TODO_TAGS_REVIEW

SPDX SBOM Validator (EU CRA Annex I)

Validates an SPDX SBOM against the EU CRA Annex I machine-readable SBOM requirement: spdxVersion matches SPDX-2.x or SPDX-3.x, SPDXID present, all packages carry name+versionInfo+downloadLocation (or purl externalRef), relationships array non-empty. Emits sbom_valid verdict and per-package gap list. Root stage of cra-product-conformance chain.

Tool URL: https://ainumbers.co/chaingraph/art-138-spdx-sbom-validator.html AP2/Policy Mandate export: yes

post/v1/tools/validate_spdx_sbom

Request

  • Base URL: https://ainumbers.co
  • URL: https://ainumbers.co/v1/tools/validate_spdx_sbom
  • Auth: none declared

Request body

sbomunknown

Response

Successful tool execution result

formatstring
has_relationshipsboolean
package_countinteger
sbom_validboolean
spdx_versionstring

Changes

No recorded changes to this operation across all 1 revision of this API.