https://spdx.org/rdf/3.0.1/terms/Software/Package
Refers to any unit of content that can be associated with a distribution of
software.
By the associated SHACL property shapes, instances of software:Package can have the following properties:
| PROPERTY | PROPERTY TYPE | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS | GLOBAL RANGE |
|---|---|---|---|---|---|---|---|
| software:Package | |||||||
| software:downloadLocation | owl:DatatypeProperty | Identifies the download Uniform Resource Identifier for the package at the time that the document was created. | 0 | 1 | xsd:anyURI sh:Literal |
xsd:anyURI | |
| software:homePage | owl:DatatypeProperty | A place for the SPDX document creator to record a website that serves as the package's home page. | 0 | 1 | xsd:anyURI sh:Literal |
xsd:anyURI | |
| software:packageUrl | owl:DatatypeProperty | Provides a place for the SPDX data creator to record the package URL string (in accordance with the Package URL specification) for a software Package. | 0 | 1 | xsd:anyURI sh:Literal |
xsd:anyURI | |
| software:packageVersion | owl:DatatypeProperty | Identify the version of a package. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| software:sourceInfo | owl:DatatypeProperty | Records any relevant background information or additional comments about the origin of the package. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| software:SoftwareArtifact | |||||||
rdf:type |
-- | sh:message https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead. |
0 | * |
sh:not
sh:hasValue software:SoftwareArtifact
|
-- | |
| software:additionalPurpose | owl:ObjectProperty | Provides additional purpose information of the software artifact. | 0 | * | software:SoftwarePurpose sh:IRI |
sh:in
software:SoftwarePurpose/application, software:SoftwarePurpose/archive, software:SoftwarePurpose/bom, software:SoftwarePurpose/configuration, software:SoftwarePurpose/container, software:SoftwarePurpose/data, software:SoftwarePurpose/device, software:SoftwarePurpose/diskImage, software:SoftwarePurpose/deviceDriver, software:SoftwarePurpose/documentation, software:SoftwarePurpose/evidence, software:SoftwarePurpose/executable, software:SoftwarePurpose/file, software:SoftwarePurpose/filesystemImage, software:SoftwarePurpose/firmware, software:SoftwarePurpose/framework, software:SoftwarePurpose/install, software:SoftwarePurpose/library, software:SoftwarePurpose/manifest, software:SoftwarePurpose/model, software:SoftwarePurpose/module, software:SoftwarePurpose/operatingSystem, software:SoftwarePurpose/other, software:SoftwarePurpose/patch, software:SoftwarePurpose/platform, software:SoftwarePurpose/requirement, software:SoftwarePurpose/source, software:SoftwarePurpose/specification, software:SoftwarePurpose/test
|
software:SoftwarePurpose |
| software:attributionText | owl:DatatypeProperty | Provides a place for the SPDX data creator to record acknowledgement text for a software Package, File or Snippet. | 0 | * | xsd:string sh:Literal |
xsd:string | |
| software:contentIdentifier | owl:DatatypeProperty | A canonical, unique, immutable identifier of the artifact content, that may be used for verifying its identity and/or integrity. | 0 | * | software:ContentIdentifier sh:BlankNodeOrIRI |
software:ContentIdentifier | |
| software:copyrightText | owl:DatatypeProperty | Identifies the text of one or more copyright notices for a software Package, File or Snippet, if any. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| software:primaryPurpose | owl:ObjectProperty | Provides information about the primary purpose of the software artifact. | 0 | 1 | software:SoftwarePurpose sh:IRI |
sh:in
software:SoftwarePurpose/application, software:SoftwarePurpose/archive, software:SoftwarePurpose/bom, software:SoftwarePurpose/configuration, software:SoftwarePurpose/container, software:SoftwarePurpose/data, software:SoftwarePurpose/device, software:SoftwarePurpose/diskImage, software:SoftwarePurpose/deviceDriver, software:SoftwarePurpose/documentation, software:SoftwarePurpose/evidence, software:SoftwarePurpose/executable, software:SoftwarePurpose/file, software:SoftwarePurpose/filesystemImage, software:SoftwarePurpose/firmware, software:SoftwarePurpose/framework, software:SoftwarePurpose/install, software:SoftwarePurpose/library, software:SoftwarePurpose/manifest, software:SoftwarePurpose/model, software:SoftwarePurpose/module, software:SoftwarePurpose/operatingSystem, software:SoftwarePurpose/other, software:SoftwarePurpose/patch, software:SoftwarePurpose/platform, software:SoftwarePurpose/requirement, software:SoftwarePurpose/source, software:SoftwarePurpose/specification, software:SoftwarePurpose/test
|
software:SoftwarePurpose |
| core:Artifact | |||||||
| core:builtTime | owl:DatatypeProperty | Specifies the time an artifact was built. | 0 | 1 | xsd:dateTimeStamp sh:Literal |
sh:pattern
^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$
|
xsd:dateTimeStamp |
| core:originatedBy | owl:ObjectProperty | Identifies from where or whom the Element originally came. | 0 | * | core:Agent sh:IRI |
core:Agent | |
| core:releaseTime | owl:DatatypeProperty | Specifies the time an artifact was released. | 0 | 1 | xsd:dateTimeStamp sh:Literal |
sh:pattern
^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$
|
xsd:dateTimeStamp |
| core:standardName | owl:DatatypeProperty | The name of a relevant standard that may apply to an artifact. | 0 | * | xsd:string sh:Literal |
xsd:string | |
| core:suppliedBy | owl:ObjectProperty | Identifies who or what supplied the artifact or VulnAssessmentRelationship referenced by the Element. | 0 | 1 | core:Agent sh:IRI |
core:Agent | |
| core:supportLevel | owl:ObjectProperty | Specifies the level of support associated with an artifact. | 0 | * | core:SupportType sh:IRI |
sh:in
core:SupportType/development, core:SupportType/support, core:SupportType/deployed, core:SupportType/limitedSupport, core:SupportType/endOfSupport, core:SupportType/noSupport, core:SupportType/noAssertion
|
core:SupportType |
| core:validUntilTime | owl:DatatypeProperty | Specifies until when the artifact can be used before its usage needs to be reassessed. | 0 | 1 | xsd:dateTimeStamp sh:Literal |
sh:pattern
^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$
|
xsd:dateTimeStamp |
rdf:type |
-- | sh:message https://spdx.org/rdf/3.0.1/terms/Core/Artifact is an abstract class and should not be instantiated directly. Instantiate a subclass instead. |
0 | * |
sh:not
sh:hasValue core:Artifact
|
-- | |
| core:Element | |||||||
| core:comment | owl:DatatypeProperty | Provide consumers with comments by the creator of the Element about the Element. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| core:creationInfo | owl:ObjectProperty | Provides information about the creation of the Element. | 1 | 1 | core:CreationInfo sh:BlankNodeOrIRI |
core:CreationInfo | |
| core:description | owl:DatatypeProperty | Provides a detailed description of the Element. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| core:extension | owl:ObjectProperty | Specifies an Extension characterization of some aspect of an Element. sh:message Class is known to not derive from Extension and cannot be used |
0 | * | sh:BlankNodeOrIRI |
sh:not
sh:or (security:SsvcVulnAssessmentRelationship, security:CvssV2VulnAssessmentRelationship, security:ExploitCatalogVulnAssessmentRelationship, security:CvssV4VulnAssessmentRelationship, security:VexAffectedVulnAssessmentRelationship, security:VexNotAffectedVulnAssessmentRelationship, security:CvssV3VulnAssessmentRelationship, security:Vulnerability, security:VexUnderInvestigationVulnAssessmentRelationship, security:EpssVulnAssessmentRelationship, security:VexFixedVulnAssessmentRelationship, core:NamespaceMap, core:LifecycleScopedRelationship, core:Hash, core:Agent, core:CreationInfo, core:ExternalRef, core:Bom, core:IndividualElement, core:Relationship, core:PositiveIntegerRange, core:DictionaryEntry, core:ExternalMap, core:Annotation, core:SpdxDocument, core:Person, core:Organization, core:Bundle, core:Tool, core:ExternalIdentifier, core:SoftwareAgent, core:PackageVerificationCode, ai:AIPackage, ai:EnergyConsumptionDescription, ai:EnergyConsumption, build:Build, dataset:DatasetPackage, expandedlicensing:CustomLicense, expandedlicensing:OrLaterOperator, expandedlicensing:ListedLicense, expandedlicensing:DisjunctiveLicenseSet, expandedlicensing:ListedLicenseException, expandedlicensing:WithAdditionOperator, expandedlicensing:IndividualLicensingInfo, expandedlicensing:CustomLicenseAddition, expandedlicensing:ConjunctiveLicenseSet, simplelicensing:LicenseExpression, simplelicensing:SimpleLicensingText, extension:CdxPropertyEntry, software:Package, software:File, software:Sbom, software:Snippet, software:ContentIdentifier)
|
extension:Extension |
| core:externalIdentifier | owl:ObjectProperty | Provides a reference to a resource outside the scope of SPDX-3.0 content that uniquely identifies an Element. | 0 | * | core:ExternalIdentifier sh:BlankNodeOrIRI |
core:ExternalIdentifier | |
| core:externalRef | owl:ObjectProperty | Points to a resource outside the scope of the SPDX-3.0 content that provides additional characteristics of an Element. | 0 | * | core:ExternalRef sh:BlankNodeOrIRI |
core:ExternalRef | |
| core:name | owl:DatatypeProperty | Identifies the name of an Element as designated by the creator. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| core:summary | owl:DatatypeProperty | A short description of an Element. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| core:verifiedUsing | owl:ObjectProperty | Provides an IntegrityMethod with which the integrity of an Element can be asserted. | 0 | * | core:IntegrityMethod sh:BlankNodeOrIRI |
core:IntegrityMethod | |
rdf:type |
-- | sh:message https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead. |
0 | * |
sh:not
sh:hasValue core:Element
|
-- | |
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix software: <https://spdx.org/rdf/3.0.1/terms/Software/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
software:Package a owl:Class,
sh:NodeShape ;
rdfs:comment """Refers to any unit of content that can be associated with a distribution of
software."""@en ;
rdfs:subClassOf software:SoftwareArtifact ;
sh:nodeKind sh:IRI ;
sh:property [ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path software:sourceInfo ],
[ sh:datatype xsd:anyURI ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path software:homePage ],
[ sh:datatype xsd:anyURI ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path software:downloadLocation ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path software:packageVersion ],
[ sh:datatype xsd:anyURI ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path software:packageUrl ] .