CycloneDX BOM Descriptor Extension https://cyclonedx.org/ext/bom-descriptor Apache License, Version 2.0 Steve Springett The date and time (timestamp) when the document was created. The tool used to create the BOM. The person(s) who created the BOM. Authors are common in BOMs created through manual processes. BOMs created through automated means may not have authors. The component that the BOM describes. The organization that manufactured the component that the BOM describes. The organization that supplied the component that the BOM describes. The supplier may often be the manufacture, but may also be a distributor or repackager. User-defined attributes may be used on this element as long as they do not have the same name as an existing attribute used by the schema. The name of the organization The URL of the organization. Multiple URLs are allowed. A contact person at the organization. Multiple contacts are allowed. User-defined attributes may be used on this element as long as they do not have the same name as an existing attribute used by the schema. Specifies a tool (manual or automated). The vendor of the tool used to create the BOM. The name of the tool used to create the BOM. The version of the tool used to create the BOM. User-defined attributes may be used on this element as long as they do not have the same name as an existing attribute used by the schema. The name of the person The email address of the person. Multiple email addresses are allowed. The phone number of the person. Multiple phone numbers are allowed. User-defined attributes may be used on this element as long as they do not have the same name as an existing attribute used by the schema. Provides additional information about a BOM.