Struct DocumentMetadata 

pub struct DocumentMetadata {

    pub format: SbomFormat,
    pub format_version: String,
    pub spec_version: String,
    pub serial_number: Option<String>,
    pub doc_version: Option<u32>,
    pub created: DateTime<Utc>,
    pub creators: Vec<Creator>,
    pub name: Option<String>,
    pub security_contact: Option<String>,
    pub vulnerability_disclosure_url: Option<String>,
    pub support_end_date: Option<DateTime<Utc>>,
    pub lifecycle_phase: Option<String>,
    pub completeness_declaration: CompletenessDeclaration,
    pub signature: Option<SignatureInfo>,
    pub distribution_classification: Option<String>,
    pub citations_count: usize,
}

Document-level metadata

Fields

format: SbomFormat

SBOM format type

format_version: String

Format version (e.g., “1.5” for CycloneDX)

spec_version: String

Specification version

serial_number: Option<String>

Serial number or document namespace

doc_version: Option<u32>

Document revision counter (CycloneDX top-level version, bumped on each BOM revision of the same serialNumber). None for formats without a revision counter (SPDX) and for documents that omit it. Additive: skipped in JSON when absent.

created: DateTime<Utc>

Creation timestamp

creators: Vec<Creator>

Creators/authors

name: Option<String>

Document name

security_contact: Option<String>

Security contact for vulnerability disclosure (CRA requirement)

vulnerability_disclosure_url: Option<String>

URL for vulnerability disclosure policy/portal

support_end_date: Option<DateTime<Utc>>

Support/end-of-life date for security updates

lifecycle_phase: Option<String>

SBOM lifecycle phase (e.g., “build”, “pre-build”, “operations”)

completeness_declaration: CompletenessDeclaration

Self-declared completeness level (from CycloneDX compositions)

signature: Option<SignatureInfo>

Digital signature information (from CycloneDX signature field)

distribution_classification: Option<String>

Distribution classification (e.g., TLP: CLEAR, GREEN, AMBER, RED)

citations_count: usize

Number of data provenance citations (CycloneDX 1.7+)

Implementations

impl DocumentMetadata

pub fn has_known_timestamp(&self) -> bool

Whether the document carries a real creation timestamp.

Parsers substitute DateTime::UNIX_EPOCH when the source document has no (or an unparseable) timestamp, so the content hash stays deterministic. Consumers that compute an AGE or gate on freshness must use this to distinguish “no timestamp” from a document that genuinely claims 1970 — otherwise a missing timestamp reads as a ~55-year-old SBOM.

Trait Implementations

impl Clone for DocumentMetadata

fn clone(&self) -> DocumentMetadata

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DocumentMetadata

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DocumentMetadata

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DocumentMetadata

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for DocumentMetadata

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.