dependency-graph-spdx-sbom(Dependency Graph SPDX SBOM)

{
    "sbom": {
        "SPDXID": "SPDXRef-DOCUMENT",
        "spdxVersion": "SPDX-2.3",
        "creationInfo": {
            "created": "2021-11-03T00:00:00Z",
            "creators": [
                "GitHub"
            ]
        },
        "name": "github/github",
        "dataLicense": "CC0-1.0",
        "documentDescribes": [
            "github/github"
        ],
        "documentNamespace": "https://github.com/example/dependency_graph/sbom-123",
        "packages": [
            {
                "SPDXID": "SPDXRef-Package",
                "name": "rubygems:github/github",
                "versionInfo": "1.0.0",
                "downloadLocation": "NOASSERTION",
                "filesAnalyzed": false,
                "licenseConcluded": "MIT",
                "licenseDeclared": "NOASSERTION",
                "supplier": "NOASSERTION",
                "copyrightText": "Copyright (c) 1985 GitHub.com",
                "externalRefs": [
                    {
                        "referenceCategory": "PACKAGE-MANAGER",
                        "referenceLocator": "pkg:gem/rails@6.0.1",
                        "referenceType": "purl"
                    }
                ]
            }
        ]
    }
}