{"bom":{"bomFormat":"CycloneDX","components":[{"bom-ref":"model-file:2a76c5e38a3293df","hashes":[{"alg":"SHA-256","content":"2a76c5e38a3293df346086905c7b2e632530c94fc8afbd1ea0eb2bcdc0c4a4ad"}],"name":"payload-eval-torch","properties":[{"name":"bomlens:modelfile:format","value":"pytorch-zip"},{"name":"bomlens:modelfile:fileName","value":"payload-eval-torch.pt"},{"name":"bomlens:modelfile:size","value":"290"},{"name":"bomlens:weights:pickleFiles","value":"1"},{"name":"bomlens:modelfile:archiveMembers","value":"2"},{"name":"bomlens:localscan:status","value":"unsafe"},{"name":"bomlens:localscan:tool","value":"picklescan@1.0.5"},{"name":"bomlens:localscan:findings","value":"builtins.eval"},{"name":"bomlens:licenseClass","value":"uncategorized"},{"name":"bomlens:assessment:axes","value":"license,security"},{"name":"bomlens:assessment:license","value":"review"},{"name":"bomlens:assessment:license:keys","value":""},{"name":"bomlens:assessment:security","value":"caution"},{"name":"bomlens:assessment:overall","value":"caution"},{"name":"bomlens:assessment:reasons","value":"no license declared (review); file security: local file scan found a code-execution risk — builtins.eval (caution)"}],"purl":"pkg:generic/payload-eval-torch@1.0.0?checksum=sha256:2a76c5e38a3293df346086905c7b2e632530c94fc8afbd1ea0eb2bcdc0c4a4ad","type":"machine-learning-model","version":"1.0.0"},{"bom-ref":"model-file:d8b75d6b602f6067","hashes":[{"alg":"SHA-256","content":"d8b75d6b602f6067d2e7926e8bc1880d18177357a89a0314a46e4684d6bdc0d0"}],"name":"payload-eval","properties":[{"name":"bomlens:modelfile:format","value":"pickle"},{"name":"bomlens:modelfile:fileName","value":"payload-eval.pkl"},{"name":"bomlens:modelfile:size","value":"52"},{"name":"bomlens:weights:pickleFiles","value":"1"},{"name":"bomlens:localscan:status","value":"unsafe"},{"name":"bomlens:localscan:tool","value":"picklescan@1.0.5"},{"name":"bomlens:localscan:findings","value":"builtins.eval"},{"name":"bomlens:licenseClass","value":"uncategorized"},{"name":"bomlens:assessment:axes","value":"license,security"},{"name":"bomlens:assessment:license","value":"review"},{"name":"bomlens:assessment:license:keys","value":""},{"name":"bomlens:assessment:security","value":"caution"},{"name":"bomlens:assessment:overall","value":"caution"},{"name":"bomlens:assessment:reasons","value":"no license declared (review); file security: local file scan found a code-execution risk — builtins.eval (caution)"}],"purl":"pkg:generic/payload-eval@1.0.0?checksum=sha256:d8b75d6b602f6067d2e7926e8bc1880d18177357a89a0314a46e4684d6bdc0d0","type":"machine-learning-model","version":"1.0.0"},{"bom-ref":"model-file:c83d9ed936b2b5b7","hashes":[{"alg":"SHA-256","content":"c83d9ed936b2b5b78591a68845eb46463afc6eee3bb57ca226516c0632dbf27b"}],"name":"plain-weights","properties":[{"name":"bomlens:modelfile:format","value":"pickle"},{"name":"bomlens:modelfile:fileName","value":"plain-weights.pkl"},{"name":"bomlens:modelfile:size","value":"17"},{"name":"bomlens:weights:pickleFiles","value":"1"},{"name":"bomlens:localscan:status","value":"clean"},{"name":"bomlens:localscan:tool","value":"picklescan@1.0.5"},{"name":"bomlens:licenseClass","value":"uncategorized"},{"name":"bomlens:assessment:axes","value":"license,security"},{"name":"bomlens:assessment:license","value":"review"},{"name":"bomlens:assessment:license:keys","value":""},{"name":"bomlens:assessment:security","value":"ok"},{"name":"bomlens:assessment:overall","value":"review"},{"name":"bomlens:assessment:reasons","value":"no license declared (review); file security: local file scan found no code-execution risk (static analysis only, not a malware scan) (ok)"}],"purl":"pkg:generic/plain-weights@1.0.0?checksum=sha256:c83d9ed936b2b5b78591a68845eb46463afc6eee3bb57ca226516c0632dbf27b","type":"machine-learning-model","version":"1.0.0"},{"bom-ref":"model-file:c6a5c1502f23a2fc","hashes":[{"alg":"SHA-256","content":"c6a5c1502f23a2fcbb6e3c371d38fd032dd72b5fd5654c23771a8ff8306745ea"}],"name":"tiny-classifier","properties":[{"name":"bomlens:modelfile:format","value":"safetensors"},{"name":"bomlens:modelfile:fileName","value":"tiny-classifier.safetensors"},{"name":"bomlens:modelfile:size","value":"128"},{"name":"bomlens:modelfile:tensors","value":"1"},{"name":"bomlens:modelfile:parameters","value":"4"},{"name":"bomlens:modelfile:dtypes","value":"F32"},{"name":"bomlens:modelfile:weightFormat","value":"pt"},{"name":"bomlens:localscan:status","value":"not-applicable"},{"name":"bomlens:localscan:tool","value":"picklescan@1.0.5"},{"name":"bomlens:licenseClass","value":"uncategorized"},{"name":"bomlens:assessment:axes","value":"license,security"},{"name":"bomlens:assessment:license","value":"review"},{"name":"bomlens:assessment:license:keys","value":""},{"name":"bomlens:assessment:security","value":"ok"},{"name":"bomlens:assessment:overall","value":"review"},{"name":"bomlens:assessment:reasons","value":"no license declared (review); file security: this weight format does not execute code on load (ok)"}],"purl":"pkg:generic/tiny-classifier@1.0.0?checksum=sha256:c6a5c1502f23a2fcbb6e3c371d38fd032dd72b5fd5654c23771a8ff8306745ea","type":"machine-learning-model","version":"1.0.0"},{"bom-ref":"model-file:2b11ff384b61bdae","hashes":[{"alg":"SHA-256","content":"2b11ff384b61bdae1073b627f7777e7f3faa36e379878b3874d17ce9f9d1abea"}],"name":"tiny-graph","properties":[{"name":"bomlens:modelfile:format","value":"onnx"},{"name":"bomlens:modelfile:fileName","value":"tiny-graph.onnx"},{"name":"bomlens:modelfile:size","value":"26"},{"name":"bomlens:localscan:status","value":"not-applicable"},{"name":"bomlens:localscan:tool","value":"picklescan@1.0.5"},{"name":"bomlens:licenseClass","value":"uncategorized"},{"name":"bomlens:assessment:axes","value":"license,security"},{"name":"bomlens:assessment:license","value":"review"},{"name":"bomlens:assessment:license:keys","value":""},{"name":"bomlens:assessment:security","value":"ok"},{"name":"bomlens:assessment:overall","value":"review"},{"name":"bomlens:assessment:reasons","value":"no license declared (review); file security: this weight format does not execute code on load (ok)"}],"purl":"pkg:generic/tiny-graph@1.0.0?checksum=sha256:2b11ff384b61bdae1073b627f7777e7f3faa36e379878b3874d17ce9f9d1abea","type":"machine-learning-model","version":"1.0.0"},{"bom-ref":"model-file:d01caf1869d71430","hashes":[{"alg":"SHA-256","content":"d01caf1869d714308fc216ada9a659f909a9e2822a56cb16c4ce008b0dc6911f"}],"modelCard":{"modelParameters":{"architectureFamily":"llama"}},"name":"tiny-llama","properties":[{"name":"bomlens:modelfile:format","value":"gguf"},{"name":"bomlens:modelfile:fileName","value":"tiny-llama.gguf"},{"name":"bomlens:modelfile:size","value":"111"},{"name":"bomlens:modelfile:ggufVersion","value":"3"},{"name":"bomlens:modelfile:architecture","value":"llama"},{"name":"bomlens:modelfile:tensors","value":"0"},{"name":"bomlens:localscan:status","value":"not-applicable"},{"name":"bomlens:localscan:tool","value":"picklescan@1.0.5"},{"name":"bomlens:licenseClass","value":"uncategorized"},{"name":"bomlens:assessment:axes","value":"license,security"},{"name":"bomlens:assessment:license","value":"review"},{"name":"bomlens:assessment:license:keys","value":""},{"name":"bomlens:assessment:security","value":"ok"},{"name":"bomlens:assessment:overall","value":"review"},{"name":"bomlens:assessment:reasons","value":"no license declared (review); file security: this weight format does not execute code on load (ok)"}],"purl":"pkg:generic/tiny-llama@1.0.0?checksum=sha256:d01caf1869d714308fc216ada9a659f909a9e2822a56cb16c4ce008b0dc6911f","type":"machine-learning-model","version":"1.0.0"}],"dependencies":[{"dependsOn":["model-file:2a76c5e38a3293df"],"ref":"scan:2a76c5e38a3293df"},{"dependsOn":[],"ref":"model-file:2a76c5e38a3293df"},{"dependsOn":["model-file:d8b75d6b602f6067"],"ref":"scan:d8b75d6b602f6067"},{"dependsOn":[],"ref":"model-file:d8b75d6b602f6067"},{"dependsOn":["model-file:c83d9ed936b2b5b7"],"ref":"scan:c83d9ed936b2b5b7"},{"dependsOn":[],"ref":"model-file:c83d9ed936b2b5b7"},{"dependsOn":["model-file:c6a5c1502f23a2fc"],"ref":"scan:c6a5c1502f23a2fc"},{"dependsOn":[],"ref":"model-file:c6a5c1502f23a2fc"},{"dependsOn":["model-file:2b11ff384b61bdae"],"ref":"scan:2b11ff384b61bdae"},{"dependsOn":[],"ref":"model-file:2b11ff384b61bdae"},{"dependsOn":["model-file:d01caf1869d71430"],"ref":"scan:d01caf1869d71430"},{"dependsOn":[],"ref":"model-file:d01caf1869d71430"}],"metadata":{"lifecycles":[{"phase":"post-build"}],"properties":[{"name":"bomlens:undeclared-fields","value":"unknown-to-author"}],"timestamp":"2026-10-14T23:48:07Z","tools":{"components":[{"name":"BomLens","publisher":"SK Telecom","type":"application","version":"1.13.4"}]}},"serialNumber":"urn:uuid:2a76c5e3-8a32-93df-3460-86905c7b2e63","specVersion":"1.7","version":1,"compositions":[{"aggregate":"unknown"}]},"security":null,"scancode":null}