{ "components": [ { "bom-ref": "CacheControl==0.14.4", "description": "httplib2 caching for requests", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/psf/cachecontrol/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/psf/cachecontrol" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pypi.org/project/CacheControl/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "CacheControl", "properties": [ { "name": "cdx:python:package:required-extra", "value": "filecache" } ], "purl": "pkg:pypi/cachecontrol@0.14.4", "type": "library", "version": "0.14.4" }, { "bom-ref": "PyJWT==2.12.1", "description": "JSON Web Token implementation in Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/jpadilla/pyjwt" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "PyJWT", "properties": [ { "name": "cdx:python:package:required-extra", "value": "crypto" } ], "purl": "pkg:pypi/pyjwt@2.12.1", "type": "library", "version": "2.12.1" }, { "bom-ref": "PyNaCl==1.6.2", "description": "Python binding to the Networking and Cryptography (NaCl) library", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pynacl.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/pyca/pynacl/issues" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/pyca/pynacl" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/pyca/pynacl/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "PyNaCl", "purl": "pkg:pypi/pynacl@1.6.2", "type": "library", "version": "1.6.2" }, { "bom-ref": "PySocks==1.7.1", "description": "A Python SOCKS client module. See https://github.com/Anorov/PySocks for more information.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Anorov/PySocks" } ], "name": "PySocks", "purl": "pkg:pypi/pysocks@1.7.1", "type": "library", "version": "1.7.1" }, { "bom-ref": "PyYAML==6.0.3", "description": "YAML parser and emitter for Python", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://pypi.org/project/PyYAML/" }, { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pyyaml.org/wiki/PyYAMLDocumentation" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/yaml/pyyaml/issues" }, { "comment": "from packaging metadata Project-URL: Mailing lists", "type": "other", "url": "http://lists.sourceforge.net/lists/listinfo/yaml-core" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/yaml/pyyaml" }, { "comment": "from packaging metadata Project-URL: CI", "type": "other", "url": "https://github.com/yaml/pyyaml/actions" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://pyyaml.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "PyYAML", "purl": "pkg:pypi/pyyaml@6.0.3", "type": "library", "version": "6.0.3" }, { "bom-ref": "Pygments==2.20.0", "description": "Pygments is a syntax highlighting package written in Python.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pygments.org/docs" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/pygments/pygments/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pygments/pygments" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/pygments/pygments/blob/master/CHANGES" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pygments.org" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-2-Clause" } } ], "name": "Pygments", "purl": "pkg:pypi/pygments@2.20.0", "type": "library", "version": "2.20.0" }, { "bom-ref": "SecretStorage==3.5.0", "description": "Python bindings to FreeDesktop.org Secret Service API", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://secretstorage.readthedocs.io/en/latest/" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/mitya57/secretstorage/issues/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/mitya57/secretstorage" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "SecretStorage", "purl": "pkg:pypi/secretstorage@3.5.0", "type": "library", "version": "3.5.0" }, { "bom-ref": "adal==1.2.7", "description": "Note: This library is already replaced by MSAL Python, available here: https://pypi.org/project/msal/ .ADAL Python remains available here as a legacy. The ADAL for Python library makes it easy for python application to authenticate to Azure Active Directory (AAD) in order to access AAD protected web resources.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/AzureAD/azure-activedirectory-library-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "adal", "purl": "pkg:pypi/adal@1.2.7", "type": "library", "version": "1.2.7" }, { "bom-ref": "argcomplete==3.6.3", "description": "Bash tab completion for argparse", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://kislyuk.github.io/argcomplete" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/kislyuk/argcomplete/issues" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/kislyuk/argcomplete" }, { "comment": "from packaging metadata Project-URL: Change Log", "type": "release-notes", "url": "https://github.com/kislyuk/argcomplete/blob/develop/Changes.rst" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/kislyuk/argcomplete" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "argcomplete", "purl": "pkg:pypi/argcomplete@3.6.3", "type": "library", "version": "3.6.3" }, { "bom-ref": "arrow==1.4.0", "description": "Better dates & times for Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://arrow.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/arrow-py/arrow/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/arrow-py/arrow" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "arrow", "purl": "pkg:pypi/arrow@1.4.0", "type": "library", "version": "1.4.0" }, { "bom-ref": "attrs==26.1.0", "description": "Classes Without Boilerplate", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://www.attrs.org/" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/hynek" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-attrs?utm_source=pypi-attrs&utm_medium=pypi" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://www.attrs.org/en/stable/changelog.html" }, { "comment": "from packaging metadata Project-URL: GitHub", "type": "vcs", "url": "https://github.com/python-attrs/attrs" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "attrs", "purl": "pkg:pypi/attrs@26.1.0", "type": "library", "version": "26.1.0" }, { "bom-ref": "azure-common==1.1.28", "description": "Microsoft Azure Client Library for Python (Common)", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Azure/azure-sdk-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-common", "purl": "pkg:pypi/azure-common@1.1.28", "type": "library", "version": "1.1.28" }, { "bom-ref": "azure-core==1.39.0", "description": "Microsoft Azure Core Library for Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/core/azure-core" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-core", "purl": "pkg:pypi/azure-core@1.39.0", "type": "library", "version": "1.39.0" }, { "bom-ref": "azure-graphrbac==0.61.2", "description": "Microsoft Azure Graph RBAC Client Library for Python", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Azure/azure-sdk-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-graphrbac", "purl": "pkg:pypi/azure-graphrbac@0.61.2", "type": "library", "version": "0.61.2" }, { "bom-ref": "azure-mgmt-authorization==4.0.0", "description": "Microsoft Azure Authorization Management Client Library for Python", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Azure/azure-sdk-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-mgmt-authorization", "purl": "pkg:pypi/azure-mgmt-authorization@4.0.0", "type": "library", "version": "4.0.0" }, { "bom-ref": "azure-mgmt-containerregistry==14.0.0", "description": "Microsoft Azure Container Registry Client Library for Python", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Azure/azure-sdk-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-mgmt-containerregistry", "purl": "pkg:pypi/azure-mgmt-containerregistry@14.0.0", "type": "library", "version": "14.0.0" }, { "bom-ref": "azure-mgmt-core==1.6.0", "description": "Microsoft Azure Management Core Library for Python", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/core/azure-mgmt-core" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-mgmt-core", "purl": "pkg:pypi/azure-mgmt-core@1.6.0", "type": "library", "version": "1.6.0" }, { "bom-ref": "azure-mgmt-keyvault==11.0.0", "description": "Microsoft Azure Key Vault Management Client Library for Python", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Azure/azure-sdk-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-mgmt-keyvault", "purl": "pkg:pypi/azure-mgmt-keyvault@11.0.0", "type": "library", "version": "11.0.0" }, { "bom-ref": "azure-mgmt-network==30.0.0", "description": "Microsoft Azure Network Management Client Library for Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: repository", "type": "vcs", "url": "https://github.com/Azure/azure-sdk-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-mgmt-network", "purl": "pkg:pypi/azure-mgmt-network@30.0.0", "type": "library", "version": "30.0.0" }, { "bom-ref": "azure-mgmt-resource==24.0.0", "description": "Microsoft Azure Resource Management Client Library for Python", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Azure/azure-sdk-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-mgmt-resource", "purl": "pkg:pypi/azure-mgmt-resource@24.0.0", "type": "library", "version": "24.0.0" }, { "bom-ref": "azure-mgmt-storage==24.0.0", "description": "Microsoft Azure Storage Management Client Library for Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: repository", "type": "vcs", "url": "https://github.com/Azure/azure-sdk-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "azure-mgmt-storage", "purl": "pkg:pypi/azure-mgmt-storage@24.0.0", "type": "library", "version": "24.0.0" }, { "bom-ref": "azureml-core==1.61.0.post3", "description": "Azure Machine Learning core packages, modules, and classes", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://docs.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py" } ], "name": "azureml-core", "purl": "pkg:pypi/azureml-core@1.61.0.post3", "type": "library", "version": "1.61.0.post3" }, { "bom-ref": "backports.tempfile==1.0", "description": "Backport of new features in Python's tempfile module", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/pjdelport/backports.tempfile" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Python-2.0" } } ], "name": "backports.tempfile", "purl": "pkg:pypi/backports.tempfile@1.0", "type": "library", "version": "1.0" }, { "bom-ref": "backports.weakref==1.0.post1", "description": "Backport of new features in Python's weakref module", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/pjdelport/backports.weakref" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Python-2.0" } } ], "name": "backports.weakref", "purl": "pkg:pypi/backports.weakref@1.0.post1", "type": "library", "version": "1.0.post1" }, { "bom-ref": "bandit==1.9.4", "description": "Security oriented static analyser for python code.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://bandit.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/PyCQA/bandit/issues" }, { "comment": "from packaging metadata Project-URL: Discord", "type": "other", "url": "https://discord.gg/qYxpadCgkx" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/PyCQA/bandit" }, { "comment": "from packaging metadata Project-URL: Release Notes", "type": "other", "url": "https://github.com/PyCQA/bandit/releases" }, { "comment": "from packaging metadata Project-URL: Sponsor", "type": "other", "url": "https://psfmember.org/civicrm/contribute/transact/?reset=1&id=42" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://bandit.readthedocs.io/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "bandit", "purl": "pkg:pypi/bandit@1.9.4", "type": "library", "version": "1.9.4" }, { "bom-ref": "bcrypt==5.0.0", "description": "Modern password hashing for your software and your servers", "externalReferences": [ { "comment": "from packaging metadata Project-URL: homepage", "type": "website", "url": "https://github.com/pyca/bcrypt/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "bcrypt", "purl": "pkg:pypi/bcrypt@5.0.0", "type": "library", "version": "5.0.0" }, { "bom-ref": "boolean.py==5.0", "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/bastikr/boolean.py" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-2-Clause" } } ], "name": "boolean.py", "purl": "pkg:pypi/boolean.py@5.0", "type": "library", "version": "5.0" }, { "bom-ref": "certifi==2026.2.25", "description": "Python package for providing Mozilla's CA Bundle.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/certifi/python-certifi" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/certifi/python-certifi" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MPL-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)" } } ], "name": "certifi", "purl": "pkg:pypi/certifi@2026.2.25", "type": "library", "version": "2026.2.25" }, { "bom-ref": "cffi==2.0.0", "description": "Foreign Function Interface for Python calling C code.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://cffi.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/python-cffi/cffi/issues" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/python-cffi/cffi" }, { "comment": "from packaging metadata Project-URL: Downloads", "type": "other", "url": "https://github.com/python-cffi/cffi/releases" }, { "comment": "from packaging metadata Project-URL: Contact", "type": "other", "url": "https://groups.google.com/forum/#!forum/python-cffi" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://cffi.readthedocs.io/en/latest/whatsnew.html" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "cffi", "purl": "pkg:pypi/cffi@2.0.0", "type": "library", "version": "2.0.0" }, { "bom-ref": "chardet==5.2.0", "description": "Universal encoding detector for Python 3", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://chardet.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/chardet/chardet/issues" }, { "comment": "from packaging metadata Project-URL: GitHub Project", "type": "other", "url": "https://github.com/chardet/chardet" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/chardet/chardet" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: GNU Lesser General Public License v2 or later (LGPLv2+)" } } ], "name": "chardet", "purl": "pkg:pypi/chardet@5.2.0", "type": "library", "version": "5.2.0" }, { "bom-ref": "charset-normalizer==3.4.7", "description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://charset-normalizer.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/jawah/charset_normalizer/issues" }, { "comment": "from packaging metadata Project-URL: Code", "type": "other", "url": "https://github.com/jawah/charset_normalizer" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "charset-normalizer", "purl": "pkg:pypi/charset-normalizer@3.4.7", "type": "library", "version": "3.4.7" }, { "bom-ref": "contextlib2==21.6.0", "description": "Backports and enhancements for the contextlib module", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "http://contextlib2.readthedocs.org" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Python-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "contextlib2", "purl": "pkg:pypi/contextlib2@21.6.0", "type": "library", "version": "21.6.0" }, { "bom-ref": "cryptography==46.0.6", "description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: documentation", "type": "documentation", "url": "https://cryptography.io/" }, { "comment": "from packaging metadata Project-URL: issues", "type": "issue-tracker", "url": "https://github.com/pyca/cryptography/issues" }, { "comment": "from packaging metadata Project-URL: source", "type": "other", "url": "https://github.com/pyca/cryptography/" }, { "comment": "from packaging metadata Project-URL: changelog", "type": "release-notes", "url": "https://cryptography.io/en/latest/changelog/" }, { "comment": "from packaging metadata Project-URL: homepage", "type": "website", "url": "https://github.com/pyca/cryptography" } ], "licenses": [ { "acknowledgement": "declared", "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "cryptography", "purl": "pkg:pypi/cryptography@46.0.6", "type": "library", "version": "46.0.6" }, { "bom-ref": "cyclonedx-bom==7.3.0", "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://cyclonedx-bom-tool.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python/issues" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python/releases" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python/#readme" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "cyclonedx-bom", "purl": "pkg:pypi/cyclonedx-bom@7.3.0", "type": "library", "version": "7.3.0" }, { "bom-ref": "cyclonedx-py==1.0.1", "description": "Alias for package 'cyclonedx-bom'", "externalReferences": [ { "comment": "from packaging metadata Project-URL: repository", "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/#package_aliases/cyclonedx-py" } ], "name": "cyclonedx-py", "purl": "pkg:pypi/cyclonedx-py@1.0.1", "type": "library", "version": "1.0.1" }, { "bom-ref": "cyclonedx-python-lib==11.7.0", "description": "Python library for CycloneDX", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://cyclonedx-python-library.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/releases" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python-lib" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "cyclonedx-python-lib", "properties": [ { "name": "cdx:python:package:required-extra", "value": "validation" } ], "purl": "pkg:pypi/cyclonedx-python-lib@11.7.0", "type": "library", "version": "11.7.0" }, { "bom-ref": "defusedxml==0.7.1", "description": "XML bomb protection for Python stdlib modules", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://pypi.python.org/pypi/defusedxml" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/tiran/defusedxml" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Python-2.0" } } ], "name": "defusedxml", "purl": "pkg:pypi/defusedxml@0.7.1", "type": "library", "version": "0.7.1" }, { "bom-ref": "docker==7.1.0", "description": "A Python library for the Docker Engine API.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://docker-py.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/docker/docker-py/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/docker/docker-py" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://docker-py.readthedocs.io/en/stable/change-log.html" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/docker/docker-py" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "docker", "purl": "pkg:pypi/docker@7.1.0", "type": "library", "version": "7.1.0" }, { "bom-ref": "filelock==3.25.2", "description": "A platform independent file lock.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://py-filelock.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/tox-dev/py-filelock/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/tox-dev/py-filelock" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/tox-dev/py-filelock" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "filelock", "purl": "pkg:pypi/filelock@3.25.2", "type": "library", "version": "3.25.2" }, { "bom-ref": "fqdn==1.5.1", "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/ypcrts/fqdn" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)" } } ], "name": "fqdn", "purl": "pkg:pypi/fqdn@1.5.1", "type": "library", "version": "1.5.1" }, { "bom-ref": "humanfriendly==10.0", "description": "Human friendly output for text interfaces using Python", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://humanfriendly.readthedocs.io" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "humanfriendly", "purl": "pkg:pypi/humanfriendly@10.0", "type": "library", "version": "10.0" }, { "bom-ref": "idna==3.11", "description": "Internationalized Domain Names in Applications (IDNA)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/kjd/idna/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/kjd/idna" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/kjd/idna/blob/master/HISTORY.rst" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "idna", "purl": "pkg:pypi/idna@3.11", "type": "library", "version": "3.11" }, { "bom-ref": "isodate==0.7.2", "description": "An ISO 8601 date/time/duration parser and formatter", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/gweis/isodate/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "isodate", "purl": "pkg:pypi/isodate@0.7.2", "type": "library", "version": "0.7.2" }, { "bom-ref": "isoduration==20.11.0", "description": "Operations with ISO 8601 durations", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Bug Reports", "type": "issue-tracker", "url": "https://github.com/bolsote/isoduration/issues" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/bolsote/isoduration/blob/master/CHANGELOG" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/bolsote/isoduration" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/bolsote/isoduration" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "ISC" } } ], "name": "isoduration", "purl": "pkg:pypi/isoduration@20.11.0", "type": "library", "version": "20.11.0" }, { "bom-ref": "jeepney==0.9.0", "description": "Low-level, pure Python DBus protocol wrapper.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://jeepney.readthedocs.io/en/latest/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://gitlab.com/takluyver/jeepney" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "jeepney", "purl": "pkg:pypi/jeepney@0.9.0", "type": "library", "version": "0.9.0" }, { "bom-ref": "jmespath==1.1.0", "description": "JSON Matching Expressions", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/jmespath/jmespath.py" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "jmespath", "purl": "pkg:pypi/jmespath@1.1.0", "type": "library", "version": "1.1.0" }, { "bom-ref": "jsonpickle==4.1.1", "description": "jsonpickle encodes/decodes any Python object to/from JSON", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://jsonpickle.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/jsonpickle/jsonpickle" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://jsonpickle.readthedocs.io/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "jsonpickle", "purl": "pkg:pypi/jsonpickle@4.1.1", "type": "library", "version": "4.1.1" }, { "bom-ref": "jsonpointer==3.1.1", "description": "Identify specific nodes in a JSON document (RFC 6901) ", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/stefankoegl/python-json-pointer" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "jsonpointer", "purl": "pkg:pypi/jsonpointer@3.1.1", "type": "library", "version": "3.1.1" }, { "bom-ref": "jsonschema==4.26.0", "description": "An implementation of JSON Schema validation for Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://python-jsonschema.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/python-jsonschema/jsonschema/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-jsonschema/jsonschema" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema?utm_source=pypi-jsonschema&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/python-jsonschema/jsonschema" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "jsonschema", "properties": [ { "name": "cdx:python:package:required-extra", "value": "format-nongpl" } ], "purl": "pkg:pypi/jsonschema@4.26.0", "type": "library", "version": "4.26.0" }, { "bom-ref": "jsonschema-specifications==2025.9.1", "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://jsonschema-specifications.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/python-jsonschema/jsonschema-specifications/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-jsonschema/jsonschema-specifications" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema-specifications?utm_source=pypi-jsonschema-specifications&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/python-jsonschema/jsonschema-specifications" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "jsonschema-specifications", "purl": "pkg:pypi/jsonschema-specifications@2025.9.1", "type": "library", "version": "2025.9.1" }, { "bom-ref": "knack==0.12.0", "description": "A Command-Line Interface framework", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/microsoft/knack" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "knack", "purl": "pkg:pypi/knack@0.12.0", "type": "library", "version": "0.12.0" }, { "bom-ref": "lark==1.3.1", "description": "a modern parsing library", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Download", "type": "distribution", "url": "https://github.com/lark-parser/lark/tarball/master" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/lark-parser/lark" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "lark", "purl": "pkg:pypi/lark@1.3.1", "type": "library", "version": "1.3.1" }, { "bom-ref": "license-expression==30.4.4", "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/aboutcode-org/license-expression" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "license-expression", "purl": "pkg:pypi/license-expression@30.4.4", "type": "library", "version": "30.4.4" }, { "bom-ref": "lxml==6.0.2", "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://bugs.launchpad.net/lxml" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/lxml/lxml" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://lxml.de/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "lxml", "purl": "pkg:pypi/lxml@6.0.2", "type": "library", "version": "6.0.2" }, { "bom-ref": "markdown-it-py==4.0.0", "description": "Python port of markdown-it. Markdown parsing, done right!", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://markdown-it-py.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/executablebooks/markdown-it-py" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "markdown-it-py", "purl": "pkg:pypi/markdown-it-py@4.0.0", "type": "library", "version": "4.0.0" }, { "bom-ref": "mdurl==0.1.2", "description": "Markdown URL utilities", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/executablebooks/mdurl" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "mdurl", "purl": "pkg:pypi/mdurl@0.1.2", "type": "library", "version": "0.1.2" }, { "bom-ref": "msal==1.35.1", "description": "The Microsoft Authentication Library (MSAL) for Python library enables your app to access the Microsoft Cloud by supporting authentication of users with Microsoft Azure Active Directory accounts (AAD) and Microsoft Accounts (MSA) using industry standard OAuth2 and OpenID Connect.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://msal-python.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Feature/Bug Tracker", "type": "other", "url": "https://github.com/AzureAD/microsoft-authentication-library-for-python/issues" }, { "comment": "from packaging metadata Project-URL: Questions", "type": "other", "url": "https://stackoverflow.com/questions/tagged/azure-ad-msal+python" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/AzureAD/microsoft-authentication-library-for-python/releases" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/AzureAD/microsoft-authentication-library-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "msal", "purl": "pkg:pypi/msal@1.35.1", "type": "library", "version": "1.35.1" }, { "bom-ref": "msal-extensions==1.3.1", "description": "Microsoft Authentication Library extensions (MSAL EX) provides a persistence API that can save your data on disk, encrypted on Windows, macOS and Linux. Concurrent data access will be coordinated by a file lock mechanism.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/AzureAD/microsoft-authentication-extensions-for-python/releases" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "msal-extensions", "purl": "pkg:pypi/msal-extensions@1.3.1", "type": "library", "version": "1.3.1" }, { "bom-ref": "msgpack==1.1.2", "description": "MessagePack serializer", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://msgpack-python.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/msgpack/msgpack-python/issues" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/msgpack/msgpack-python/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://msgpack.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "msgpack", "purl": "pkg:pypi/msgpack@1.1.2", "type": "library", "version": "1.1.2" }, { "bom-ref": "msrest==0.7.1", "description": "AutoRest swagger generator Python client runtime.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Azure/msrest-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "msrest", "purl": "pkg:pypi/msrest@0.7.1", "type": "library", "version": "0.7.1" }, { "bom-ref": "msrestazure==0.6.4.post1", "description": "AutoRest swagger generator Python client runtime. Azure-specific module.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/Azure/msrestazure-for-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "msrestazure", "purl": "pkg:pypi/msrestazure@0.6.4.post1", "type": "library", "version": "0.6.4.post1" }, { "bom-ref": "ndg-httpsclient==0.5.1", "description": "Provides enhanced HTTPS support for httplib and urllib2 using PyOpenSSL", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/cedadev/ndg_httpsclient/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "ndg-httpsclient", "purl": "pkg:pypi/ndg-httpsclient@0.5.1", "type": "library", "version": "0.5.1" }, { "bom-ref": "oauthlib==3.3.1", "description": "A generic, spec-compliant, thorough implementation of the OAuth request-signing logic", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/oauthlib/oauthlib" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "oauthlib", "properties": [ { "name": "cdx:python:package:required-extra", "value": "signedtoken" } ], "purl": "pkg:pypi/oauthlib@3.3.1", "type": "library", "version": "3.3.1" }, { "bom-ref": "packageurl-python==0.17.6", "description": "A purl aka. Package URL parser and builder", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/package-url/packageurl-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "packageurl-python", "purl": "pkg:pypi/packageurl-python@0.17.6", "type": "library", "version": "0.17.6" }, { "bom-ref": "packaging==25.0", "description": "Core utilities for Python packages", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://packaging.pypa.io/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/packaging" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "packaging", "purl": "pkg:pypi/packaging@25.0", "type": "library", "version": "25.0" }, { "bom-ref": "paramiko==3.5.1", "description": "SSH2 protocol library", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Docs", "type": "documentation", "url": "https://docs.paramiko.org" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/paramiko/paramiko/issues" }, { "comment": "from packaging metadata Project-URL: CI", "type": "other", "url": "https://app.circleci.com/pipelines/github/paramiko/paramiko" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/paramiko/paramiko" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://www.paramiko.org/changelog.html" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://paramiko.org" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: GNU Library or Lesser General Public License (LGPL)" } } ], "name": "paramiko", "purl": "pkg:pypi/paramiko@3.5.1", "type": "library", "version": "3.5.1" }, { "bom-ref": "pathspec==0.12.1", "description": "Utility library for gitignore style pattern matching of file paths.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://python-path-specification.readthedocs.io/en/latest/index.html" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/cpburnz/python-pathspec/issues" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/cpburnz/python-pathspec" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)" } } ], "name": "pathspec", "purl": "pkg:pypi/pathspec@0.12.1", "type": "library", "version": "0.12.1" }, { "bom-ref": "pip==25.0.1", "description": "The PyPA recommended tool for installing Python packages.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pip.pypa.io" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/pip" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://pip.pypa.io/en/stable/news/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pip.pypa.io/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pip", "purl": "pkg:pypi/pip@25.0.1", "type": "library", "version": "25.0.1" }, { "bom-ref": "pip-api==0.0.34", "description": "An unofficial, importable pip API", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "http://github.com/di/pip-api" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "pip-api", "purl": "pkg:pypi/pip-api@0.0.34", "type": "library", "version": "0.0.34" }, { "bom-ref": "pip-requirements-parser==32.0.1", "description": "pip requirements parser - a mostly correct pip requirements parsing library because it uses pip's own code.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/nexB/pip-requirements-parser" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pip-requirements-parser", "purl": "pkg:pypi/pip-requirements-parser@32.0.1", "type": "library", "version": "32.0.1" }, { "bom-ref": "pip_audit==2.10.0", "description": "A tool for scanning Python environments for known vulnerabilities", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/pypa/pip-audit/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/pip-audit" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pypi.org/project/pip-audit/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "pip_audit", "purl": "pkg:pypi/pip-audit@2.10.0", "type": "library", "version": "2.10.0" }, { "bom-ref": "pkginfo==1.12.1.2", "description": "Query metadata from sdists / bdists / installed packages.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://code.launchpad.net/~tseaver/pkginfo/trunk" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pkginfo", "purl": "pkg:pypi/pkginfo@1.12.1.2", "type": "library", "version": "1.12.1.2" }, { "bom-ref": "platformdirs==4.9.4", "description": "A small Python package for determining appropriate platform-specific dirs, e.g. a `user data dir`.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://platformdirs.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/tox-dev/platformdirs/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/tox-dev/platformdirs" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://platformdirs.readthedocs.io/en/latest/changelog.html" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/tox-dev/platformdirs" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "platformdirs", "purl": "pkg:pypi/platformdirs@4.9.4", "type": "library", "version": "4.9.4" }, { "bom-ref": "py-serializable==2.1.0", "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://py-serializable.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/madpah/serializable/issues" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/madpah/serializable" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/madpah/serializable#readme" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "py-serializable", "purl": "pkg:pypi/py-serializable@2.1.0", "type": "library", "version": "2.1.0" }, { "bom-ref": "pyOpenSSL==25.3.0", "description": "Python wrapper module around the OpenSSL library", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pyca/pyopenssl" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://pyopenssl.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "pyOpenSSL", "purl": "pkg:pypi/pyopenssl@25.3.0", "type": "library", "version": "25.3.0" }, { "bom-ref": "pyasn1==0.6.3", "description": "Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pyasn1.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/pyasn1/pyasn1/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pyasn1/pyasn1" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://pyasn1.readthedocs.io/en/latest/changelog.html" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/pyasn1/pyasn1" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-2-Clause" } } ], "name": "pyasn1", "purl": "pkg:pypi/pyasn1@0.6.3", "type": "library", "version": "0.6.3" }, { "bom-ref": "pycparser==3.0", "description": "C parser in Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/eliben/pycparser" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "pycparser", "purl": "pkg:pypi/pycparser@3.0", "type": "library", "version": "3.0" }, { "bom-ref": "pyparsing==3.3.2", "description": "pyparsing - Classes and methods to define and execute parsing grammars", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pyparsing-docs.readthedocs.io/en/latest/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pyparsing/pyparsing.git" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/pyparsing/pyparsing/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pyparsing", "purl": "pkg:pypi/pyparsing@3.3.2", "type": "library", "version": "3.3.2" }, { "bom-ref": "python-dateutil==2.9.0.post0", "description": "Extensions to the standard Python datetime module", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://dateutil.readthedocs.io/en/stable/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/dateutil/dateutil" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/dateutil/dateutil" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "python-dateutil", "purl": "pkg:pypi/python-dateutil@2.9.0.post0", "type": "library", "version": "2.9.0.post0" }, { "bom-ref": "pytz==2026.1.post1", "description": "World timezone definitions, modern and historical", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://pypi.org/project/pytz/" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "http://pythonhosted.org/pytz" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pytz", "purl": "pkg:pypi/pytz@2026.1.post1", "type": "library", "version": "2026.1.post1" }, { "bom-ref": "referencing==0.37.0", "description": "JSON Referencing + Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://referencing.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/python-jsonschema/referencing/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-jsonschema/referencing" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-referencing?utm_source=pypi-referencing&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://referencing.readthedocs.io/en/stable/changes/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/python-jsonschema/referencing" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "referencing", "purl": "pkg:pypi/referencing@0.37.0", "type": "library", "version": "0.37.0" }, { "bom-ref": "requests==2.33.1", "description": "Python HTTP for Humans.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://requests.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/psf/requests" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "requests", "properties": [ { "name": "cdx:python:package:required-extra", "value": "socks" } ], "purl": "pkg:pypi/requests@2.33.1", "type": "library", "version": "2.33.1" }, { "bom-ref": "requests-oauthlib==2.0.0", "description": "OAuthlib authentication support for Requests.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/requests/requests-oauthlib" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "ISC" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "requests-oauthlib", "purl": "pkg:pypi/requests-oauthlib@2.0.0", "type": "library", "version": "2.0.0" }, { "bom-ref": "rfc3339-validator==0.1.4", "description": "A pure python RFC3339 validator", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/naimetti/rfc3339-validator" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rfc3339-validator", "purl": "pkg:pypi/rfc3339-validator@0.1.4", "type": "library", "version": "0.1.4" }, { "bom-ref": "rfc3986-validator==0.1.1", "description": "Pure python rfc3986 validator", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/naimetti/rfc3986-validator" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rfc3986-validator", "purl": "pkg:pypi/rfc3986-validator@0.1.1", "type": "library", "version": "0.1.1" }, { "bom-ref": "rfc3987-syntax==1.1.0", "description": "Helper functions to syntactically validate strings according to RFC 3987.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://github.com/willynilly/rfc3987-syntax#readme" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/willynilly/rfc3987-syntax/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/willynilly/rfc3987-syntax" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/willynilly/rfc3987-syntax" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rfc3987-syntax", "purl": "pkg:pypi/rfc3987-syntax@1.1.0", "type": "library", "version": "1.1.0" }, { "bom-ref": "rich==14.3.3", "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://rich.readthedocs.io/en/latest/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/Textualize/rich" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rich", "purl": "pkg:pypi/rich@14.3.3", "type": "library", "version": "14.3.3" }, { "bom-ref": "rpds-py==0.30.0", "description": "Python bindings to Rust's persistent data structures (rpds)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://rpds.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/crate-py/rpds/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/crate-py/rpds" }, { "comment": "from packaging metadata Project-URL: Upstream", "type": "other", "url": "https://github.com/orium/rpds" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/crate-py/rpds" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rpds-py", "purl": "pkg:pypi/rpds-py@0.30.0", "type": "library", "version": "0.30.0" }, { "bom-ref": "six==1.17.0", "description": "Python 2 and 3 compatibility utilities", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/benjaminp/six" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "six", "purl": "pkg:pypi/six@1.17.0", "type": "library", "version": "1.17.0" }, { "bom-ref": "sortedcontainers==2.4.0", "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "http://www.grantjenks.com/docs/sortedcontainers/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "sortedcontainers", "purl": "pkg:pypi/sortedcontainers@2.4.0", "type": "library", "version": "2.4.0" }, { "bom-ref": "stevedore==5.7.0", "description": "Manage dynamic plugins for Python applications", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://opendev.org/openstack/stevedore" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://docs.openstack.org/stevedore" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "stevedore", "purl": "pkg:pypi/stevedore@5.7.0", "type": "library", "version": "5.7.0" }, { "bom-ref": "tabulate==0.10.0", "description": "Pretty-print tabular data", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/astanin/python-tabulate" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "tabulate", "purl": "pkg:pypi/tabulate@0.10.0", "type": "library", "version": "0.10.0" }, { "bom-ref": "tomli==2.4.1", "description": "A lil' TOML parser", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/hukkin/tomli/blob/master/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/hukkin/tomli" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "tomli", "purl": "pkg:pypi/tomli@2.4.1", "type": "library", "version": "2.4.1" }, { "bom-ref": "tomli_w==1.2.0", "description": "A lil' TOML writer", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/hukkin/tomli-w/blob/master/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/hukkin/tomli-w" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "tomli_w", "purl": "pkg:pypi/tomli-w@1.2.0", "type": "library", "version": "1.2.0" }, { "bom-ref": "typing_extensions==4.15.0", "description": "Backported and Experimental Type Hints for Python 3.9+", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://typing-extensions.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/python/typing_extensions/issues" }, { "comment": "from packaging metadata Project-URL: Q & A", "type": "other", "url": "https://github.com/python/typing/discussions" }, { "comment": "from packaging metadata Project-URL: Changes", "type": "release-notes", "url": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/python/typing_extensions" }, { "comment": "from packaging metadata Project-URL: Home", "type": "website", "url": "https://github.com/python/typing_extensions" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "PSF-2.0" } } ], "name": "typing_extensions", "purl": "pkg:pypi/typing-extensions@4.15.0", "type": "library", "version": "4.15.0" }, { "bom-ref": "tzdata==2026.1", "description": "Provider of IANA time zone data", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://tzdata.python.org" }, { "comment": "from packaging metadata Project-URL: Bug Reports", "type": "issue-tracker", "url": "https://github.com/python/tzdata/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python/tzdata" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/python/tzdata" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "tzdata", "purl": "pkg:pypi/tzdata@2026.1", "type": "library", "version": "2026.1" }, { "bom-ref": "uri-template==1.3.0", "description": "RFC 6570 URI Template Processor", "externalReferences": [ { "comment": "from packaging metadata Project-URL: homepage", "type": "website", "url": "https://gitlab.linss.com/open-source/python/uri-template" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "uri-template", "purl": "pkg:pypi/uri-template@1.3.0", "type": "library", "version": "1.3.0" }, { "bom-ref": "urllib3==2.6.3", "description": "HTTP library with thread-safe connection pooling, file post, and more.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://urllib3.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/urllib3/urllib3/issues" }, { "comment": "from packaging metadata Project-URL: Code", "type": "other", "url": "https://github.com/urllib3/urllib3" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/urllib3/urllib3/blob/main/CHANGES.rst" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "urllib3", "purl": "pkg:pypi/urllib3@2.6.3", "type": "library", "version": "2.6.3" }, { "bom-ref": "webcolors==25.10.0", "description": "A library for working with the color formats defined by HTML and CSS.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://webcolors.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/ubernostrum/webcolors" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "webcolors", "purl": "pkg:pypi/webcolors@25.10.0", "type": "library", "version": "25.10.0" } ], "dependencies": [ { "dependsOn": [ "filelock==3.25.2", "msgpack==1.1.2", "requests==2.33.1" ], "ref": "CacheControl==0.14.4" }, { "dependsOn": [ "cryptography==46.0.6", "typing_extensions==4.15.0" ], "ref": "PyJWT==2.12.1" }, { "dependsOn": [ "cffi==2.0.0" ], "ref": "PyNaCl==1.6.2" }, { "ref": "PySocks==1.7.1" }, { "ref": "PyYAML==6.0.3" }, { "ref": "Pygments==2.20.0" }, { "dependsOn": [ "cryptography==46.0.6", "jeepney==0.9.0" ], "ref": "SecretStorage==3.5.0" }, { "dependsOn": [ "PyJWT==2.12.1", "cryptography==46.0.6", "python-dateutil==2.9.0.post0", "requests==2.33.1" ], "ref": "adal==1.2.7" }, { "ref": "argcomplete==3.6.3" }, { "dependsOn": [ "python-dateutil==2.9.0.post0", "pytz==2026.1.post1", "tzdata==2026.1" ], "ref": "arrow==1.4.0" }, { "ref": "attrs==26.1.0" }, { "ref": "azure-common==1.1.28" }, { "dependsOn": [ "requests==2.33.1", "typing_extensions==4.15.0" ], "ref": "azure-core==1.39.0" }, { "dependsOn": [ "azure-common==1.1.28", "msrest==0.7.1", "msrestazure==0.6.4.post1" ], "ref": "azure-graphrbac==0.61.2" }, { "dependsOn": [ "azure-common==1.1.28", "azure-mgmt-core==1.6.0", "isodate==0.7.2", "typing_extensions==4.15.0" ], "ref": "azure-mgmt-authorization==4.0.0" }, { "dependsOn": [ "azure-common==1.1.28", "azure-mgmt-core==1.6.0", "isodate==0.7.2", "typing_extensions==4.15.0" ], "ref": "azure-mgmt-containerregistry==14.0.0" }, { "dependsOn": [ "azure-core==1.39.0" ], "ref": "azure-mgmt-core==1.6.0" }, { "dependsOn": [ "azure-common==1.1.28", "azure-mgmt-core==1.6.0", "isodate==0.7.2", "typing_extensions==4.15.0" ], "ref": "azure-mgmt-keyvault==11.0.0" }, { "dependsOn": [ "azure-mgmt-core==1.6.0", "msrest==0.7.1", "typing_extensions==4.15.0" ], "ref": "azure-mgmt-network==30.0.0" }, { "dependsOn": [ "azure-common==1.1.28", "azure-mgmt-core==1.6.0", "isodate==0.7.2", "typing_extensions==4.15.0" ], "ref": "azure-mgmt-resource==24.0.0" }, { "dependsOn": [ "azure-mgmt-core==1.6.0", "msrest==0.7.1", "typing_extensions==4.15.0" ], "ref": "azure-mgmt-storage==24.0.0" }, { "dependsOn": [ "PyJWT==2.12.1", "SecretStorage==3.5.0", "adal==1.2.7", "argcomplete==3.6.3", "azure-common==1.1.28", "azure-core==1.39.0", "azure-graphrbac==0.61.2", "azure-mgmt-authorization==4.0.0", "azure-mgmt-containerregistry==14.0.0", "azure-mgmt-keyvault==11.0.0", "azure-mgmt-network==30.0.0", "azure-mgmt-resource==24.0.0", "azure-mgmt-storage==24.0.0", "backports.tempfile==1.0", "contextlib2==21.6.0", "docker==7.1.0", "humanfriendly==10.0", "jmespath==1.1.0", "jsonpickle==4.1.1", "knack==0.12.0", "msal-extensions==1.3.1", "msal==1.35.1", "msrest==0.7.1", "msrestazure==0.6.4.post1", "ndg-httpsclient==0.5.1", "packaging==25.0", "paramiko==3.5.1", "pathspec==0.12.1", "pkginfo==1.12.1.2", "pyOpenSSL==25.3.0", "python-dateutil==2.9.0.post0", "pytz==2026.1.post1", "requests==2.33.1", "urllib3==2.6.3" ], "ref": "azureml-core==1.61.0.post3" }, { "dependsOn": [ "backports.weakref==1.0.post1" ], "ref": "backports.tempfile==1.0" }, { "ref": "backports.weakref==1.0.post1" }, { "dependsOn": [ "PyYAML==6.0.3", "rich==14.3.3", "stevedore==5.7.0", "tomli==2.4.1" ], "ref": "bandit==1.9.4" }, { "ref": "bcrypt==5.0.0" }, { "ref": "boolean.py==5.0" }, { "ref": "certifi==2026.2.25" }, { "dependsOn": [ "pycparser==3.0" ], "ref": "cffi==2.0.0" }, { "ref": "chardet==5.2.0" }, { "ref": "charset-normalizer==3.4.7" }, { "ref": "contextlib2==21.6.0" }, { "dependsOn": [ "bcrypt==5.0.0", "certifi==2026.2.25", "cffi==2.0.0", "typing_extensions==4.15.0" ], "ref": "cryptography==46.0.6" }, { "dependsOn": [ "chardet==5.2.0", "cyclonedx-python-lib==11.7.0", "packageurl-python==0.17.6", "packaging==25.0", "pip-requirements-parser==32.0.1", "tomli==2.4.1" ], "ref": "cyclonedx-bom==7.3.0" }, { "dependsOn": [ "cyclonedx-bom==7.3.0" ], "ref": "cyclonedx-py==1.0.1" }, { "dependsOn": [ "jsonschema==4.26.0", "license-expression==30.4.4", "lxml==6.0.2", "packageurl-python==0.17.6", "py-serializable==2.1.0", "referencing==0.37.0", "sortedcontainers==2.4.0", "typing_extensions==4.15.0" ], "ref": "cyclonedx-python-lib==11.7.0" }, { "ref": "defusedxml==0.7.1" }, { "dependsOn": [ "paramiko==3.5.1", "requests==2.33.1", "urllib3==2.6.3" ], "ref": "docker==7.1.0" }, { "ref": "filelock==3.25.2" }, { "ref": "fqdn==1.5.1" }, { "ref": "humanfriendly==10.0" }, { "ref": "idna==3.11" }, { "ref": "isodate==0.7.2" }, { "dependsOn": [ "arrow==1.4.0" ], "ref": "isoduration==20.11.0" }, { "ref": "jeepney==0.9.0" }, { "ref": "jmespath==1.1.0" }, { "dependsOn": [ "PyYAML==6.0.3" ], "ref": "jsonpickle==4.1.1" }, { "ref": "jsonpointer==3.1.1" }, { "dependsOn": [ "referencing==0.37.0" ], "ref": "jsonschema-specifications==2025.9.1" }, { "dependsOn": [ "attrs==26.1.0", "fqdn==1.5.1", "idna==3.11", "isoduration==20.11.0", "jsonpointer==3.1.1", "jsonschema-specifications==2025.9.1", "referencing==0.37.0", "rfc3339-validator==0.1.4", "rfc3986-validator==0.1.1", "rfc3987-syntax==1.1.0", "rpds-py==0.30.0", "uri-template==1.3.0", "webcolors==25.10.0" ], "ref": "jsonschema==4.26.0" }, { "dependsOn": [ "PyYAML==6.0.3", "Pygments==2.20.0", "argcomplete==3.6.3", "jmespath==1.1.0", "packaging==25.0", "tabulate==0.10.0" ], "ref": "knack==0.12.0" }, { "ref": "lark==1.3.1" }, { "dependsOn": [ "boolean.py==5.0" ], "ref": "license-expression==30.4.4" }, { "ref": "lxml==6.0.2" }, { "dependsOn": [ "PyYAML==6.0.3", "mdurl==0.1.2", "requests==2.33.1" ], "ref": "markdown-it-py==4.0.0" }, { "ref": "mdurl==0.1.2" }, { "dependsOn": [ "msal==1.35.1" ], "ref": "msal-extensions==1.3.1" }, { "dependsOn": [ "PyJWT==2.12.1", "cryptography==46.0.6", "requests==2.33.1" ], "ref": "msal==1.35.1" }, { "ref": "msgpack==1.1.2" }, { "dependsOn": [ "azure-core==1.39.0", "certifi==2026.2.25", "isodate==0.7.2", "requests-oauthlib==2.0.0", "requests==2.33.1" ], "ref": "msrest==0.7.1" }, { "dependsOn": [ "adal==1.2.7", "msrest==0.7.1", "six==1.17.0" ], "ref": "msrestazure==0.6.4.post1" }, { "dependsOn": [ "pyOpenSSL==25.3.0", "pyasn1==0.6.3" ], "ref": "ndg-httpsclient==0.5.1" }, { "dependsOn": [ "PyJWT==2.12.1", "cryptography==46.0.6" ], "ref": "oauthlib==3.3.1" }, { "ref": "packageurl-python==0.17.6" }, { "ref": "packaging==25.0" }, { "dependsOn": [ "PyNaCl==1.6.2", "bcrypt==5.0.0", "cryptography==46.0.6", "pyasn1==0.6.3" ], "ref": "paramiko==3.5.1" }, { "ref": "pathspec==0.12.1" }, { "dependsOn": [ "pip==25.0.1" ], "ref": "pip-api==0.0.34" }, { "dependsOn": [ "packaging==25.0", "pyparsing==3.3.2" ], "ref": "pip-requirements-parser==32.0.1" }, { "ref": "pip==25.0.1" }, { "dependsOn": [ "CacheControl==0.14.4", "cyclonedx-python-lib==11.7.0", "packaging==25.0", "pip-api==0.0.34", "pip-requirements-parser==32.0.1", "platformdirs==4.9.4", "requests==2.33.1", "rich==14.3.3", "tomli==2.4.1", "tomli_w==1.2.0" ], "ref": "pip_audit==2.10.0" }, { "ref": "pkginfo==1.12.1.2" }, { "ref": "platformdirs==4.9.4" }, { "dependsOn": [ "defusedxml==0.7.1" ], "ref": "py-serializable==2.1.0" }, { "dependsOn": [ "cryptography==46.0.6", "typing_extensions==4.15.0" ], "ref": "pyOpenSSL==25.3.0" }, { "ref": "pyasn1==0.6.3" }, { "ref": "pycparser==3.0" }, { "ref": "pyparsing==3.3.2" }, { "dependsOn": [ "six==1.17.0" ], "ref": "python-dateutil==2.9.0.post0" }, { "ref": "pytz==2026.1.post1" }, { "dependsOn": [ "attrs==26.1.0", "rpds-py==0.30.0", "typing_extensions==4.15.0" ], "ref": "referencing==0.37.0" }, { "dependsOn": [ "oauthlib==3.3.1", "requests==2.33.1" ], "ref": "requests-oauthlib==2.0.0" }, { "dependsOn": [ "PySocks==1.7.1", "certifi==2026.2.25", "chardet==5.2.0", "charset-normalizer==3.4.7", "idna==3.11", "urllib3==2.6.3" ], "ref": "requests==2.33.1" }, { "dependsOn": [ "six==1.17.0" ], "ref": "rfc3339-validator==0.1.4" }, { "ref": "rfc3986-validator==0.1.1" }, { "dependsOn": [ "lark==1.3.1" ], "ref": "rfc3987-syntax==1.1.0" }, { "dependsOn": [ "Pygments==2.20.0", "markdown-it-py==4.0.0" ], "ref": "rich==14.3.3" }, { "ref": "rpds-py==0.30.0" }, { "ref": "six==1.17.0" }, { "ref": "sortedcontainers==2.4.0" }, { "ref": "stevedore==5.7.0" }, { "ref": "tabulate==0.10.0" }, { "ref": "tomli==2.4.1" }, { "ref": "tomli_w==1.2.0" }, { "ref": "typing_extensions==4.15.0" }, { "ref": "tzdata==2026.1" }, { "ref": "uri-template==1.3.0" }, { "dependsOn": [ "PySocks==1.7.1" ], "ref": "urllib3==2.6.3" }, { "ref": "webcolors==25.10.0" } ], "metadata": { "timestamp": "2026-04-04T15:13:59.534832+00:00", "tools": { "components": [ { "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments", "externalReferences": [ { "type": "build-system", "url": "https://github.com/CycloneDX/cyclonedx-python/actions" }, { "type": "distribution", "url": "https://pypi.org/project/cyclonedx-bom/" }, { "type": "documentation", "url": "https://cyclonedx-bom-tool.readthedocs.io/" }, { "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python/issues" }, { "type": "license", "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE" }, { "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md" }, { "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/" }, { "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python/#readme" } ], "group": "CycloneDX", "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "cyclonedx-py", "type": "application", "version": "7.3.0" }, { "description": "Python library for CycloneDX", "externalReferences": [ { "type": "build-system", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions" }, { "type": "distribution", "url": "https://pypi.org/project/cyclonedx-python-lib/" }, { "type": "documentation", "url": "https://cyclonedx-python-library.readthedocs.io/" }, { "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues" }, { "type": "license", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE" }, { "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md" }, { "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python-lib" }, { "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme" } ], "group": "CycloneDX", "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "cyclonedx-python-lib", "type": "library", "version": "11.7.0" } ] } }, "serialNumber": "urn:uuid:56e3a1f9-cc1b-47de-a3e5-70797f3fe0f4", "version": 1, "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6" }