6cac16ae8dde4da1b28fda8dcf750be7" }, { "@id": "_:Nbf0213608ec94534b61cc0d4506714b6" }, { "@id": "_:Ncf7d920155674b1db1e899bc06355f00" }, { "@id": "_:N36f361427d6e4a7896c711bebe0021ac" }, { "@id": "_:N58b1ff5cf40445538ff384c9c022eb63" }, { "@id": "_:N96fa72a4a9284de9b93fb7d65f5b09b8" }, { "@id": "_:N9118d99e34f14f1a9a18e6118a3aa15d" } ] }, { "@id": "_:N1cce2a2d306e4d6f9334aeff9e16329f", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" } ] }, { "@id": "_:Nabcf7d357bde445b94462ca51ac032ee", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" } ] }, { "@id": "_:N344345e704f747e1b8e6249e70d9d62d", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" } ] }, { "@id": "_:N6899162ea9fb41a9982edd42eb6dab85", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" } ] }, { "@id": "_:N7bb973af166a4080986bdd7dd5a6d460", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" } ] }, { "@id": "_:N08d1d2409c4e4efda335b1b85294ee84", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" } ] }, { "@id": "_:N464e2869986948329b65f3a575b14f56", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" } ] }, { "@id": "_:N5d3116612037495cb8fa77053b7457b3", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" } ] }, { "@id": "_:N6cac16ae8dde4da1b28fda8dcf750be7", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" } ] }, { "@id": "_:Nbf0213608ec94534b61cc0d4506714b6", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" } ] }, { "@id": "_:Ncf7d920155674b1db1e899bc06355f00", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" } ] }, { "@id": "_:N36f361427d6e4a7896c711bebe0021ac", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" } ] }, { "@id": "_:N58b1ff5cf40445538ff384c9c022eb63", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" } ] }, { "@id": "_:N96fa72a4a9284de9b93fb7d65f5b09b8", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" } ] }, { "@id": "_:N9118d99e34f14f1a9a18e6118a3aa15d", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a static analysis report for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "staticAnalysisReport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the type of an external identifier." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The relationship is known not to be exhaustive." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "incomplete" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "nuget" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "republishedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A tuple of two positive integers that define a range." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N4c9301489495413d92c59c95af50c668" }, { "@id": "_:N8b103d1f31704abd9e071b837666cbe2" } ] }, { "@id": "_:N4c9301489495413d92c59c95af50c668", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" } ] }, { "@id": "_:N8b103d1f31704abd9e071b837666cbe2", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasDataFile" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Used when the type does not match any of the other options." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Indicates the type of support that is associated with an artifact." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Captures the domain in which the AI package can be used." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasDistributionArtifact" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A canonical, unique, immutable identifier" } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Na31ad52cc08649a381870a67e07a3e6a" }, { "@id": "_:Nd80532750ae74c39840fbe77d8b97144" } ] }, { "@id": "_:Na31ad52cc08649a381870a67e07a3e6a", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" } ] }, { "@id": "_:Nd80532750ae74c39840fbe77d8b97144", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provide consumers with comments by the creator of the Element about the\nElement." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sha3_256" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies the tooling that was used during the creation of the Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element is a descendant of each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "descendantOf" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides an EPSS assessment for a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N8704a57293414114b4744b280fa79cc0" }, { "@id": "_:N782057a6a13a4222a17dee1a80311f4e" } ] }, { "@id": "_:N8704a57293414114b4744b280fa79cc0", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" } ] }, { "@id": "_:N782057a6a13a4222a17dee1a80311f4e", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides an ExternalMap of Element identifiers." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes the confidentiality level of the data points contained in the dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the level of support associated with an artifact." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An SPDX version 2.X compatible verification method for software packages." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N970fbf84076c42dc8efb17972b84f5b5" }, { "@id": "_:N3a071790635c467796e9f6dd7997eb80" }, { "@id": "_:N6f34bea611784c6c898370a140d80261" } ] }, { "@id": "_:N970fbf84076c42dc8efb17972b84f5b5", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" } ] }, { "@id": "_:N3a071790635c467796e9f6dd7997eb80", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" } ] }, { "@id": "_:N6f34bea611784c6c898370a140d80261", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "affects" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A license addition that is not listed on the SPDX Exceptions List." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A collection of SPDX Elements that could potentially be serialized." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N17e01b67f2db4ce599039afcc7ef0db3" }, { "@id": "_:N9770a504be3c4ad5887c2ce418dd06b1" }, { "@id": "_:N3af8e5ffbbf74cf39745b19326754b4b" } ] }, { "@id": "_:N17e01b67f2db4ce599039afcc7ef0db3", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" } ] }, { "@id": "_:N9770a504be3c4ad5887c2ce418dd06b1", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" } ] }, { "@id": "_:N3af8e5ffbbf74cf39745b19326754b4b", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "cpe22" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Dataset may be distributed freely, without restriction." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "clear" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` archive expands out as an artifact described by each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "expandsTo" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the version of a VEX statement." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Uniquely identifies an external element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sha3_224" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "npm" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a detailed description of the Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The file represents a directory and all content stored in that directory." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "directory" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides information about the type of an SBOM." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a single or a collection of source files" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "source" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasTest" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the Dataset profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "dataset" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "trackStar" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasProvidedDependency" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "urlScheme" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An element of hardware and/or software utilized to carry out a particular function." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides additional purpose information of the software artifact." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Nc4c887d7d10047efa26d8b897afd64d5" }, { "@id": "_:N5f0cd4fd4a8945649af55029089f7056" }, { "@id": "_:Nfd43a30d44b747e084d628130ff3110f" }, { "@id": "_:Nd1d1116d56c341cead6e5484c894a889" }, { "@id": "_:N2dd8aa1f2572406684dc10af2e4e6432" }, { "@id": "_:Ndb4e9c144f2942e59f5bb1abcf9a350a" } ] }, { "@id": "_:Nc4c887d7d10047efa26d8b897afd64d5", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" } ] }, { "@id": "_:N5f0cd4fd4a8945649af55029089f7056", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" } ] }, { "@id": "_:Nfd43a30d44b747e084d628130ff3110f", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" } ] }, { "@id": "_:Nd1d1116d56c341cead6e5484c894a889", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" } ] }, { "@id": "_:N2dd8aa1f2572406684dc10af2e4e6432", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" } ] }, { "@id": "_:Ndb4e9c144f2942e59f5bb1abcf9a350a", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "diskImage" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a published list of releases for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "releaseHistory" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An Element an annotator has made an assertion about." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Indicates absence of the field." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "no" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Defines the byte range in the original host file that the snippet information\napplies to." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A value used in a generic key-value pair." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "bower" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A property name with an associated value." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N0f4519ba9334496392cd6afd6e05e46e" }, { "@id": "_:N7cec834be8fa43d3af4aad16bae9c4c0" } ] }, { "@id": "_:N0f4519ba9334496392cd6afd6e05e46e", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" } ] }, { "@id": "_:N7cec834be8fa43d3af4aad16bae9c4c0", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to additional license information related to an artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "license" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the time from which an element is applicable / valid." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes what the given dataset should be used for." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Indicates the amount of energy consumption incurred by an AI model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is an archived collection of one or more files (.tar, .zip, etc)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "archive" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Na9c49520cbd442dc94f481f0cdce621c" }, { "@id": "_:N550cccf4abce417fb3fca3f58590ee43" }, { "@id": "_:N11e77e3fa190450fbf2fc762ae5371b0" }, { "@id": "_:N9bc049f482db4a909e6cd5b1a973b8a8" }, { "@id": "_:N7ff55482ade94284aa3c31f28cf5275e" } ] }, { "@id": "_:Na9c49520cbd442dc94f481f0cdce621c", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" } ] }, { "@id": "_:N550cccf4abce417fb3fca3f58590ee43", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" } ] }, { "@id": "_:N11e77e3fa190450fbf2fc762ae5371b0", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" } ] }, { "@id": "_:N9bc049f482db4a909e6cd5b1a973b8a8", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" } ] }, { "@id": "_:N7ff55482ade94284aa3c31f28cf5275e", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A license expression participating in a license set." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "source" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "timestamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data consists only of numeric entries." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "numeric" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the time from which an element is no longer applicable / valid." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "deployed" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "No assertion can be made about the completeness of the relationship." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "noAssertion" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element provides low level control over a device's hardware" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "firmware" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes a sensor used for collecting the data." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "dependsOn" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Nfe39cb41d873462db50ac2c71377013e" } ] }, { "@id": "_:Nfe39cb41d873462db50ac2c71377013e", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 2 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a dynamic analysis report for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "dynamicAnalysisReport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasAssessmentFor" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Availability of dataset." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to related security information of unspecified type." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "securityOther" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "falcon" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "deployed" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "blake2b256" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://www.rfc-editor.org/info/rfc3174)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sha1" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the safety risk level." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provide context for a relationship that occurs in the lifecycle." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N2bf1143ada7041e1ae05abadfc23fa5f" } ] }, { "@id": "_:N2bf1143ada7041e1ae05abadfc23fa5f", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "kev" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The second-highest level of risk posed by an AI system." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "high" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "noAssertion" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://www.rfc-editor.org/info/rfc1319/)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "md2" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "analyzed" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sensor" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference build system used to create or publish the package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "buildSystem" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Makes no assertion about the field." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "noAssertion" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasDeclaredLicense" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[Kyber](https://pq-crystals.org/kyber/)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "crystalsKyber" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "vulnerableCodeNotInExecutePath" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides information about the content type of an Element or a Property." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "patchedBy" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "track" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "serializedInArtifact" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "mavenCentral" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Enumeration of the valid profiles." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "blake2b512" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Agent represents anything with the potential to act on a system." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "blake3" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identify the version of a package." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "development" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Property that describes the time at which a build stops." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N64a261bae6724be390d32271f909fbea" }, { "@id": "_:N0762fa30ed3c49fd80b050bdfd26f59d" }, { "@id": "_:N15608a7efcc14e2083710781fa61440a" }, { "@id": "_:N3dc517343aac486f966af6d0fd12e453" }, { "@id": "_:N543a6aa724564ab0b1861fe68d327fca" }, { "@id": "_:N7d4e47595371403db9e29d83cd7f7600" }, { "@id": "_:N4a6b791345404d7281fd358c15f7c986" }, { "@id": "_:Naef78d6c5ae0422fa1dbac2b68576ca4" }, { "@id": "_:N16c92c2714e7499da0e236da03989cbc" } ] }, { "@id": "_:N64a261bae6724be390d32271f909fbea", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" } ] }, { "@id": "_:N0762fa30ed3c49fd80b050bdfd26f59d", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" } ] }, { "@id": "_:N15608a7efcc14e2083710781fa61440a", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" } ] }, { "@id": "_:N3dc517343aac486f966af6d0fd12e453", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" } ] }, { "@id": "_:N543a6aa724564ab0b1861fe68d327fca", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" } ] }, { "@id": "_:N7d4e47595371403db9e29d83cd7f7600", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" } ] }, { "@id": "_:N4a6b791345404d7281fd358c15f7c986", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" } ] }, { "@id": "_:Naef78d6c5ae0422fa1dbac2b68576ca4", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" } ] }, { "@id": "_:N16c92c2714e7499da0e236da03989cbc", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://www.rfc-editor.org/info/rfc9393) Section 2.3." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "swid" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "When a CVSS score is 0.0" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "none" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N60ef06a5119e4c5cabff7771f141ddfc" }, { "@id": "_:Ndb91a68229944f76accee62e5a7b0b02" } ] }, { "@id": "_:N60ef06a5119e4c5cabff7771f141ddfc", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" } ] }, { "@id": "_:Ndb91a68229944f76accee62e5a7b0b02", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element is documented by each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasDocumentation" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "gitoid" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N81d546a5aa7f4cefa5e21faf462548a6" }, { "@id": "_:Na1dda9f6831b4929a3cb7a3f6075558d" } ] }, { "@id": "_:N81d546a5aa7f4cefa5e21faf462548a6", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" } ] }, { "@id": "_:Na1dda9f6831b4929a3cb7a3f6075558d", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A distinct article or unit related to Software." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N742db440c95641f3b92661bb08d1da8d" }, { "@id": "_:N1e8f466adfa345509c5ee2ee43f6b01d" }, { "@id": "_:N269272c7466a464f95cba2c27f89d672" }, { "@id": "_:N1e9e9ddbfc7e4f02b03c94e1e58b153a" }, { "@id": "_:Nfed328624cf3468492ef7504a15ba679" } ] }, { "@id": "_:N742db440c95641f3b92661bb08d1da8d", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" } ] }, { "@id": "_:N1e8f466adfa345509c5ee2ee43f6b01d", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" } ] } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" } ] }, { "@id": "_:N269272c7466a464f95cba2c27f89d672", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" } ] }, { "@id": "_:N1e9e9ddbfc7e4f02b03c94e1e58b153a", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" } ] }, { "@id": "_:Nfed328624cf3468492ef7504a15ba679", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "clickthrough" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Refers to one or more Elements that are part of an ElementCollection." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data is of a type not included in this list." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Property that describes the URI of the build configuration source file." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Capture the scope of information about a specific relationship between elements." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the element follows the simple Licensing profile specification" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "simpleLicensing" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "underInvestigationFor" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies a time when a vulnerability assessment was modified" } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "secureSoftwareAttestation" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a export control assessment for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "exportControlAssessment" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a runtime analysis report for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "runtimeAnalysisReport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "An individual human being." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "vulnerabilityDisclosureReport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "runtime" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to an alternative download location." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "altDownloadLocation" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The Element is a test used to verify functionality on an software element" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "test" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to the security adversary model for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "securityAdversaryModel" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides information about the creation of the Element." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N05d13f0f85b04a98948d72785f0a17cf" }, { "@id": "_:N57744030d2fe48299423a0cb3f70a127" }, { "@id": "_:N343f313c5fc34c74ab4f8e6f686ef920" }, { "@id": "_:N2827ce9f4fd445419f1325e520504acd" }, { "@id": "_:N73a38a4170d946aeb85b4e2796eba4c1" } ] }, { "@id": "_:N05d13f0f85b04a98948d72785f0a17cf", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" } ] }, { "@id": "_:N57744030d2fe48299423a0cb3f70a127", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { "@id": "_:N343f313c5fc34c74ab4f8e6f686ef920", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:N2827ce9f4fd445419f1325e520504acd", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" } ] }, { "@id": "_:N73a38a4170d946aeb85b4e2796eba4c1", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A group of people who work together in an organized way for a shared purpose." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "design" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N84235fc47d8249b28e3723a1c62cae6b" }, { "@id": "_:Nd25a042355624ad78e379437f0eac446" } ] }, { "@id": "_:N84235fc47d8249b28e3723a1c62cae6b", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" } ] }, { "@id": "_:Nd25a042355624ad78e379437f0eac446", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N63adf6e501184ccaad5b362772fd2c6c" }, { "@id": "_:N6ff5584fdaf843f89e3156c9099f08c4" }, { "@id": "_:N8433594ef787465a8c0d5d080f94e1a5" }, { "@id": "_:N30a08fc4961d4ac699e2828be0b4f821" }, { "@id": "_:N59f67b69fab843f5ae5b556c18c95bd7" } ] }, { "@id": "_:N63adf6e501184ccaad5b362772fd2c6c", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" } ] }, { "@id": "_:N6ff5584fdaf843f89e3156c9099f08c4", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" } ] }, { "@id": "_:N8433594ef787465a8c0d5d080f94e1a5", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { "@id": "_:N30a08fc4961d4ac699e2828be0b4f821", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" } ] }, { "@id": "_:N59f67b69fab843f5ae5b556c18c95bd7", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the CVSS vector string for a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Element is a bill of materials" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "bom" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "amber" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasOutput" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "gitoid" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Element represents software that controls hardware devices" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "deviceDriver" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the unit of energy consumption." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is a software library" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "library" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N961d670c5cdf473a93e849894f5ff2ae" } ] }, { "@id": "_:N961d670c5cdf473a93e849894f5ff2ae", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specified the time and date when a vulnerability was withdrawn." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the type of the external reference." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element is used to install software on disk" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "install" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A type of extension consisting of a list of name value pairs." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N936d0f19ca664a02854170d099fc526a" } ] }, { "@id": "_:N936d0f19ca664a02854170d099fc526a", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "cpe23" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Records any relevant background information or additional comments\nabout the origin of the package." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Email address, as defined in [RFC 3696](https://www.rfc-editor.org/info/rfc3986) Section 3." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "email" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A relationship has specific context implications during an element's testing phase, during development." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "test" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the type of a content identifier." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://www.rfc-editor.org/info/rfc3874)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sha224" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "When a CVSS score is between 9.0 - 10.0" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "critical" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Ne2f194e7d7794bd08eae9578776b376a" }, { "@id": "_:N7a2a41caa6244c67a1c9320b319b141f" }, { "@id": "_:N8b47acbda8684f20b084a2e166490357" }, { "@id": "_:N05d2fec10e534a448cbf8d342995e4d2" }, { "@id": "_:N3828c9ed602948d9a77a3749fbb26413" }, { "@id": "_:N298773fbdb31411f8219c63cea939b8a" }, { "@id": "_:N5279e58cde8040979e968772f90b11d0" }, { "@id": "_:Nb8a2971568cc422883317f7d05bd8574" }, { "@id": "_:N220946a570ab47b7b3f240b140212581" } ] }, { "@id": "_:Ne2f194e7d7794bd08eae9578776b376a", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" } ] }, { "@id": "_:N7a2a41caa6244c67a1c9320b319b141f", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" } ] }, { "@id": "_:N8b47acbda8684f20b084a2e166490357", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" } ] }, { "@id": "_:N05d2fec10e534a448cbf8d342995e4d2", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { "@id": "_:N3828c9ed602948d9a77a3749fbb26413", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" } ] }, { "@id": "_:N298773fbdb31411f8219c63cea939b8a", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" } ] }, { "@id": "_:N5279e58cde8040979e968772f90b11d0", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" } ] }, { "@id": "_:Nb8a2971568cc422883317f7d05bd8574", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" } ] }, { "@id": "_:N220946a570ab47b7b3f240b140212581", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The third-highest level of risk posed by an AI system." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "medium" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the Element provides a requirement needed as input for another Element" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "requirement" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The highest level of risk posed by an AI system." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "serious" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The result of applying a hash algorithm to an Element." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N6b8e645f966a40e18030318e1e8b9dad" } ] }, { "@id": "_:N6b8e645f966a40e18030318e1e8b9dad", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 2 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference build metadata related to a published package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "buildMeta" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Captures a standard that is being complied with." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Describes relevant information about different steps of the training process." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasTestCase" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to a quality assessment for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "qualityAssessmentReport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "other" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "vulnerableCodeNotPresent" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "noSupport" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Captures a limitation of the AI software." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides an SSVC assessment for a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Nc84b042aa2e44f19a7af2d41b801ac56" } ] }, { "@id": "_:Nc84b042aa2e44f19a7af2d41b801ac56", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Ndb0a06a70e574aae99ab9fc421fc5f07" } ] }, { "@id": "_:Ndb0a06a70e574aae99ab9fc421fc5f07", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element has been copied to each `to` Element." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "copiedTo" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#boolean" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "configures" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://www.rfc-editor.org/info/rfc7693) Section 4." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "blake2b384" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The software is not affected because the vulnerable component is not in the product." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "componentNotPresent" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the VEX justification type." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Defines the beginning of a range." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides a CVSS version 4 assessment for a vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N27dadd90e08b47288ef0150f6410b8cc" }, { "@id": "_:Nc941c5591d014a0793960a1def20d7ef" }, { "@id": "_:Ncf3ab721a1e447c2b90943369e538a9b" } ] }, { "@id": "_:N27dadd90e08b47288ef0150f6410b8cc", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" } ] }, { "@id": "_:Nc941c5591d014a0793960a1def20d7ef", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" } ] }, { "@id": "_:Ncf3ab721a1e447c2b90943369e538a9b", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://spdx.invalid./AbstractClass", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Asbtract ancestor class for all VEX relationships" } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N805d03a321c142f48d2b39e101d9e09f" }, { "@id": "_:N898c8c95ef9847979ad868fa211a7e53" } ] }, { "@id": "_:N805d03a321c142f48d2b39e101d9e09f", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" } ] }, { "@id": "_:N898c8c95ef9847979ad868fa211a7e53", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasConcludedLicense" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Element represents a runtime environment" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "platform" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "build" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A software agent." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasExample" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "@type": [ "http://www.w3.org/2002/07/owl#Class" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the type of an external reference." } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to the mailing list used by the maintainer for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "mailingList" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "syntactic" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A reference to the software support channel or other support information for a package." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "support" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://www.rfc-editor.org/info/rfc6234)." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "sha256" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "text" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "registration" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N7d2730be7fce4bbbbb5ec94afba8bde3" }, { "@id": "_:N758918091c28419cbe2a7594d0e5ac7e" }, { "@id": "_:N53f1cd8cb18f465da329b3a9cd5f2b7f" } ] }, { "@id": "_:N7d2730be7fce4bbbbb5ec94afba8bde3", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" } ] }, { "@id": "_:N758918091c28419cbe2a7594d0e5ac7e", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" } ] }, { "@id": "_:N53f1cd8cb18f465da329b3a9cd5f2b7f", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Element is documentation" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "documentation" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Records the measurement of prediction quality of the AI model." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "hasSpecification" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Specifies the exploit catalog type." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Ned51710d3a2a4464946a8943f127451d" }, { "@id": "_:N50493eca23e646e98b9eae578fab952d" }, { "@id": "_:N11f324990567462cb349825ce85c1746" } ] }, { "@id": "_:Ned51710d3a2a4464946a8943f127451d", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" } ], "http://www.w3.org/ns/shacl#in": [ { "@list": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" } ] } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" } ] }, { "@id": "_:N50493eca23e646e98b9eae578fab952d", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" } ] }, { "@id": "_:N11f324990567462cb349825ce85c1746", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "doesNotAffect" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A probability score between 0 and 1 of a vulnerability being exploited." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#decimal" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "@type": [ "http://www.w3.org/2002/07/owl#ObjectProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Identifies the name of an Element as designated by the creator." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "@type": [ "http://www.w3.org/2002/07/owl#NamedIndividual", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A relationship has specific context implications during an element's build phase, during development." } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "build" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "A map of Element identifiers that are used within a Document but defined\nexternal to that Document." } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNode" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:N12b950a385f642b7bcdd52fd745b8b2b" }, { "@id": "_:Nd53a8155543d4c9db3897f8c25d1bec3" }, { "@id": "_:Ne48bd8e177e44de6a831e555d1e5ffcb" }, { "@id": "_:N78b4d0a46ab442cd81b34595bdf3e005" } ] }, { "@id": "_:N12b950a385f642b7bcdd52fd745b8b2b", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" } ] }, { "@id": "_:Nd53a8155543d4c9db3897f8c25d1bec3", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" } ] }, { "@id": "_:Ne48bd8e177e44de6a831e555d1e5ffcb", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" } ] }, { "@id": "_:N78b4d0a46ab442cd81b34595bdf3e005", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", "@type": [ "http://www.w3.org/2002/07/owl#Class", "http://www.w3.org/ns/shacl#NodeShape" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Class that describes a build instance of software/artifacts." } ], "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#IRI" } ], "http://www.w3.org/ns/shacl#property": [ { "@id": "_:Nb224b6ca59db4274afe5a9263bb5d611" }, { "@id": "_:N245d34c559054cbda6ccc55bcfb8c48d" }, { "@id": "_:Nf019cb23b42f431198266a94178422f7" }, { "@id": "_:N24fd79d066db4b4d94788005177780ac" }, { "@id": "_:Nc124b2862e8a46259e78c807bd47d17b" }, { "@id": "_:Nfef8daeee4dd40f79f3009de539389a4" }, { "@id": "_:N225752691fad4993a0e936eea41a7562" }, { "@id": "_:N62b3b6c2ae5a44738a273e0b4c5217ce" }, { "@id": "_:N34920a832c714165b45341976a001d51" } ] }, { "@id": "_:Nb224b6ca59db4274afe5a9263bb5d611", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#minCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" } ] }, { "@id": "_:N245d34c559054cbda6ccc55bcfb8c48d", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" } ] }, { "@id": "_:Nf019cb23b42f431198266a94178422f7", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" } ] }, { "@id": "_:N24fd79d066db4b4d94788005177780ac", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#anyURI" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" } ] }, { "@id": "_:Nc124b2862e8a46259e78c807bd47d17b", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" } ] }, { "@id": "_:Nfef8daeee4dd40f79f3009de539389a4", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" } ] }, { "@id": "_:N225752691fad4993a0e936eea41a7562", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:N62b3b6c2ae5a44738a273e0b4c5217ce", "http://www.w3.org/ns/shacl#datatype": [ { "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" } ], "http://www.w3.org/ns/shacl#maxCount": [ { "@value": 1 } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#Literal" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" } ], "http://www.w3.org/ns/shacl#pattern": [ { "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" } ] }, { "@id": "_:N34920a832c714165b45341976a001d51", "http://www.w3.org/ns/shacl#class": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" } ], "http://www.w3.org/ns/shacl#nodeKind": [ { "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" } ], "http://www.w3.org/ns/shacl#path": [ { "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" } ] }, { "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "@type": [ "http://www.w3.org/2002/07/owl#DatatypeProperty" ], "http://www.w3.org/2000/01/rdf-schema#comment": [ { "@language": "en", "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." } ], "http://www.w3.org/2000/01/rdf-schema#range": [ { "@id": "http://www.w3.org/2001/XMLSchema#string" } ] } ]