{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "$id": "http://cyclonedx.org/schema/bom-1.7.schema.json",
  "type": "object",
  "title": "CycloneDX Bill of Materials Standard",
  "description": "CycloneDX BOM schema for version 1.7",
  "required": ["bomFormat", "specVersion"],
  "properties": {
    "bomFormat": {
      "type": "string",
      "enum": ["CycloneDX"]
    },
    "specVersion": {
      "type": "string",
      "pattern": "^1\\.[0-9]+$"
    },
    "serialNumber": {
      "type": "string",
      "pattern": "^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$"
    },
    "version": {
      "type": "integer",
      "minimum": 1
    },
    "metadata": {
      "type": "object",
      "properties": {
        "timestamp": { "type": "string", "format": "date-time" },
        "tools": { "type": "array" },
        "authors": { "type": "array" },
        "component": { "type": "object" },
        "manufacture": { "type": "object" },
        "supplier": { "type": "object" },
        "licenses": { "type": "array" },
        "properties": { "type": "array" }
      }
    },
    "components": {
      "type": "array",
      "items": {
        "type": "object",
        "required": ["type", "name"],
        "properties": {
          "type": { "type": "string" },
          "mime-type": { "type": "string" },
          "bom-ref": { "type": "string" },
          "supplier": { "type": "object" },
          "author": { "type": "string" },
          "publisher": { "type": "string" },
          "group": { "type": "string" },
          "name": { "type": "string" },
          "version": { "type": "string" },
          "description": { "type": "string" },
          "scope": { "type": "string" },
          "hashes": { "type": "array" },
          "licenses": { "type": "array" },
          "copyright": { "type": "string" },
          "cpe": { "type": "string" },
          "purl": { "type": "string" },
          "swid": { "type": "object" },
          "modified": { "type": "boolean" },
          "pedigree": { "type": "object" },
          "externalReferences": { "type": "array" },
          "properties": { "type": "array" },
          "components": { "type": "array" },
          "evidence": { "type": "object" },
          "releaseNotes": { "type": "object" },
          "modelCard": { "type": "object" },
          "data": { "type": "array" },
          "cryptoProperties": { "type": "object" }
        }
      }
    },
    "services": { "type": "array" },
    "externalReferences": { "type": "array" },
    "dependencies": { "type": "array" },
    "compositions": { "type": "array" },
    "vulnerabilities": { "type": "array" },
    "annotations": { "type": "array" },
    "formulation": { "type": "array" },
    "declarations": { "type": "object" },
    "definitions": { "type": "object" },
    "properties": { "type": "array" },
    "signature": { "type": "object" }
  }
}