| { |
| "spdxVersion": "SPDX-2.2", |
| "SPDXID": "SPDXRef-DOCUMENT", |
| "name": "some project", |
| "documentNamespace": "", |
| "creationInfo": { |
| "creators": [ |
| "unknown" |
| ] |
| }, |
| "documentDescribes": [ |
| "SPDXRef-Package-A", |
| "SPDXRef-Package-B" |
| ], |
| "packages": [ |
| { |
| "SPDXID": "SPDXRef-Package-A", |
| "name": "Pkg A", |
| "licenseConcluded": "LicenseRef-1" |
| }, |
| { |
| "SPDXID": "SPDXRef-Package-B", |
| "name": "Pkg B", |
| "licenseConcluded": "LicenseRef-2" |
| } |
| ], |
| "relationships": [ |
| { |
| "spdxElementId": "SPDXRef-Package-A", |
| "relatedSpdxElement": "SPDXRef-Package-B", |
| "relationshipType": "CONTAINS" |
| } |
| ], |
| "hasExtractedLicensingInfos": [ |
| { |
| "name": "License A", |
| "licenseId": "LicenseRef-1", |
| "extractedText": "SPDX-embedded text 1" |
| }, |
| { |
| "name": "License B", |
| "licenseId": "LicenseRef-2", |
| "extractedText": "SPDX-embedded text 2" |
| } |
| ] |
| } |