SBOM Validator

{
  "spdxVersion": "SPDX-2.3",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "sample-app",
  "dataLicense": "CC0-1.0",
  "creationInfo": {
    "created": "2026-01-01T00:00:00Z",
    "creators": ["Tool: Demo"]
  },
  "packages": [
    {
      "SPDXID": "SPDXRef-Package-1",
      "name": "react",
      "versionInfo": "19.1.0",
      "downloadLocation": "NOASSERTION",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT"
    }
  ]
}