{"inputSchema":{"type":"object","required":["files"],"additionalProperties":false,"properties":{"files":{"type":"array","minItems":1,"maxItems":10,"description":"The manifest or lock files.","items":{"type":"object","required":["content"],"additionalProperties":false,"properties":{"filename":{"type":"string","maxLength":300,"description":"File name; the type is detected from content if absent."},"content":{"type":"string","maxLength":4194304,"description":"File contents as text."}}}},"format":{"type":"string","enum":["cyclonedx","spdx","plain"],"default":"cyclonedx","description":"Output format."},"include_dev":{"type":"boolean","default":false,"description":"Include development-only dependencies."},"project_name":{"type":"string","maxLength":200,"default":"unnamed-project","description":"Name for the document metadata."}}},"requestExample":{"files":[{"filename":"package-lock.json","content":"{\"name\": \"synthetic-example\", \"lockfileVersion\": 3, \"packages\": {\"\": {\"name\": \"synthetic-example\"}, \"node_modules/lodash\": {\"version\": \"4.17.21\"}}}"}],"format":"cyclonedx","project_name":"synthetic-example"},"price_usdc":"0.005","example_request":{"files":[{"filename":"package-lock.json","content":"{\"name\": \"synthetic-example\", \"lockfileVersion\": 3, \"packages\": {\"\": {\"name\": \"synthetic-example\"}, \"node_modules/lodash\": {\"version\": \"4.17.21\"}}}"}],"format":"cyclonedx","project_name":"synthetic-example"},"serviceName":"HALOWERK sicherwerk","tags":["security","sbom","cyclonedx","spdx","supply-chain"],"outputSchema":{"type":"object"},"outputExample":{"format":"cyclonedx","document":{"bomFormat":"CycloneDX","specVersion":"1.5","serialNumber":"urn:uuid:736beb5b-c03c-48f7-a875-1a303ddbc99d","version":1,"metadata":{"timestamp":"2026-10-22T23:41:36.986Z","tools":[{"vendor":"HALOWERK","name":"sicherwerk","version":"1.0"}],"component":{"type":"application","name":"synthetic-example"}},"components":[{"type":"library","name":"lodash","version":"4.17.21","purl":"pkg:npm/lodash@4.17.21","scope":"required","properties":[{"name":"halowerk:direct","value":"true"}]}]},"component_count":1,"direct_count":1,"transitive_count":0,"dev_included":false,"dev_excluded_count":0,"ecosystems":{"npm":1},"files":[{"filename":"package-lock.json","recognised":true,"type":"npm-Sperrdatei","exact_versions":true,"components":1}],"exact_versions":true,"evidence_note":"Alle Versionen stammen aus Sperrdateien und sind exakt. Diese Stueckliste beschreibt, was tatsaechlich installiert ist.","components_without_version":0,"next_step":"Die Komponentenliste laesst sich unveraendert an /v1/cve-check und /v1/license-check weiterreichen.","generated_at":"2026-10-22T23:41:36.986Z","duration_ms":1,"limits":"Nur die uebergebenen Dateien werden gelesen — keine Registry, kein Netz. Erkannt werden npm, pip, Go, Cargo. Gebuendelte, gespiegelte oder ueber Systempaketverwaltungen installierte Abhaengigkeiten erscheinen nicht, ebensowenig alles, was zur Laufzeit nachgeladen wird."}}