models ComponentEvidence

Signed-off-by: Jan Kowalleck <[email protected]>

Author: jkowalleck

README.md

@@ -51,7 +51,7 @@ written in _TypeScript_ and compiled for the target.
   * `Attachment`
   * `Bom`
   * `BomRef`, `BomRefRepository`
-  * `Component`, `ComponentRepository`
+  * `Component`, `ComponentRepository`, `ComponentEvidence`
   * `ExternalReference`, `ExternalReferenceRepository`
   * `Hash`, `HashContent`,  `HashDictionary`
   * `LicenseExpression`, `NamedLicense`, `SpdxLicense`, `LicenseRepository`

src/models/component.ts

@@ -20,7 +20,7 @@ Copyright (c) OWASP Foundation. All Rights Reserved.
 import type { PackageURL } from 'packageurl-js'
 
 import type { Comparable } from '../_helpers/sortable'
-import { SortableComparables } from '../_helpers/sortable'
+import {SortableComparables, SortableStringables} from '../_helpers/sortable'
 import { treeIteratorSymbol } from '../_helpers/tree'
 import type { ComponentScope, ComponentType } from '../enums'
 import type { CPE } from '../types'
@@ -52,6 +52,7 @@ export interface OptionalComponentProperties {
   components?: Component['components']
   cpe?: Component['cpe']
   properties?: Component['properties']
+  evidence?: Component['evidence']
 }
 
 export class Component implements Comparable<Component> {
@@ -73,6 +74,7 @@ export class Component implements Comparable<Component> {
   dependencies: BomRefRepository
   components: ComponentRepository
   properties: PropertyRepository
+  evidence?: ComponentEvidence
 
   /** @see {@link bomRef} */
   readonly #bomRef: BomRef
@@ -104,6 +106,7 @@ export class Component implements Comparable<Component> {
     this.components = op.components ?? new ComponentRepository()
     this.cpe = op.cpe
     this.properties = op.properties ?? new PropertyRepository()
+    this.evidence = op.evidence
   }
 
   get bomRef (): BomRef {
@@ -152,3 +155,20 @@ export class ComponentRepository extends SortableComparables<Component> {
     }
   }
 }
+
+
+export interface OptionalComponentEvidenceProperties {
+  licenses?: ComponentEvidence['licenses']
+  copyright?: ComponentEvidence['copyright']
+}
+
+export class ComponentEvidence {
+  licenses: LicenseRepository
+  copyright: SortableStringables
+
+  constructor(op: OptionalComponentEvidenceProperties = {}) {
+    this.licenses = op.licenses ?? new LicenseRepository()
+    this.copyright = op.copyright ?? new SortableStringables()
+  }
+}
+