{
  "@context": [
    "https://www.w3.org/2018/credentials/v1",
    "https://w3id.org/traceability/v1"
  ],
  "id": "https://github.com/spdx/spdx-examples/blob/master/example1/spdx/example1.spdx",
  "type": [
    "VerifiableCredential",
    "SoftwareBillofMaterialsCredential"
  ],
  "name": "SPDX Software Bill of Materials Credential",
  "description": "Credential Issued by Software Vendor for information on packages and binaries",
  "relatedLink": [],
  "issuanceDate": "2021-08-26T01:46:00Z",
  "issuer": {
    "id": "did:key:z6MktHQo3fRRohk44dsbE76CuiTpBmyMWq2VVjvV6aBSeE3U",
    "type": [
      "Organization"
    ],
    "name": "Software Vendor Company",
    "description": "A company that provides software or libraries as a service",
    "location": {
      "type": [
        "Place"
      ],
      "address": {
        "type": [
          "PostalAddress"
        ],
        "streetAddress": "10612 Westheimer Rd",
        "addressLocality": "Houston",
        "addressRegion": "Texas",
        "postalCode": "77042",
        "addressCountry": "USA"
      }
    },
    "email": "Jerrell.Brakus73@soft-vendor.example.gov",
    "phoneNumber": "555-322-9464",
    "faxNumber": "555-766-1744"
  },
  "credentialSubject": {
    "type": [
      "SoftwareBillOfMaterials"
    ],
    "SPDXVersion": "SPDX-2.2",
    "dataLicense": "CC0-1.0",
    "SPDXID": "SPDXRef-DOCUMENT",
    "documentName": "hello",
    "documentNamespace": "https://swinslow.net/spdx-examples/example1/hello-v3",
    "creator": {
      "type": "Person",
      "name": "Steve Winslow",
      "email": "steve@swinslow.net"
    },
    "tool": [
      "github.com/spdx/tools-golang/builder",
      "github.com/spdx/tools,-golang/idsearcher"
    ],
    "packageRelationship": [
      "DESCRIBES SPDXRef-Package-hello"
    ],
    "packages": [
      {
        "type": [
          "SoftwarePackage"
        ],
        "packageName": "hello",
        "SPDXID": "SPDXRef-Package-hello",
        "packageDownloadLocation": "git+https://github.com/swinslow/spdx-examples.git#example1/content",
        "filesAnalyzed": true,
        "packageVerificationCode": "9d20237bb72087e87069f96afb41c6ca2fa2a342",
        "packageLicenseConcluded": "GPL-3.0-or-later",
        "packageLicenseInfoFromFiles": "GPL-3.0-or-later",
        "packageLicenseDeclared": "GPL-3.0-or-later",
        "packageCopyrightText": "NOASSERTION",
        "files": [
          {
            "type": [
              "SoftwarePackageFile"
            ],
            "fileName": "/build/hello",
            "SPDXID": "SPDXRef-hello-binary",
            "fileType": "BINARY",
            "fileChecksum": {
              "SHA1": "20291a81ef065ff891b537b64d4fdccaf6f5ac02",
              "SHA256": "83a33ff09648bb5fc5272baca88cf2b59fd81ac4cc6817b86998136af368708e",
              "MD5": "08a12c966d776864cc1eb41fd03c3c3d"
            },
            "licenseConcluded": "GPL-3.0-or-later",
            "licenseInfoInFile": "NOASSERTION",
            "fileCopyrightText": "NOASSERTION",
            "fileRelation": [
              "GENERATED_FROM SPDXRef-hello-src",
              "GENERATED_FROM SPDXRef-Makefile"
            ]
          },
          {
            "type": [
              "SoftwarePackageFile"
            ],
            "fileName": "/src/Makefile",
            "SPDXID": "SPDXRef-Makefile",
            "fileType": "SOURCE",
            "fileChecksum": {
              "SHA1": "69a2e85696fff1865c3f0686d6c3824b59915c80",
              "SHA256": "5da19033ba058e322e21c90e6d6d859c90b1b544e7840859c12cae5da005e79c",
              "MD5": "559424589a4f3f75fd542810473d8bc1"
            },
            "licenseConcluded": "GPL-3.0-or-later",
            "licenseInfoInFile": "GPL-3.0-or-later",
            "fileCopyrightText": "NOASSERTION",
            "fileRelation": [
              "BUILD_TOOL_OF SPDXRef-Package-hello"
            ]
          },
          {
            "type": [
              "SoftwarePackageFile"
            ],
            "fileName": "/src/hello.c",
            "SPDXID": "SPDXRef-hello-src",
            "fileType": "SOURCE",
            "fileChecksum": {
              "SHA1": "20862a6d08391d07d09344029533ec644fac6b21",
              "SHA256": "b4e5ca56d1f9110ca94ed0bf4e6d9ac11c2186eb7cd95159c6fdb50e8db5a823",
              "MD5": "935054fe899ca782e11003bbae5e166c"
            },
            "licenseConcluded": "GPL-3.0-or-later",
            "licenseInfoInFile": "GPL-3.0-or-later",
            "fileCopyrightText": "Copyright Contributors to the spdx-examples project."
          }
        ]
      }
    ]
  }
}