Get Vulnerability Updates

Data for SBOM Document ID: 865df0f4-dafe-43fe-923c-3e56c7d88878

Key Value
Name com.github.codenotary/immudb
SPDX specVersion SPDX-2.3
Creation Info Creators: Tool: GitHub.com-Dependency-Graph
Created: 2023-11-04T11:05:54Z
Data License CC0-1.0
Document Namespace https://github.com/codenotary/immudb/dependency_graph/sbom-607bbb25c897e13e
Total Components

191

6.98 / 10

Vulnerability Severity Distribution

Total Vulnerabilities

10

Critical

1

High

5

Medium

4

Low

0

None

0

Structural

Average: 10.0

# Description Score Score Progress
1 provided sbom is in a supported sbom format of spdx,cyclonedx 10.0
2 provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3 10.0
3 provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value 10.0
4 provided sbom is parsable 10.0

NTIA-minimum-elements

Average: 8.6

# Description Score Score Progress
1 0/191 have supplier names 0.0
2 191/191 have names 10.0
3 189/191 have versions 9.9
4 191/191 have unique ID's 10.0
5 doc has 191 relationships 10.0
6 doc has 1 authors 10.0
7 doc has creation timestamp 2023-11-04T11:05:54Z 10.0

Semantic

Average: 3.5

# Description Score Score Progress
1 Doc Fields:true Pkg Fields:true 10.0
2 7/191 have licenses 0.4
3 0/191 have checksums 0.0

Quality

Average: 5.0

# Description Score Score Progress
1 7/191 components with valid license 0.4
2 0/191 components have primary purpose specified 0.0
3 0/191 components have deprecated licenses 10.0
4 0/191 components have restricted licenses 10.0
5 190/191 components have any lookup id 9.9
6 0/191 components have multiple lookup id 0.0
7 0/1 tools have creator and version 0.0
8 primary component found 10.0

Sharing

Average: 10.0

# Description Score Score Progress
1 doc has a sharable license free 1 :: of 1 10.0