/ 
SBOM-CycloneDX-1.03
/ SBOM::CycloneDX::Metadata

NAME

SBOM::CycloneDX::Metadata - BOM Metadata

SYNOPSIS

SBOM::CycloneDX::Metadata->new();

DESCRIPTION

SBOM::CycloneDX::Metadata provides additional information about a BOM.

METHODS

SBOM::CycloneDX::Metadata inherits all methods from SBOM::CycloneDX::Base and implements the following new ones.

SBOM::CycloneDX::Metadata->new( %PARAMS )

Properties:

BUILD,
authors, The person(s) who created the BOM. Authors are common in BOMs created through manual processes. BOMs created through automated means may have "manufacturer" instead.
component, The component that the BOM describes.
licenses, The license information for the BOM document. This may be different from the license(s) of the component(s) that the BOM describes.
lifecycles, Lifecycles communicate the stage(s) in which data in the BOM was captured. Different types of data may be available at various phases of a lifecycle, such as the Software Development Lifecycle (SDLC), IT Asset Management (ITAM), and Software Asset Management (SAM). Thus, a BOM may include data specific to or only obtainable in a given lifecycle.
manufacture, [Deprecated in 1.6] This will be removed in a future version. Use the "manufacturer" method in SBOM::CycloneDX::Component instead. The organization that manufactured the component that the BOM describes.
manufacturer, The organization that created the BOM. Manufacturer is common in BOMs created through automated processes. BOMs created through manual means may have `@.authors` instead.
properties, Provides the ability to document properties in a name-value store. This provides flexibility to include data not officially supported in the standard without having to use additional namespaces or create extensions. Unlike key-value stores, properties support duplicate names, each potentially having different values. Property names of interest to the general public are encouraged to be registered in the CycloneDX Property Taxonomy (https://github.com/CycloneDX/cyclonedx-property-taxonomy). Formal registration is optional.
supplier, The organization that supplied the component that the BOM describes. The supplier may often be the manufacturer, but may also be a distributor or repackager.
timestamp, The date and time (timestamp) when the BOM was created.
tools, The tool(s) used in the creation, enrichment, and validation of the BOM.
$metadata->BUILD
$metadata->authors
$metadata->component
$metadata->licenses
$metadata->lifecycles
$metadata->manufacture
$metadata->manufacturer
$metadata->properties
$metadata->supplier
$metadata->timestamp
$metadata->tools

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-SBOM-CycloneDX/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-SBOM-CycloneDX

git clone https://github.com/giterlizzi/perl-SBOM-CycloneDX.git

AUTHOR

  • Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2025 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.