{
 "SPDXID": "SPDXRef-DOCUMENT",
 "name": "/some/path",
 "spdxVersion": "SPDX-2.2",
 "creationInfo": {
  "created": "2021-10-11T01:54:40.609143Z",
  "creators": [
   "Organization: Anchore, Inc",
   "Tool: syft-[not provided]"
  ],
  "licenseListVersion": "3.14"
 },
 "syftSourceData": {
  "Scheme": "DirectoryScheme",
  "ImageMetadata": {
   "userInput": "",
   "imageID": "",
   "manifestDigest": "",
   "mediaType": "",
   "tags": null,
   "imageSize": 0,
   "layers": null,
   "manifest": null,
   "config": null,
   "repoDigests": null
  },
  "Path": "/some/path"
 },
 "syftDistroData": {
  "name": "debian",
  "version": "1.2.3",
  "idLike": "like!"
 },
 "dataLicense": "CC0-1.0",
 "documentNamespace": "https:/anchore.com/syft/dir/some/path-e94d6e43-5de5-4849-8e21-983ada9103c5",
 "packages": [
  {
   "SPDXID": "SPDXRef-Package-python-package-1-1.0.1",
   "name": "package-1",
   "licenseConcluded": "MIT",
   "downloadLocation": "NOASSERTION",
   "externalRefs": [
    {
     "referenceCategory": "SECURITY",
     "referenceLocator": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*",
     "referenceType": "cpe23Type"
    },
    {
     "referenceCategory": "PACKAGE_MANAGER",
     "referenceLocator": "a-purl-2",
     "referenceType": "purl"
    }
   ],
   "filesAnalyzed": false,
   "hasFiles": [
    "SPDXRef-File-package-1-04cd22424378dcd6c77fce08beb52493b5494a60ea5e1f9bdf9b16dc0cacffe9"
   ],
   "licenseDeclared": "MIT",
   "sourceInfo": "acquired package info from installed python package manifest file: /some/path/pkg1",
   "versionInfo": "1.0.1",
   "syftPackageData": {
    "type": "python",
    "foundBy": "the-cataloger-1",
    "locations": [
     {
      "path": "/some/path/pkg1"
     }
    ],
    "licenses": [
     "MIT"
    ],
    "language": "python",
    "metadataType": "PythonPackageMetadata",
    "metadata": {
     "name": "package-1",
     "version": "1.0.1",
     "license": "",
     "author": "",
     "authorEmail": "",
     "platform": "",
     "files": [
      {
       "path": "/some/path/pkg1/depedencies/foo"
      }
     ],
     "sitePackagesRootPath": ""
    }
   }
  },
  {
   "SPDXID": "SPDXRef-Package-deb-package-2-2.0.1",
   "name": "package-2",
   "licenseConcluded": "NONE",
   "downloadLocation": "NOASSERTION",
   "externalRefs": [
    {
     "referenceCategory": "SECURITY",
     "referenceLocator": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*",
     "referenceType": "cpe23Type"
    },
    {
     "referenceCategory": "PACKAGE_MANAGER",
     "referenceLocator": "a-purl-2",
     "referenceType": "purl"
    }
   ],
   "filesAnalyzed": false,
   "licenseDeclared": "NONE",
   "sourceInfo": "acquired package info from DPKG DB: /some/path/pkg1",
   "versionInfo": "2.0.1",
   "syftPackageData": {
    "type": "deb",
    "foundBy": "the-cataloger-2",
    "locations": [
     {
      "path": "/some/path/pkg1"
     }
    ],
    "metadataType": "DpkgMetadata",
    "metadata": {
     "package": "package-2",
     "source": "",
     "version": "2.0.1",
     "sourceVersion": "",
     "architecture": "",
     "maintainer": "",
     "installedSize": 0,
     "files": null
    }
   }
  }
 ],
 "files": [
  {
   "SPDXID": "SPDXRef-File-package-1-04cd22424378dcd6c77fce08beb52493b5494a60ea5e1f9bdf9b16dc0cacffe9",
   "name": "foo",
   "licenseConcluded": "",
   "fileName": "/some/path/pkg1/depedencies/foo"
  }
 ],
 "relationships": [
  {
   "spdxElementId": "SPDXRef-Package-python-package-1-1.0.1",
   "relationshipType": "CONTAINS",
   "relatedSpdxElement": "SPDXRef-File-package-1-04cd22424378dcd6c77fce08beb52493b5494a60ea5e1f9bdf9b16dc0cacffe9"
  }
 ]
}