Optionalcallstack?: CallstackEvidence of the components use through the callstack.
Copyright evidence captures intellectual property assertions, providing evidence of possible ownership and legal protection.
Evidence that substantiates the identity of a component. The identity may be an object or an array of identity objects. Support for specifying identity as a single object was introduced in CycloneDX v1.5. Arrays were introduced in v1.6. It is recommended that all implementations use arrays, even if only one identity object is specified.
A list of SPDX licenses and/or named licenses and/or SPDX License Expression.
Evidence of individual instances of a component spread across multiple locations.
Provides the ability to document evidence collected through various forms of extraction or analysis.