{ "components": [ { "bom-ref": "CacheControl==0.14.4", "description": "httplib2 caching for requests", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/psf/cachecontrol/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/psf/cachecontrol" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pypi.org/project/CacheControl/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "CacheControl", "properties": [ { "name": "cdx:python:package:required-extra", "value": "filecache" } ], "purl": "pkg:pypi/cachecontrol@0.14.4", "type": "library", "version": "0.14.4" }, { "bom-ref": "Django==6.0.3", "description": "A high-level Python web framework that encourages rapid development and clean, pragmatic design.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://docs.djangoproject.com/" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://code.djangoproject.com/" }, { "comment": "from packaging metadata Project-URL: Release notes", "type": "other", "url": "https://docs.djangoproject.com/en/stable/releases/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/django/django" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://www.djangoproject.com/fundraising/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://www.djangoproject.com/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "Django", "purl": "pkg:pypi/django@6.0.3", "type": "library", "version": "6.0.3" }, { "bom-ref": "PyYAML==6.0.3", "description": "YAML parser and emitter for Python", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://pypi.org/project/PyYAML/" }, { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pyyaml.org/wiki/PyYAMLDocumentation" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/yaml/pyyaml/issues" }, { "comment": "from packaging metadata Project-URL: Mailing lists", "type": "other", "url": "http://lists.sourceforge.net/lists/listinfo/yaml-core" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/yaml/pyyaml" }, { "comment": "from packaging metadata Project-URL: CI", "type": "other", "url": "https://github.com/yaml/pyyaml/actions" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://pyyaml.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "PyYAML", "purl": "pkg:pypi/pyyaml@6.0.3", "type": "library", "version": "6.0.3" }, { "bom-ref": "Pygments==2.20.0", "description": "Pygments is a syntax highlighting package written in Python.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pygments.org/docs" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/pygments/pygments/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pygments/pygments" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/pygments/pygments/blob/master/CHANGES" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pygments.org" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-2-Clause" } } ], "name": "Pygments", "purl": "pkg:pypi/pygments@2.20.0", "type": "library", "version": "2.20.0" }, { "bom-ref": "arrow==1.4.0", "description": "Better dates & times for Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://arrow.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/arrow-py/arrow/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/arrow-py/arrow" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "arrow", "purl": "pkg:pypi/arrow@1.4.0", "type": "library", "version": "1.4.0" }, { "bom-ref": "asgiref==3.11.1", "description": "ASGI specs, helper code, and adapters", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://asgi.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Further Documentation", "type": "other", "url": "https://docs.djangoproject.com/en/stable/topics/async/#async-adapter-functions" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/django/asgiref/blob/master/CHANGELOG.txt" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/django/asgiref/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "asgiref", "purl": "pkg:pypi/asgiref@3.11.1", "type": "library", "version": "3.11.1" }, { "bom-ref": "attrs==26.1.0", "description": "Classes Without Boilerplate", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://www.attrs.org/" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/hynek" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-attrs?utm_source=pypi-attrs&utm_medium=pypi" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://www.attrs.org/en/stable/changelog.html" }, { "comment": "from packaging metadata Project-URL: GitHub", "type": "vcs", "url": "https://github.com/python-attrs/attrs" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "attrs", "purl": "pkg:pypi/attrs@26.1.0", "type": "library", "version": "26.1.0" }, { "bom-ref": "bandit==1.9.4", "description": "Security oriented static analyser for python code.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://bandit.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/PyCQA/bandit/issues" }, { "comment": "from packaging metadata Project-URL: Discord", "type": "other", "url": "https://discord.gg/qYxpadCgkx" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/PyCQA/bandit" }, { "comment": "from packaging metadata Project-URL: Release Notes", "type": "other", "url": "https://github.com/PyCQA/bandit/releases" }, { "comment": "from packaging metadata Project-URL: Sponsor", "type": "other", "url": "https://psfmember.org/civicrm/contribute/transact/?reset=1&id=42" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://bandit.readthedocs.io/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "bandit", "purl": "pkg:pypi/bandit@1.9.4", "type": "library", "version": "1.9.4" }, { "bom-ref": "boolean.py==5.0", "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/bastikr/boolean.py" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-2-Clause" } } ], "name": "boolean.py", "purl": "pkg:pypi/boolean.py@5.0", "type": "library", "version": "5.0" }, { "bom-ref": "certifi==2026.2.25", "description": "Python package for providing Mozilla's CA Bundle.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/certifi/python-certifi" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/certifi/python-certifi" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MPL-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)" } } ], "name": "certifi", "purl": "pkg:pypi/certifi@2026.2.25", "type": "library", "version": "2026.2.25" }, { "bom-ref": "chardet==5.2.0", "description": "Universal encoding detector for Python 3", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://chardet.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/chardet/chardet/issues" }, { "comment": "from packaging metadata Project-URL: GitHub Project", "type": "other", "url": "https://github.com/chardet/chardet" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/chardet/chardet" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: GNU Lesser General Public License v2 or later (LGPLv2+)" } } ], "name": "chardet", "purl": "pkg:pypi/chardet@5.2.0", "type": "library", "version": "5.2.0" }, { "bom-ref": "charset-normalizer==3.4.7", "description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://charset-normalizer.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/jawah/charset_normalizer/issues" }, { "comment": "from packaging metadata Project-URL: Code", "type": "other", "url": "https://github.com/jawah/charset_normalizer" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "charset-normalizer", "purl": "pkg:pypi/charset-normalizer@3.4.7", "type": "library", "version": "3.4.7" }, { "bom-ref": "cyclonedx-bom==7.3.0", "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://cyclonedx-bom-tool.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python/issues" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python/releases" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python/#readme" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "cyclonedx-bom", "purl": "pkg:pypi/cyclonedx-bom@7.3.0", "type": "library", "version": "7.3.0" }, { "bom-ref": "cyclonedx-py==1.0.1", "description": "Alias for package 'cyclonedx-bom'", "externalReferences": [ { "comment": "from packaging metadata Project-URL: repository", "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/#package_aliases/cyclonedx-py" } ], "name": "cyclonedx-py", "purl": "pkg:pypi/cyclonedx-py@1.0.1", "type": "library", "version": "1.0.1" }, { "bom-ref": "cyclonedx-python-lib==11.7.0", "description": "Python library for CycloneDX", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://cyclonedx-python-library.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/releases" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python-lib" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "cyclonedx-python-lib", "properties": [ { "name": "cdx:python:package:required-extra", "value": "validation" } ], "purl": "pkg:pypi/cyclonedx-python-lib@11.7.0", "type": "library", "version": "11.7.0" }, { "bom-ref": "defusedxml==0.7.1", "description": "XML bomb protection for Python stdlib modules", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://pypi.python.org/pypi/defusedxml" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/tiran/defusedxml" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Python-2.0" } } ], "name": "defusedxml", "purl": "pkg:pypi/defusedxml@0.7.1", "type": "library", "version": "0.7.1" }, { "bom-ref": "django-anymail==14.0", "description": "Django email backends and webhooks for Amazon SES, Brevo, MailerSend, Mailgun, Mailjet, Mailtrap, Mandrill, Postal, Postmark, Resend, Scaleway TEM, SendGrid, SparkPost, and Unisender Go (EmailBackend, transactional email tracking and inbound email signals)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://anymail.dev/en/stable/" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/anymail/django-anymail/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/anymail/django-anymail" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://anymail.dev/en/stable/changelog/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/anymail/django-anymail" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "django-anymail", "purl": "pkg:pypi/django-anymail@14.0", "type": "library", "version": "14.0" }, { "bom-ref": "filelock==3.25.2", "description": "A platform independent file lock.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://py-filelock.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/tox-dev/py-filelock/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/tox-dev/py-filelock" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/tox-dev/py-filelock" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "filelock", "purl": "pkg:pypi/filelock@3.25.2", "type": "library", "version": "3.25.2" }, { "bom-ref": "fqdn==1.5.1", "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/ypcrts/fqdn" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)" } } ], "name": "fqdn", "purl": "pkg:pypi/fqdn@1.5.1", "type": "library", "version": "1.5.1" }, { "bom-ref": "idna==3.11", "description": "Internationalized Domain Names in Applications (IDNA)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/kjd/idna/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/kjd/idna" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/kjd/idna/blob/master/HISTORY.rst" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "idna", "purl": "pkg:pypi/idna@3.11", "type": "library", "version": "3.11" }, { "bom-ref": "isoduration==20.11.0", "description": "Operations with ISO 8601 durations", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Bug Reports", "type": "issue-tracker", "url": "https://github.com/bolsote/isoduration/issues" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/bolsote/isoduration/blob/master/CHANGELOG" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/bolsote/isoduration" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/bolsote/isoduration" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "ISC" } } ], "name": "isoduration", "purl": "pkg:pypi/isoduration@20.11.0", "type": "library", "version": "20.11.0" }, { "bom-ref": "jsonpointer==3.1.1", "description": "Identify specific nodes in a JSON document (RFC 6901) ", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/stefankoegl/python-json-pointer" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "jsonpointer", "purl": "pkg:pypi/jsonpointer@3.1.1", "type": "library", "version": "3.1.1" }, { "bom-ref": "jsonschema==4.26.0", "description": "An implementation of JSON Schema validation for Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://python-jsonschema.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/python-jsonschema/jsonschema/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-jsonschema/jsonschema" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema?utm_source=pypi-jsonschema&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/python-jsonschema/jsonschema" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "jsonschema", "properties": [ { "name": "cdx:python:package:required-extra", "value": "format-nongpl" } ], "purl": "pkg:pypi/jsonschema@4.26.0", "type": "library", "version": "4.26.0" }, { "bom-ref": "jsonschema-specifications==2025.9.1", "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://jsonschema-specifications.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/python-jsonschema/jsonschema-specifications/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-jsonschema/jsonschema-specifications" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema-specifications?utm_source=pypi-jsonschema-specifications&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/python-jsonschema/jsonschema-specifications" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "jsonschema-specifications", "purl": "pkg:pypi/jsonschema-specifications@2025.9.1", "type": "library", "version": "2025.9.1" }, { "bom-ref": "lark==1.3.1", "description": "a modern parsing library", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Download", "type": "distribution", "url": "https://github.com/lark-parser/lark/tarball/master" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/lark-parser/lark" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "lark", "purl": "pkg:pypi/lark@1.3.1", "type": "library", "version": "1.3.1" }, { "bom-ref": "license-expression==30.4.4", "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/aboutcode-org/license-expression" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "license-expression", "purl": "pkg:pypi/license-expression@30.4.4", "type": "library", "version": "30.4.4" }, { "bom-ref": "lxml==6.0.2", "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://bugs.launchpad.net/lxml" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/lxml/lxml" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://lxml.de/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "lxml", "purl": "pkg:pypi/lxml@6.0.2", "type": "library", "version": "6.0.2" }, { "bom-ref": "markdown-it-py==4.0.0", "description": "Python port of markdown-it. Markdown parsing, done right!", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://markdown-it-py.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/executablebooks/markdown-it-py" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "markdown-it-py", "purl": "pkg:pypi/markdown-it-py@4.0.0", "type": "library", "version": "4.0.0" }, { "bom-ref": "mdurl==0.1.2", "description": "Markdown URL utilities", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/executablebooks/mdurl" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "mdurl", "purl": "pkg:pypi/mdurl@0.1.2", "type": "library", "version": "0.1.2" }, { "bom-ref": "msgpack==1.1.2", "description": "MessagePack serializer", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://msgpack-python.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/msgpack/msgpack-python/issues" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/msgpack/msgpack-python/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://msgpack.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "msgpack", "purl": "pkg:pypi/msgpack@1.1.2", "type": "library", "version": "1.1.2" }, { "bom-ref": "packageurl-python==0.17.6", "description": "A purl aka. Package URL parser and builder", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/package-url/packageurl-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "packageurl-python", "purl": "pkg:pypi/packageurl-python@0.17.6", "type": "library", "version": "0.17.6" }, { "bom-ref": "packaging==26.0", "description": "Core utilities for Python packages", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://packaging.pypa.io/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/packaging" } ], "licenses": [ { "acknowledgement": "declared", "expression": "Apache-2.0 OR BSD-2-Clause" } ], "name": "packaging", "purl": "pkg:pypi/packaging@26.0", "type": "library", "version": "26.0" }, { "bom-ref": "pip==25.0.1", "description": "The PyPA recommended tool for installing Python packages.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pip.pypa.io" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/pip" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://pip.pypa.io/en/stable/news/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pip.pypa.io/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pip", "purl": "pkg:pypi/pip@25.0.1", "type": "library", "version": "25.0.1" }, { "bom-ref": "pip-api==0.0.34", "description": "An unofficial, importable pip API", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "http://github.com/di/pip-api" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "pip-api", "purl": "pkg:pypi/pip-api@0.0.34", "type": "library", "version": "0.0.34" }, { "bom-ref": "pip-requirements-parser==32.0.1", "description": "pip requirements parser - a mostly correct pip requirements parsing library because it uses pip's own code.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/nexB/pip-requirements-parser" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pip-requirements-parser", "purl": "pkg:pypi/pip-requirements-parser@32.0.1", "type": "library", "version": "32.0.1" }, { "bom-ref": "pip_audit==2.10.0", "description": "A tool for scanning Python environments for known vulnerabilities", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/pypa/pip-audit/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/pip-audit" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pypi.org/project/pip-audit/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "pip_audit", "purl": "pkg:pypi/pip-audit@2.10.0", "type": "library", "version": "2.10.0" }, { "bom-ref": "platformdirs==4.9.4", "description": "A small Python package for determining appropriate platform-specific dirs, e.g. a `user data dir`.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://platformdirs.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/tox-dev/platformdirs/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/tox-dev/platformdirs" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://platformdirs.readthedocs.io/en/latest/changelog.html" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/tox-dev/platformdirs" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "platformdirs", "purl": "pkg:pypi/platformdirs@4.9.4", "type": "library", "version": "4.9.4" }, { "bom-ref": "py-serializable==2.1.0", "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://py-serializable.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/madpah/serializable/issues" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/madpah/serializable" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/madpah/serializable#readme" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "py-serializable", "purl": "pkg:pypi/py-serializable@2.1.0", "type": "library", "version": "2.1.0" }, { "bom-ref": "pyparsing==3.3.2", "description": "pyparsing - Classes and methods to define and execute parsing grammars", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pyparsing-docs.readthedocs.io/en/latest/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pyparsing/pyparsing.git" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/pyparsing/pyparsing/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pyparsing", "purl": "pkg:pypi/pyparsing@3.3.2", "type": "library", "version": "3.3.2" }, { "bom-ref": "python-dateutil==2.9.0.post0", "description": "Extensions to the standard Python datetime module", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://dateutil.readthedocs.io/en/stable/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/dateutil/dateutil" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/dateutil/dateutil" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "python-dateutil", "purl": "pkg:pypi/python-dateutil@2.9.0.post0", "type": "library", "version": "2.9.0.post0" }, { "bom-ref": "referencing==0.37.0", "description": "JSON Referencing + Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://referencing.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/python-jsonschema/referencing/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-jsonschema/referencing" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-referencing?utm_source=pypi-referencing&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://referencing.readthedocs.io/en/stable/changes/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/python-jsonschema/referencing" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "referencing", "purl": "pkg:pypi/referencing@0.37.0", "type": "library", "version": "0.37.0" }, { "bom-ref": "requests==2.33.1", "description": "Python HTTP for Humans.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://requests.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/psf/requests" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "requests", "purl": "pkg:pypi/requests@2.33.1", "type": "library", "version": "2.33.1" }, { "bom-ref": "rfc3339-validator==0.1.4", "description": "A pure python RFC3339 validator", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/naimetti/rfc3339-validator" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rfc3339-validator", "purl": "pkg:pypi/rfc3339-validator@0.1.4", "type": "library", "version": "0.1.4" }, { "bom-ref": "rfc3986-validator==0.1.1", "description": "Pure python rfc3986 validator", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/naimetti/rfc3986-validator" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rfc3986-validator", "purl": "pkg:pypi/rfc3986-validator@0.1.1", "type": "library", "version": "0.1.1" }, { "bom-ref": "rfc3987-syntax==1.1.0", "description": "Helper functions to syntactically validate strings according to RFC 3987.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://github.com/willynilly/rfc3987-syntax#readme" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/willynilly/rfc3987-syntax/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/willynilly/rfc3987-syntax" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/willynilly/rfc3987-syntax" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rfc3987-syntax", "purl": "pkg:pypi/rfc3987-syntax@1.1.0", "type": "library", "version": "1.1.0" }, { "bom-ref": "rich==14.3.3", "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://rich.readthedocs.io/en/latest/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/Textualize/rich" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rich", "purl": "pkg:pypi/rich@14.3.3", "type": "library", "version": "14.3.3" }, { "bom-ref": "rpds-py==0.30.0", "description": "Python bindings to Rust's persistent data structures (rpds)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://rpds.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/crate-py/rpds/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/crate-py/rpds" }, { "comment": "from packaging metadata Project-URL: Upstream", "type": "other", "url": "https://github.com/orium/rpds" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/crate-py/rpds" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rpds-py", "purl": "pkg:pypi/rpds-py@0.30.0", "type": "library", "version": "0.30.0" }, { "bom-ref": "six==1.17.0", "description": "Python 2 and 3 compatibility utilities", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/benjaminp/six" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "six", "purl": "pkg:pypi/six@1.17.0", "type": "library", "version": "1.17.0" }, { "bom-ref": "sortedcontainers==2.4.0", "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "http://www.grantjenks.com/docs/sortedcontainers/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "sortedcontainers", "purl": "pkg:pypi/sortedcontainers@2.4.0", "type": "library", "version": "2.4.0" }, { "bom-ref": "sqlparse==0.5.5", "description": "A non-validating SQL parser.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://sqlparse.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/andialbrecht/sqlparse/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/andialbrecht/sqlparse" }, { "comment": "from packaging metadata Project-URL: Release Notes", "type": "other", "url": "https://sqlparse.readthedocs.io/en/latest/changes.html" }, { "comment": "from packaging metadata Project-URL: Home", "type": "website", "url": "https://github.com/andialbrecht/sqlparse" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "sqlparse", "purl": "pkg:pypi/sqlparse@0.5.5", "type": "library", "version": "0.5.5" }, { "bom-ref": "stevedore==5.7.0", "description": "Manage dynamic plugins for Python applications", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://opendev.org/openstack/stevedore" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://docs.openstack.org/stevedore" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "stevedore", "purl": "pkg:pypi/stevedore@5.7.0", "type": "library", "version": "5.7.0" }, { "bom-ref": "tomli==2.4.1", "description": "A lil' TOML parser", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/hukkin/tomli/blob/master/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/hukkin/tomli" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "tomli", "purl": "pkg:pypi/tomli@2.4.1", "type": "library", "version": "2.4.1" }, { "bom-ref": "tomli_w==1.2.0", "description": "A lil' TOML writer", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/hukkin/tomli-w/blob/master/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/hukkin/tomli-w" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "tomli_w", "purl": "pkg:pypi/tomli-w@1.2.0", "type": "library", "version": "1.2.0" }, { "bom-ref": "typing_extensions==4.15.0", "description": "Backported and Experimental Type Hints for Python 3.9+", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://typing-extensions.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/python/typing_extensions/issues" }, { "comment": "from packaging metadata Project-URL: Q & A", "type": "other", "url": "https://github.com/python/typing/discussions" }, { "comment": "from packaging metadata Project-URL: Changes", "type": "release-notes", "url": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/python/typing_extensions" }, { "comment": "from packaging metadata Project-URL: Home", "type": "website", "url": "https://github.com/python/typing_extensions" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "PSF-2.0" } } ], "name": "typing_extensions", "purl": "pkg:pypi/typing-extensions@4.15.0", "type": "library", "version": "4.15.0" }, { "bom-ref": "tzdata==2026.1", "description": "Provider of IANA time zone data", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://tzdata.python.org" }, { "comment": "from packaging metadata Project-URL: Bug Reports", "type": "issue-tracker", "url": "https://github.com/python/tzdata/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python/tzdata" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/python/tzdata" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "tzdata", "purl": "pkg:pypi/tzdata@2026.1", "type": "library", "version": "2026.1" }, { "bom-ref": "uri-template==1.3.0", "description": "RFC 6570 URI Template Processor", "externalReferences": [ { "comment": "from packaging metadata Project-URL: homepage", "type": "website", "url": "https://gitlab.linss.com/open-source/python/uri-template" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "uri-template", "purl": "pkg:pypi/uri-template@1.3.0", "type": "library", "version": "1.3.0" }, { "bom-ref": "urllib3==2.6.3", "description": "HTTP library with thread-safe connection pooling, file post, and more.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://urllib3.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/urllib3/urllib3/issues" }, { "comment": "from packaging metadata Project-URL: Code", "type": "other", "url": "https://github.com/urllib3/urllib3" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/urllib3/urllib3/blob/main/CHANGES.rst" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "urllib3", "purl": "pkg:pypi/urllib3@2.6.3", "type": "library", "version": "2.6.3" }, { "bom-ref": "webcolors==25.10.0", "description": "A library for working with the color formats defined by HTML and CSS.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://webcolors.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/ubernostrum/webcolors" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "webcolors", "purl": "pkg:pypi/webcolors@25.10.0", "type": "library", "version": "25.10.0" } ], "dependencies": [ { "dependsOn": [ "filelock==3.25.2", "msgpack==1.1.2", "requests==2.33.1" ], "ref": "CacheControl==0.14.4" }, { "dependsOn": [ "asgiref==3.11.1", "sqlparse==0.5.5", "tzdata==2026.1" ], "ref": "Django==6.0.3" }, { "ref": "PyYAML==6.0.3" }, { "ref": "Pygments==2.20.0" }, { "dependsOn": [ "python-dateutil==2.9.0.post0", "tzdata==2026.1" ], "ref": "arrow==1.4.0" }, { "dependsOn": [ "typing_extensions==4.15.0" ], "ref": "asgiref==3.11.1" }, { "ref": "attrs==26.1.0" }, { "dependsOn": [ "PyYAML==6.0.3", "rich==14.3.3", "stevedore==5.7.0", "tomli==2.4.1" ], "ref": "bandit==1.9.4" }, { "ref": "boolean.py==5.0" }, { "ref": "certifi==2026.2.25" }, { "ref": "chardet==5.2.0" }, { "ref": "charset-normalizer==3.4.7" }, { "dependsOn": [ "chardet==5.2.0", "cyclonedx-python-lib==11.7.0", "packageurl-python==0.17.6", "packaging==26.0", "pip-requirements-parser==32.0.1", "tomli==2.4.1" ], "ref": "cyclonedx-bom==7.3.0" }, { "dependsOn": [ "cyclonedx-bom==7.3.0" ], "ref": "cyclonedx-py==1.0.1" }, { "dependsOn": [ "jsonschema==4.26.0", "license-expression==30.4.4", "lxml==6.0.2", "packageurl-python==0.17.6", "py-serializable==2.1.0", "referencing==0.37.0", "sortedcontainers==2.4.0", "typing_extensions==4.15.0" ], "ref": "cyclonedx-python-lib==11.7.0" }, { "ref": "defusedxml==0.7.1" }, { "dependsOn": [ "Django==6.0.3", "idna==3.11", "requests==2.33.1", "typing_extensions==4.15.0", "urllib3==2.6.3" ], "ref": "django-anymail==14.0" }, { "ref": "filelock==3.25.2" }, { "ref": "fqdn==1.5.1" }, { "ref": "idna==3.11" }, { "dependsOn": [ "arrow==1.4.0" ], "ref": "isoduration==20.11.0" }, { "ref": "jsonpointer==3.1.1" }, { "dependsOn": [ "referencing==0.37.0" ], "ref": "jsonschema-specifications==2025.9.1" }, { "dependsOn": [ "attrs==26.1.0", "fqdn==1.5.1", "idna==3.11", "isoduration==20.11.0", "jsonpointer==3.1.1", "jsonschema-specifications==2025.9.1", "referencing==0.37.0", "rfc3339-validator==0.1.4", "rfc3986-validator==0.1.1", "rfc3987-syntax==1.1.0", "rpds-py==0.30.0", "uri-template==1.3.0", "webcolors==25.10.0" ], "ref": "jsonschema==4.26.0" }, { "ref": "lark==1.3.1" }, { "dependsOn": [ "boolean.py==5.0" ], "ref": "license-expression==30.4.4" }, { "ref": "lxml==6.0.2" }, { "dependsOn": [ "PyYAML==6.0.3", "mdurl==0.1.2", "requests==2.33.1" ], "ref": "markdown-it-py==4.0.0" }, { "ref": "mdurl==0.1.2" }, { "ref": "msgpack==1.1.2" }, { "ref": "packageurl-python==0.17.6" }, { "ref": "packaging==26.0" }, { "dependsOn": [ "pip==25.0.1" ], "ref": "pip-api==0.0.34" }, { "dependsOn": [ "packaging==26.0", "pyparsing==3.3.2" ], "ref": "pip-requirements-parser==32.0.1" }, { "ref": "pip==25.0.1" }, { "dependsOn": [ "CacheControl==0.14.4", "cyclonedx-python-lib==11.7.0", "packaging==26.0", "pip-api==0.0.34", "pip-requirements-parser==32.0.1", "platformdirs==4.9.4", "requests==2.33.1", "rich==14.3.3", "tomli==2.4.1", "tomli_w==1.2.0" ], "ref": "pip_audit==2.10.0" }, { "ref": "platformdirs==4.9.4" }, { "dependsOn": [ "defusedxml==0.7.1" ], "ref": "py-serializable==2.1.0" }, { "ref": "pyparsing==3.3.2" }, { "dependsOn": [ "six==1.17.0" ], "ref": "python-dateutil==2.9.0.post0" }, { "dependsOn": [ "attrs==26.1.0", "rpds-py==0.30.0", "typing_extensions==4.15.0" ], "ref": "referencing==0.37.0" }, { "dependsOn": [ "certifi==2026.2.25", "chardet==5.2.0", "charset-normalizer==3.4.7", "idna==3.11", "urllib3==2.6.3" ], "ref": "requests==2.33.1" }, { "dependsOn": [ "six==1.17.0" ], "ref": "rfc3339-validator==0.1.4" }, { "ref": "rfc3986-validator==0.1.1" }, { "dependsOn": [ "lark==1.3.1" ], "ref": "rfc3987-syntax==1.1.0" }, { "dependsOn": [ "Pygments==2.20.0", "markdown-it-py==4.0.0" ], "ref": "rich==14.3.3" }, { "ref": "rpds-py==0.30.0" }, { "ref": "six==1.17.0" }, { "ref": "sortedcontainers==2.4.0" }, { "ref": "sqlparse==0.5.5" }, { "ref": "stevedore==5.7.0" }, { "ref": "tomli==2.4.1" }, { "ref": "tomli_w==1.2.0" }, { "ref": "typing_extensions==4.15.0" }, { "ref": "tzdata==2026.1" }, { "ref": "uri-template==1.3.0" }, { "ref": "urllib3==2.6.3" }, { "ref": "webcolors==25.10.0" } ], "metadata": { "timestamp": "2026-04-04T13:09:44.361313+00:00", "tools": { "components": [ { "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments", "externalReferences": [ { "type": "build-system", "url": "https://github.com/CycloneDX/cyclonedx-python/actions" }, { "type": "distribution", "url": "https://pypi.org/project/cyclonedx-bom/" }, { "type": "documentation", "url": "https://cyclonedx-bom-tool.readthedocs.io/" }, { "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python/issues" }, { "type": "license", "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE" }, { "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md" }, { "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/" }, { "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python/#readme" } ], "group": "CycloneDX", "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "cyclonedx-py", "type": "application", "version": "7.3.0" }, { "description": "Python library for CycloneDX", "externalReferences": [ { "type": "build-system", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions" }, { "type": "distribution", "url": "https://pypi.org/project/cyclonedx-python-lib/" }, { "type": "documentation", "url": "https://cyclonedx-python-library.readthedocs.io/" }, { "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues" }, { "type": "license", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE" }, { "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md" }, { "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python-lib" }, { "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme" } ], "group": "CycloneDX", "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "cyclonedx-python-lib", "type": "library", "version": "11.7.0" } ] } }, "serialNumber": "urn:uuid:84c9fec9-8dbe-4075-ac3a-6b6075b1e2a1", "version": 1, "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6" }