{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:d3b07384-d9a0-4c9b-8f1e-demo00000001",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-21T10:00:00Z",
    "component": {
      "type": "firmware",
      "name": "Steuerungsmodul SM-200 (DEMO-Beispiel)",
      "version": "2.4.1",
      "supplier": { "name": "Muster-Elektronik GmbH (fiktives Beispiel)" }
    },
    "tools": [{ "vendor": "SBOM24", "name": "SBOM24 Analyse-Service" }]
  },
  "components": [
    { "type": "operating-system", "name": "linux-kernel", "version": "5.10.226", "licenses": [{ "license": { "id": "GPL-2.0-only" } }], "purl": "pkg:generic/linux-kernel@5.10.226" },
    { "type": "library", "name": "openssl", "version": "3.0.15", "licenses": [{ "license": { "id": "Apache-2.0" } }], "purl": "pkg:generic/openssl@3.0.15" },
    { "type": "application", "name": "busybox", "version": "1.36.1", "licenses": [{ "license": { "id": "GPL-2.0-only" } }], "purl": "pkg:generic/busybox@1.36.1" },
    { "type": "library", "name": "zlib", "version": "1.3.1", "licenses": [{ "license": { "id": "Zlib" } }], "purl": "pkg:generic/zlib@1.3.1" },
    { "type": "library", "name": "libcurl", "version": "8.9.1", "licenses": [{ "license": { "id": "curl" } }], "purl": "pkg:generic/curl@8.9.1" },
    { "type": "library", "name": "mbedtls", "version": "3.6.1", "licenses": [{ "license": { "id": "Apache-2.0" } }], "purl": "pkg:generic/mbedtls@3.6.1" },
    { "type": "application", "name": "dropbear-ssh", "version": "2024.85", "licenses": [{ "license": { "id": "MIT" } }], "purl": "pkg:generic/dropbear@2024.85" },
    { "type": "library", "name": "freertos-kernel", "version": "10.6.2", "licenses": [{ "license": { "id": "MIT" } }], "purl": "pkg:generic/freertos@10.6.2" }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-EXAMPLE",
      "description": "DEMO-Hinweis: In der echten Lieferung enthält dieser Abschnitt den Abgleich aller Komponenten gegen die NVD/OSV-Schwachstellendatenbanken zum Lieferzeitpunkt, inkl. Bewertung und Empfehlung.",
      "affects": [{ "ref": "pkg:generic/openssl@3.0.15" }],
      "analysis": { "state": "resolved", "detail": "Beispiel: Version bereits gepatcht." }
    }
  ]
}