[Feature] Added ML-BOM examples

[galmo-noma]

Added basic examples for foundation model, open source model, and dataset

[jkowalleck]

Thank you for adding MLBOM, @galmo-noma . 👍

Could you modify your change request according to the remarks below?

[stevespringett]

Are these values "tags" or are you intending to use properties which are name value pairs. These values seem to be hugging face specific which include the category:value.

[galmo-noma]

Converted these values to "properties", let me know if this is what you had in mind

[stevespringett]

This is a data component but does not include a data property. Data components should include the data property, Without it, the consumer does not know what kind of data this is (e.g. configuration, source code, dataset, etc). Refer to https://cyclonedx.org/docs/1.6/json/#components_items_data

[galmo-noma]

Added data property. I noticed it includes also a contents.url property. Should I put the huggingface link here, in externalReferences.url, or both?

[stevespringett]

Do you want to include a data subcomponent within the machine-learning-model? If so, that would tell the consumer information about the data used in this foundation model.

This component does not include the modelCard property, which it should.

Refer to:

• https://cyclonedx.org/docs/1.6/json/#components_items_data
• https://cyclonedx.org/docs/1.6/json/#components_items_modelCard

[galmo-noma]

1. I was struggling to find what interesting information about GPT-4o should we add to the modelCard, since we are not accessible to the datasets it was trained on, to the complete ethical considerations, etc . I added a proposal of describing the model architecture, and the inputs & outputs. let me know what do you think :)

2. Maybe I misunderstood, but as far as I understand, components that are not typed data, should not have the data property defined. Can you please advise?
   (quote from here)

[stevespringett]

Same issue here. The type does not have a modelCard property. And there should ideally be a data subcomponent.

[galmo-noma]

1. I added modelCard that includes the datasets this huggingface model was trained on
2. (Same as above) Maybe I misunderstood, but as far as I understand, components that are not typed data, should not have the data property defined. Can you please advise?
   (quote from here)

[galmo-noma]

Thanks for the time making those comments :)

[galmo-noma]

Converted these values to "properties", let me know if this is what you had in mind

[galmo-noma]

Added data property. I noticed it includes also a contents.url property. Should I put the huggingface link here, in externalReferences.url, or both?

[galmo-noma]

1. I was struggling to find what interesting information about GPT-4o should we add to the modelCard, since we are not accessible to the datasets it was trained on, to the complete ethical considerations, etc . I added a proposal of describing the model architecture, and the inputs & outputs. let me know what do you think :)

2. Maybe I misunderstood, but as far as I understand, components that are not typed data, should not have the data property defined. Can you please advise?
   (quote from here)

[galmo-noma]

1. I added modelCard that includes the datasets this huggingface model was trained on
2. (Same as above) Maybe I misunderstood, but as far as I understand, components that are not typed data, should not have the data property defined. Can you please advise?
   (quote from here)