Struct ComponentIdentifiers 

pub struct ComponentIdentifiers {
    pub purl: Option<String>,
    pub cpe: Vec<String>,
    pub swhid: Vec<SwhidObject>,
    pub swid: Option<String>,
    pub format_id: String,
    pub aliases: Vec<String>,
}

Component identifiers from various sources

Fields

purl: Option<String>

Package URL (preferred identifier)

cpe: Vec<String>

Common Platform Enumeration identifiers

swhid: Vec<SwhidObject>

Software Heritage persistent identifiers (SWHIDs).

Multiple values supported because a component may be expressible by several SWHID kinds (e.g., one cnt per archive entry plus a dir for the unpacked tree). CRA prEN 40000-1-3 [PRE-7-RQ-07] accepts SWHIDs as one of three named identifier types.

Stored as structured SwhidObject for downstream consumers; on the wire (JSON), each element serialises as a plain string to match the CycloneDX / SPDX 3.0 swhid array shape.

swid: Option<String>

Software Identification tag

format_id: String

Original format-specific identifier

aliases: Vec<String>

Known aliases for this component

Implementations

impl ComponentIdentifiers

pub fn new(format_id: String) -> Self

Create a new empty set of identifiers

pub fn canonical_id(&self) -> CanonicalId

Get the best available canonical ID (without component context)

For better stability, prefer canonical_id_with_context() which can generate synthetic IDs from component metadata.

pub fn canonical_id_with_context( &self, name: &str, version: Option<&str>, group: Option<&str>, ) -> CanonicalIdResult

Get the best available canonical ID with component context for stable fallback

This method uses a tiered fallback strategy:

1. PURL (most reliable)
2. CPE
3. SWHID (content-addressed, CRA prEN 40000-1-3 named)
4. SWID
5. Synthetic (group:name@version) - stable across regenerations
6. Format-specific ID (least stable)

Returns both the ID and any warnings about stability.

pub fn has_stable_id(&self) -> bool

Check if this component has any stable identifiers

pub fn id_reliability(&self) -> IdReliability

Get the reliability level of available identifiers

pub fn has_cra_identifier(&self) -> bool

Returns true if this component has any of the CRA-named identifier types (PURL, CPE, SWHID, or SWID), satisfying CRA Annex I Part II identifier-traceability and prEN 40000-1-3 [PRE-7-RQ-07].

Trait Implementations

impl Clone for ComponentIdentifiers

fn clone(&self) -> ComponentIdentifiers

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ComponentIdentifiers

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ComponentIdentifiers

fn default() -> ComponentIdentifiers

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ComponentIdentifiers

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ComponentIdentifiers

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.