Struct Component 

pub struct Component {
    pub id: ComponentId,
    pub name: String,
    pub version: Option<String>,
    pub ecosystem: Option<String>,
    pub supplier: Option<String>,
    pub description: Option<String>,
    pub purl: Option<String>,
    pub licenses: BTreeSet<String>,
    pub hashes: BTreeMap<String, String>,
    pub source_ids: Vec<String>,
}

A software component (package, library, or application).

Represents a single entry in the SBOM with all its metadata. Components are identified by their ComponentId and can have relationships to other components via the dependency graph.

Fields

id: ComponentId

Stable identifier for this component.

name: String

Package name (e.g., “serde”, “lodash”).

version: Option<String>

Package version (e.g., “1.0.0”, “4.17.21”).

ecosystem: Option<String>

Package ecosystem (e.g., “cargo”, “npm”, “pypi”).

supplier: Option<String>

Package supplier or publisher.

description: Option<String>

Human-readable description.

purl: Option<String>

Package URL per the purl spec.

licenses: BTreeSet<String>

SPDX license identifiers (e.g., “MIT”, “Apache-2.0”).

hashes: BTreeMap<String, String>

Checksums keyed by algorithm (e.g., “sha256” -> “abc123…”).

source_ids: Vec<String>

Original identifiers from the source document (e.g., SPDX SPDXRef, CycloneDX bom-ref).

Implementations

impl Component

pub fn new(name: String, version: Option<String>) -> Self

Creates a new component with the given name and optional version.

The component ID is generated from a hash of the name and version. Use this for simple cases; for full control, construct the struct directly.

impl Component

pub fn normalize(&mut self)

Normalizes the component for deterministic comparison.

Lowercases hash keys and values. Licenses are stored as a BTreeSet so they’re already sorted and deduplicated.

Trait Implementations

impl Clone for Component

fn clone(&self) -> Component

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Component

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Component

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Component

fn eq(&self, other: &Component) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Component

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Component

impl StructuralPartialEq for Component