A set of structured data elements containing authoritative identification information about a software component.
Sources:
CNSSI 4009-2015
from
ISO/IEC 19770-2