SPDX JSON部品表：チェックサム未登録のパッケージを探す

SPDX JSON部品表からチェックサム未登録のパッケージを探す無料ツール。ブラウザ内で処理し、入力内容を外部サーバーへ送信しません。

入力データ

処理する内容を貼り付けてください

{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "name": "Example SBOM",
  "documentNamespace": "https://example.org/spdx",
  "creationInfo": {
    "creators": [
      "Tool: Demo"
    ],
    "created": "2025-01-01T00:00:00Z"
  },
  "packages": [
    {
      "SPDXID": "SPDXRef-pkg-a",
      "name": "alpha",
      "versionInfo": "1.0",
      "downloadLocation": "https://example.org/a",
      "licenseDeclared": "MIT",
      "licenseConcluded": "MIT",
      "supplier": "Organization: Example",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "abc"
        }
      ],
      "externalRefs": [
        {
          "referenceType": "purl",
          "referenceLocator": "pkg:npm/alpha@1.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-pkg-b",
      "name": "beta",
      "versionInfo": "2.0",
      "licenseDeclared": "NOASSERTION",
      "licenseConcluded": "NOASSERTION",
      "checksums": []
    },
    {
      "SPDXID": "SPDXRef-pkg-b",
      "name": "duplicate-id",
      "versionInfo": "3.0"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-pkg-a",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-pkg-b"
    }
  ],
  "files": [
    {
      "SPDXID": "SPDXRef-file",
      "fileName": "src/main.js",
      "fileTypes": [
        "SOURCE"
      ]
    }
  ]
}

SPDX 2.x JSONを対象にします。ライセンスの法的適合性やSBOM全体の正確性を認証するものではありません。

SPDX JSON部品表：チェックサム未登録のパッケージを探す

入力データ

処理結果