FICTIONAL EXAMPLE · NO PAYMENT OR SCAN

Useful evidence, ready to work with.

Read a clear brief, trace each finding to its original result, and save the detail in a useful format. Selected technical reports include these views alongside their original JSON.

YOUR EVIDENCE / YOUR NEXT STEP

Software Dependency Manifest Check

A clear view of selected findings, with the original detail close at hand.

Findings

This brief covers selected fields. The original report and its stated scope remain authoritative. Keep your copy private.

Created
2026-10-17T12:00:00.000Z
Selected entries
2
Private access until
2026-11-16T12:00:00.000Z
Schema validYes/report/schemaValid
Component count3/report/componentCount
Vulnerability lookupnot-performed/report/vulnerabilityLookup
Dependency edge count2/report/dependencyEdgeCount

Findings to review

Locations use JSON Pointer notation so you can trace each entry in the original result.

  1. F1Warning

    Missing version

    One component has no version. Obtain its exact release identifier before checking reproducibility.

    Reported location: /bom/components/1/version

    Result reference: /report/findings/0
  2. F2Warning

    Missing license metadata

    One component has no license declaration. Review the original supplier material before deciding how it can be used.

    Reported location: /bom/components/2/licenses

    Result reference: /report/findings/1
Scope and limitations

Values keep the units recorded in the original report. Monetary minor units are not converted into whole-currency amounts.

  • Fictional example, prepared to demonstrate the report format. No software or customer project was scanned.
  • Findings describe the supplied manifest only. No security clearance, license opinion or certification is provided.
  • Public advisory lookup was not requested. No information was sent to a provider.
Compare a previous report

Choose a saved JSON result from this service. It stays in your browser. Differences describe selected entries; they do not establish improvement or resolution.

Original example JSON
{
  "service": "software-dependency-manifest-check",
  "createdAt": "2026-10-17T12:00:00.000Z",
  "expiresAt": "2026-11-16T12:00:00.000Z",
  "report": {
    "service": "software-dependency-manifest-check",
    "status": "findings",
    "schemaValid": true,
    "componentCount": 3,
    "dependencyEdgeCount": 2,
    "vulnerabilityLookup": "not-performed",
    "findings": [
      {
        "code": "missing-version",
        "path": "/bom/components/1/version",
        "severity": "warning",
        "detail": "One component has no version. Obtain its exact release identifier before checking reproducibility."
      },
      {
        "code": "missing-license-metadata",
        "path": "/bom/components/2/licenses",
        "severity": "warning",
        "detail": "One component has no license declaration. Review the original supplier material before deciding how it can be used."
      }
    ],
    "limitations": [
      "Fictional example, prepared to demonstrate the report format. No software or customer project was scanned.",
      "Findings describe the supplied manifest only. No security clearance, license opinion or certification is provided.",
      "Public advisory lookup was not requested. No information was sent to a provider."
    ]
  }
}