{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:bab41c93-7506-4d43-a9e7-44a51a43be95",
  "version": 1,
  "metadata": {
    "timestamp": "2022-06-09T23:40:38Z",
    "tools": [
      {
        "vendor": "anchore",
        "name": "grype",
        "version": "[not provided]"
      }
    ],
    "component": {
      "type": "file",
      "name": "/some/path"
    }
  },
  "components": [
    {
      "bom-ref": "package-1-id",
      "type": "library",
      "name": "package-1",
      "version": "1.0.1"
    },
    {
      "bom-ref": "package-2-id",
      "type": "library",
      "name": "package-2",
      "version": "2.0.1",
      "licenses": [
        {
          "license": {
            "name": "MIT"
          }
        },
        {
          "license": {
            "name": "Apache-v2"
          }
        }
      ]
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-1999-0001",
      "source": {
        "name": "source-1",
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0001"
      },
      "ratings": [
        {
          "severity": "low"
        },
        {
          "score": 4,
          "method": "CVSSv3",
          "vector": "another vector"
        }
      ],
      "description": "1999-01 description",
      "advisories": [],
      "analysis": {
        "state": "in_triage"
      },
      "affects": [
        {
          "ref": "package-1-id"
        }
      ],
      "properties": []
    },
    {
      "id": "CVE-1999-0002",
      "source": {
        "name": "source-2",
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0002"
      },
      "ratings": [
        {
          "severity": "critical"
        },
        {
          "score": 1,
          "method": "CVSSv2",
          "vector": "vector"
        }
      ],
      "description": "1999-02 description",
      "advisories": [],
      "analysis": {
        "state": "in_triage"
      },
      "affects": [
        {
          "ref": "package-2-id"
        }
      ],
      "properties": []
    }
  ]
}
