<?xml version="1.0" encoding="UTF-8"?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.6" serialNumber="redacted" version="1">
  <metadata>
    <timestamp>redacted</timestamp>
    <tools>
      <components>
        <component type="application">
          <author>anchore</author>
          <name>syft</name>
          <version>v0.42.0-bogus</version>
        </component>
      </components>
    </tools>
    <component bom-ref="redacted" type="file">
      <name>some/path</name>
    </component>
  </metadata>
  <components>
    <component bom-ref="redacted" type="library">
      <name>package-1</name>
      <version>1.0.1</version>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <cpe>cpe:2.3:*:some:package:2:*:*:*:*:*:*:*</cpe>
      <purl>a-purl-2</purl>
      <properties>
        <property name="syft:package:foundBy">the-cataloger-1</property>
        <property name="syft:package:language">python</property>
        <property name="syft:package:type">python</property>
        <property name="syft:package:metadataType">python-package</property>
        <property name="syft:location:0:path">/some/path/pkg1</property>
      </properties>
    </component>
    <component bom-ref="redacted" type="library">
      <name>package-2</name>
      <version>2.0.1</version>
      <cpe>cpe:2.3:*:some:package:2:*:*:*:*:*:*:*</cpe>
      <purl>pkg:deb/debian/package-2@2.0.1</purl>
      <properties>
        <property name="syft:package:foundBy">the-cataloger-2</property>
        <property name="syft:package:type">deb</property>
        <property name="syft:package:metadataType">dpkg-db-entry</property>
        <property name="syft:location:0:path">/some/path/pkg1</property>
        <property name="syft:metadata:installedSize">0</property>
      </properties>
    </component>
    <component bom-ref="redacted" type="operating-system">
      <name>debian</name>
      <version>1.2.3</version>
      <description>debian</description>
      <swid tagId="debian" name="debian" version="1.2.3"></swid>
      <properties>
        <property name="syft:distro:id">debian</property>
        <property name="syft:distro:idLike:0">like!</property>
        <property name="syft:distro:prettyName">debian</property>
        <property name="syft:distro:versionID">1.2.3</property>
      </properties>
    </component>
  </components>
</bom>