Motivation

The SPDX community has published the specifications and some examples of SPDX document, but understanding the structure of SPDX document and how each item relates is a little difficult.
In very near future, when we must consider about SBOM automation, I think it is very important to understand not only the specifications but also the working SPDX Document, so I want to illustrate its architecture.

What is this?

Split "a236284 on Jan 21" version of the JSON schema for SPDX v2.3 published on github and transcribed it into a UML diagram using PlantUML. And JSON files used to create them have been committed here.
I hope this helps you understand SPDX document.

Overview

annotations

creationInfo

externalDocumentRefs

hasExtractedLicensingInfos

revieweds

documentDescribes

packages

files

snippets

relationships