Lemon ROP: Sipping Bill of Materials

Curious what this is about? In honor of the NTIA Software Transparency / Software Bill of Materials (SBOM) project, we have chosen to make these Sipping Bill of Materials available. Please consult your local hacker economist to learn how you can get involved with the NTIA SBOM project.

CycloneDX Format

<?xml version="1.0"?>
<bom serialNumber="url:https://narwhal.be/2019/sbom/lemonrop/" version="1" xmlns="http://cyclonedx.org/schema/bom/1.1" xmlns:prep="urn:prep:instructions">
    <components>  
        <component type="library">
            <publisher>Chopin Imports Ltd.</publisher>
            <name>Chopin Potato Vodka</name>
            <description></description>
            <scope>2 oz</scope>
        </component>  
        <component type="library">
            <publisher>Rémy Cointreau USA, Inc.</publisher>
            <name>Cointreau L'Unique</name>
            <description></description>
            <scope>0.6 oz</scope>
        </component>  
        <component type="library">
            <publisher>Narwhal</publisher>
            <name>Lemon Juice</name>
            <description>Fresh squeezed.</description>
            <scope>1 oz</scope>
        </component>  
        <component type="library">
            <publisher>Narwhal</publisher>
            <name>Demerara Syrup</name>
            <description>Constructed with a 1:1 ratio of demerara sugar and water.</description>
            <scope>0.5 oz</scope>
        </component>  
        <component type="library">
            <publisher>Acme Inc.</publisher>
            <name>Ultrafine Sugar</name>
            <description></description>
            <scope>1 tsp</scope>
        </component> 
    </components>
    <prep:instructions>Shake with ice. Take lemon wedge and rub rim of glass, then dip into sugar. Strain into glass.</prep:instructions>
</bom>

SWID Format

<?xml version="1.0"?>
<SoftwareIdentity
    name="Lemon ROP"
    tagId="urn:lemon-rop"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
  
    <Link rel="requires" href="urn:chopin-imports-ltd-chopin-potato-vodka" />   
    <Link rel="requires" href="urn:rémy-cointreau-usa-inc-cointreau-l-unique" />   
    <Link rel="requires" href="urn:narwhal-lemon-juice" />   
    <Link rel="requires" href="urn:narwhal-demerara-syrup" />   
    <Link rel="requires" href="urn:acme-inc-ultrafine-sugar" /> 
    <Meta entitlementDataRequired="false" summary="Shake with ice. Take lemon wedge and rub rim of glass, then dip into sugar. Strain into glass." />
</SoftwareIdentity>

 
<SoftwareIdentity
    name="Chopin Potato Vodka"
    tagId="urn:chopin-imports-ltd-chopin-potato-vodka"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Chopin Imports Ltd." role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="2 oz" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Cointreau L'Unique"
    tagId="urn:rémy-cointreau-usa-inc-cointreau-l-unique"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Rémy Cointreau USA, Inc." role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="0.6 oz" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Lemon Juice"
    tagId="urn:narwhal-lemon-juice"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Narwhal" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="1 oz" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Demerara Syrup"
    tagId="urn:narwhal-demerara-syrup"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Narwhal" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="0.5 oz" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Ultrafine Sugar"
    tagId="urn:acme-inc-ultrafine-sugar"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Acme Inc." role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="1 tsp" />
</SoftwareIdentity>

SPDX Format

DocumentName: Lemon ROP
SPDXID: lemon-rop
DocumentComment: <text>Shake with ice. Take lemon wedge and rub rim of glass, then dip into sugar. Strain into glass.</text>
## Creation Information
Creator: Tool: Jekyll
Creator: Organization: Narwhal
 
FileName: Chopin Potato Vodka
SPDXID: chopin-potato-vodka
FileComment: <text>2 oz</text>
FileContributor: Chopin Imports Ltd.
 
FileName: Cointreau L'Unique
SPDXID: cointreau-l-unique
FileComment: <text>0.6 oz</text>
FileContributor: Rémy Cointreau USA, Inc.
 
FileName: Lemon Juice
SPDXID: lemon-juice
FileComment: <text>1 oz</text>
FileContributor: Narwhal
 
FileName: Demerara Syrup
SPDXID: demerara-syrup
FileComment: <text>0.5 oz</text>
FileContributor: Narwhal
 
FileName: Ultrafine Sugar
SPDXID: ultrafine-sugar
FileComment: <text>1 tsp</text>
FileContributor: Acme Inc.

JSON Format

{
    "shortname": "lemonrop",
    "name": "Lemon ROP",
    "ingredients": [  
        {
            "name": "Chopin Potato Vodka",
            "manufacturer": "Chopin Imports Ltd.",
            "notes": "",
            "quantity": 2,
            "unit": "oz"
        },  
        {
            "name": "Cointreau L'Unique",
            "manufacturer": "Rémy Cointreau USA, Inc.",
            "notes": "",
            "quantity": 0.6,
            "unit": "oz"
        },  
        {
            "name": "Lemon Juice",
            "manufacturer": "Narwhal",
            "notes": "Fresh squeezed.",
            "quantity": 1,
            "unit": "oz"
        },  
        {
            "name": "Demerara Syrup",
            "manufacturer": "Narwhal",
            "notes": "Constructed with a 1:1 ratio of demerara sugar and water.",
            "quantity": 0.5,
            "unit": "oz"
        },  
        {
            "name": "Ultrafine Sugar",
            "manufacturer": "Acme Inc.",
            "notes": "",
            "quantity": 1,
            "unit": "tsp"
        }, 
    ],
    "instructions": "Shake with ice. Take lemon wedge and rub rim of glass, then dip into sugar. Strain into glass."
}