{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "version": 1,
  "components": [
    {
      "type": "library",
      "name": "log4j-core",
      "version": "2.17.1",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"
    },
    {
      "type": "library",
      "name": "webpack",
      "version": "5.110.3",
      "purl": "pkg:npm/webpack@5.110.3"
    },
    {
      "type": "library",
      "name": "core",
      "version": "12.0.1",
      "purl": "pkg:npm/%40nestjs/core@12.0.1"
    },
    {
      "type": "container",
      "name": "postgres",
      "version": "12",
      "purl": "pkg:docker/library/postgres@12"
    },
    {
      "type": "library",
      "name": "mlflow",
      "version": "2.22.5",
      "purl": "pkg:pypi/mlflow@2.22.5"
    },
    {
      "type": "library",
      "name": "left-pad",
      "version": "1.3.0",
      "purl": "pkg:npm/left-pad@1.3.0"
    },
    {
      "type": "application",
      "name": "node",
      "version": "16.20.2"
    },
    {
      "type": "library",
      "name": "openssl",
      "version": "3.0.15",
      "purl": "pkg:generic/openssl@3.0.15"
    },
    {
      "type": "library",
      "name": "django",
      "version": "4.2.16",
      "purl": "pkg:pypi/Django@4.2.16"
    }
  ],
  "serialNumber": "urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79",
  "metadata": {
    "timestamp": "2026-09-05T00:00:00Z",
    "component": {
      "type": "application",
      "name": "sample-app",
      "version": "1.0.0",
      "bom-ref": "sample-app@1.0.0"
    },
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "syft",
          "version": "1.20.0"
        }
      ]
    }
  }
}