{
  "components": [
    {
      "bom-ref": "CacheControl==0.14.4",
      "description": "httplib2 caching for requests",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/psf/cachecontrol/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/psf/cachecontrol"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pypi.org/project/CacheControl/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "CacheControl",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "filecache"
        }
      ],
      "purl": "pkg:pypi/cachecontrol@0.14.4",
      "type": "library",
      "version": "0.14.4"
    },
    {
      "bom-ref": "Deprecated==1.3.1",
      "description": "Python @deprecated decorator to deprecate old python classes, functions or methods.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://deprecated.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/laurent-laporte-pro/deprecated/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/laurent-laporte-pro/deprecated"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/laurent-laporte-pro/deprecated"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "Deprecated",
      "purl": "pkg:pypi/deprecated@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "Jinja2==3.1.6",
      "description": "A very fast and expressive template engine.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Chat",
          "type": "chat",
          "url": "https://discord.gg/pallets"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://jinja.palletsprojects.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pallets/jinja/"
        },
        {
          "comment": "from packaging metadata Project-URL: Donate",
          "type": "other",
          "url": "https://palletsprojects.com/donate"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://jinja.palletsprojects.com/changes/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "Jinja2",
      "purl": "pkg:pypi/jinja2@3.1.6",
      "type": "library",
      "version": "3.1.6"
    },
    {
      "bom-ref": "Mako==1.3.10",
      "description": "A super-fast templating language that borrows the best ideas from the existing templating languages.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.makotemplates.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/sqlalchemy/mako"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://www.makotemplates.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "Mako",
      "purl": "pkg:pypi/mako@1.3.10",
      "type": "library",
      "version": "1.3.10"
    },
    {
      "bom-ref": "MarkupSafe==3.0.3",
      "description": "Safely add untrusted strings to HTML/XML markup.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Chat",
          "type": "chat",
          "url": "https://discord.gg/pallets"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://markupsafe.palletsprojects.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pallets/markupsafe/"
        },
        {
          "comment": "from packaging metadata Project-URL: Donate",
          "type": "other",
          "url": "https://palletsprojects.com/donate"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://markupsafe.palletsprojects.com/page/changes/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "MarkupSafe",
      "purl": "pkg:pypi/markupsafe@3.0.3",
      "type": "library",
      "version": "3.0.3"
    },
    {
      "bom-ref": "PyJWT==2.12.1",
      "description": "JSON Web Token implementation in Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/jpadilla/pyjwt"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "PyJWT",
      "purl": "pkg:pypi/pyjwt@2.12.1",
      "type": "library",
      "version": "2.12.1"
    },
    {
      "bom-ref": "PyYAML==6.0.3",
      "description": "YAML parser and emitter for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.org/project/PyYAML/"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pyyaml.org/wiki/PyYAMLDocumentation"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/yaml/pyyaml/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mailing lists",
          "type": "other",
          "url": "http://lists.sourceforge.net/lists/listinfo/yaml-core"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/yaml/pyyaml"
        },
        {
          "comment": "from packaging metadata Project-URL: CI",
          "type": "other",
          "url": "https://github.com/yaml/pyyaml/actions"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://pyyaml.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "PyYAML",
      "purl": "pkg:pypi/pyyaml@6.0.3",
      "type": "library",
      "version": "6.0.3"
    },
    {
      "bom-ref": "Pygments==2.20.0",
      "description": "Pygments is a syntax highlighting package written in Python.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pygments.org/docs"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/pygments/pygments/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pygments/pygments"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pygments/pygments/blob/master/CHANGES"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pygments.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "Pygments",
      "purl": "pkg:pypi/pygments@2.20.0",
      "type": "library",
      "version": "2.20.0"
    },
    {
      "bom-ref": "SQLAlchemy==2.0.49",
      "description": "Database Abstraction Library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.sqlalchemy.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/sqlalchemy/sqlalchemy/"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://www.sqlalchemy.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "SQLAlchemy",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "asyncio"
        }
      ],
      "purl": "pkg:pypi/sqlalchemy@2.0.49",
      "type": "library",
      "version": "2.0.49"
    },
    {
      "bom-ref": "SQLAlchemy-JSONField==1.0.2",
      "description": "SQLALchemy JSONField implementation for storing dicts at SQL",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/penguinolog/sqlalchemy_jsonfield/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/penguinolog/sqlalchemy_jsonfield"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "SQLAlchemy-JSONField",
      "purl": "pkg:pypi/sqlalchemy-jsonfield@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "SQLAlchemy-Utils==0.42.1",
      "description": "Various utility functions for SQLAlchemy.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/kvesteri/sqlalchemy-utils"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "SQLAlchemy-Utils",
      "purl": "pkg:pypi/sqlalchemy-utils@0.42.1",
      "type": "library",
      "version": "0.42.1"
    },
    {
      "bom-ref": "a2wsgi==1.10.10",
      "description": "Convert WSGI app to ASGI app or ASGI app to WSGI app.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: repository",
          "type": "vcs",
          "url": "https://github.com/abersheeran/a2wsgi"
        },
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://github.com/abersheeran/a2wsgi"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "a2wsgi",
      "purl": "pkg:pypi/a2wsgi@1.10.10",
      "type": "library",
      "version": "1.10.10"
    },
    {
      "bom-ref": "aiosmtplib==5.1.0",
      "description": "asyncio SMTP client",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://aiosmtplib.readthedocs.io/en/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/cole/aiosmtplib/blob/main/CHANGELOG.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub",
          "type": "vcs",
          "url": "https://github.com/cole/aiosmtplib"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "aiosmtplib",
      "purl": "pkg:pypi/aiosmtplib@5.1.0",
      "type": "library",
      "version": "5.1.0"
    },
    {
      "bom-ref": "aiosqlite==0.21.0",
      "description": "asyncio bridge to the standard sqlite3 module",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://aiosqlite.omnilib.dev"
        },
        {
          "comment": "from packaging metadata Project-URL: Github",
          "type": "vcs",
          "url": "https://github.com/omnilib/aiosqlite"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "aiosqlite",
      "purl": "pkg:pypi/aiosqlite@0.21.0",
      "type": "library",
      "version": "0.21.0"
    },
    {
      "bom-ref": "alembic==1.18.4",
      "description": "A database migration tool for SQLAlchemy.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://alembic.sqlalchemy.org/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/sqlalchemy/alembic/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/sqlalchemy/alembic/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://alembic.sqlalchemy.org/en/latest/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://alembic.sqlalchemy.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "alembic",
      "purl": "pkg:pypi/alembic@1.18.4",
      "type": "library",
      "version": "1.18.4"
    },
    {
      "bom-ref": "annotated-doc==0.0.4",
      "description": "Document parameters, class attributes, return types, and variables inline, with Annotated.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://github.com/fastapi/annotated-doc"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/fastapi/annotated-doc/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/fastapi/annotated-doc/release-notes.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/fastapi/annotated-doc"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fastapi/annotated-doc"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "annotated-doc",
      "purl": "pkg:pypi/annotated-doc@0.0.4",
      "type": "library",
      "version": "0.0.4"
    },
    {
      "bom-ref": "annotated-types==0.7.0",
      "description": "Reusable constraint types to use with typing.Annotated",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/annotated-types/annotated-types"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/annotated-types/annotated-types/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/annotated-types/annotated-types"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "annotated-types",
      "purl": "pkg:pypi/annotated-types@0.7.0",
      "type": "library",
      "version": "0.7.0"
    },
    {
      "bom-ref": "anyio==4.13.0",
      "description": "High-level concurrency and networking framework on top of asyncio or Trio",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://anyio.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/agronholm/anyio/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source code",
          "type": "other",
          "url": "https://github.com/agronholm/anyio"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://anyio.readthedocs.io/en/stable/versionhistory.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "anyio",
      "purl": "pkg:pypi/anyio@4.13.0",
      "type": "library",
      "version": "4.13.0"
    },
    {
      "bom-ref": "apache-airflow==3.1.8",
      "description": "Programmatically author, schedule and monitor data pipelines",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://airflow.apache.org/docs/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/apache/airflow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Release Notes",
          "type": "other",
          "url": "https://airflow.apache.org/docs/apache-airflow/stable/release_notes.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Downloads",
          "type": "other",
          "url": "https://archive.apache.org/dist/airflow/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bluesky",
          "type": "other",
          "url": "https://bsky.app/profile/apache-airflow.bsky.social"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://fosstodon.org/@airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/apache/airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Slack Chat",
          "type": "other",
          "url": "https://s.apache.org/airflow-slack"
        },
        {
          "comment": "from packaging metadata Project-URL: LinkedIn",
          "type": "other",
          "url": "https://www.linkedin.com/company/apache-airflow/"
        },
        {
          "comment": "from packaging metadata Project-URL: YouTube",
          "type": "other",
          "url": "https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://airflow.apache.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-airflow",
      "purl": "pkg:pypi/apache-airflow@3.1.8",
      "type": "library",
      "version": "3.1.8"
    },
    {
      "bom-ref": "apache-airflow-core==3.1.8",
      "description": "Core packages for Apache Airflow, schedule and API server",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://airflow.apache.org/docs/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/apache/airflow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Release Notes",
          "type": "other",
          "url": "https://airflow.apache.org/docs/apache-airflow/stable/release_notes.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Downloads",
          "type": "other",
          "url": "https://archive.apache.org/dist/airflow/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bluesky",
          "type": "other",
          "url": "https://bsky.app/profile/apache-airflow.bsky.social"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://fosstodon.org/@airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/apache/airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Slack Chat",
          "type": "other",
          "url": "https://s.apache.org/airflow-slack"
        },
        {
          "comment": "from packaging metadata Project-URL: LinkedIn",
          "type": "other",
          "url": "https://www.linkedin.com/company/apache-airflow/"
        },
        {
          "comment": "from packaging metadata Project-URL: YouTube",
          "type": "other",
          "url": "https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://airflow.apache.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-airflow-core",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "all"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "async"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "graphviz"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "kerberos"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "otel"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "sentry"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "statsd"
        }
      ],
      "purl": "pkg:pypi/apache-airflow-core@3.1.8",
      "type": "library",
      "version": "3.1.8"
    },
    {
      "bom-ref": "apache-airflow-providers-apache-kafka==1.13.1",
      "description": "Provider package apache-airflow-providers-apache-kafka for Apache Airflow",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-apache-kafka/1.13.1"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/apache/airflow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://fosstodon.org/@airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/apache/airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Slack Chat",
          "type": "other",
          "url": "https://s.apache.org/airflow-slack"
        },
        {
          "comment": "from packaging metadata Project-URL: YouTube",
          "type": "other",
          "url": "https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-apache-kafka/1.13.1/changelog.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-airflow-providers-apache-kafka",
      "purl": "pkg:pypi/apache-airflow-providers-apache-kafka@1.13.1",
      "type": "library",
      "version": "1.13.1"
    },
    {
      "bom-ref": "apache-airflow-providers-common-compat==1.14.2",
      "description": "Provider package apache-airflow-providers-common-compat for Apache Airflow",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-common-compat/1.14.2"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/apache/airflow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://fosstodon.org/@airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/apache/airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Slack Chat",
          "type": "other",
          "url": "https://s.apache.org/airflow-slack"
        },
        {
          "comment": "from packaging metadata Project-URL: YouTube",
          "type": "other",
          "url": "https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-common-compat/1.14.2/changelog.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-airflow-providers-common-compat",
      "purl": "pkg:pypi/apache-airflow-providers-common-compat@1.14.2",
      "type": "library",
      "version": "1.14.2"
    },
    {
      "bom-ref": "apache-airflow-providers-common-io==1.7.2",
      "description": "Provider package apache-airflow-providers-common-io for Apache Airflow",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-common-io/1.7.2"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/apache/airflow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://fosstodon.org/@airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/apache/airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Slack Chat",
          "type": "other",
          "url": "https://s.apache.org/airflow-slack"
        },
        {
          "comment": "from packaging metadata Project-URL: YouTube",
          "type": "other",
          "url": "https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-common-io/1.7.2/changelog.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-airflow-providers-common-io",
      "purl": "pkg:pypi/apache-airflow-providers-common-io@1.7.2",
      "type": "library",
      "version": "1.7.2"
    },
    {
      "bom-ref": "apache-airflow-providers-common-sql==1.34.0",
      "description": "Provider package apache-airflow-providers-common-sql for Apache Airflow",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-common-sql/1.34.0"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/apache/airflow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://fosstodon.org/@airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/apache/airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Slack Chat",
          "type": "other",
          "url": "https://s.apache.org/airflow-slack"
        },
        {
          "comment": "from packaging metadata Project-URL: YouTube",
          "type": "other",
          "url": "https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-common-sql/1.34.0/changelog.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-airflow-providers-common-sql",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "pandas"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "polars"
        }
      ],
      "purl": "pkg:pypi/apache-airflow-providers-common-sql@1.34.0",
      "type": "library",
      "version": "1.34.0"
    },
    {
      "bom-ref": "apache-airflow-providers-smtp==2.4.4",
      "description": "Provider package apache-airflow-providers-smtp for Apache Airflow",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-smtp/2.4.4"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/apache/airflow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://fosstodon.org/@airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/apache/airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Slack Chat",
          "type": "other",
          "url": "https://s.apache.org/airflow-slack"
        },
        {
          "comment": "from packaging metadata Project-URL: YouTube",
          "type": "other",
          "url": "https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-smtp/2.4.4/changelog.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-airflow-providers-smtp",
      "purl": "pkg:pypi/apache-airflow-providers-smtp@2.4.4",
      "type": "library",
      "version": "2.4.4"
    },
    {
      "bom-ref": "apache-airflow-providers-standard==1.12.2",
      "description": "Provider package apache-airflow-providers-standard for Apache Airflow",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-standard/1.12.2"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/apache/airflow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://fosstodon.org/@airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/apache/airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Slack Chat",
          "type": "other",
          "url": "https://s.apache.org/airflow-slack"
        },
        {
          "comment": "from packaging metadata Project-URL: YouTube",
          "type": "other",
          "url": "https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://airflow.apache.org/docs/apache-airflow-providers-standard/1.12.2/changelog.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-airflow-providers-standard",
      "purl": "pkg:pypi/apache-airflow-providers-standard@1.12.2",
      "type": "library",
      "version": "1.12.2"
    },
    {
      "bom-ref": "apache-airflow-task-sdk==1.1.8",
      "description": "Python Task SDK for Apache Airflow DAG Authors",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://airflow.apache.org/docs/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/apache/airflow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Bluesky",
          "type": "other",
          "url": "https://bsky.app/profile/apache-airflow.bsky.social"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://fosstodon.org/@airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/apache/airflow"
        },
        {
          "comment": "from packaging metadata Project-URL: Slack Chat",
          "type": "other",
          "url": "https://s.apache.org/airflow-slack"
        },
        {
          "comment": "from packaging metadata Project-URL: YouTube",
          "type": "other",
          "url": "https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://airflow.apache.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-airflow-task-sdk",
      "purl": "pkg:pypi/apache-airflow-task-sdk@1.1.8",
      "type": "library",
      "version": "1.1.8"
    },
    {
      "bom-ref": "argcomplete==3.6.3",
      "description": "Bash tab completion for argparse",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://kislyuk.github.io/argcomplete"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/kislyuk/argcomplete/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/kislyuk/argcomplete"
        },
        {
          "comment": "from packaging metadata Project-URL: Change Log",
          "type": "release-notes",
          "url": "https://github.com/kislyuk/argcomplete/blob/develop/Changes.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/kislyuk/argcomplete"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "argcomplete",
      "purl": "pkg:pypi/argcomplete@3.6.3",
      "type": "library",
      "version": "3.6.3"
    },
    {
      "bom-ref": "arrow==1.4.0",
      "description": "Better dates & times for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://arrow.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/arrow-py/arrow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/arrow-py/arrow"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "arrow",
      "purl": "pkg:pypi/arrow@1.4.0",
      "type": "library",
      "version": "1.4.0"
    },
    {
      "bom-ref": "asgiref==3.11.1",
      "description": "ASGI specs, helper code, and adapters",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://asgi.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Further Documentation",
          "type": "other",
          "url": "https://docs.djangoproject.com/en/stable/topics/async/#async-adapter-functions"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/django/asgiref/blob/master/CHANGELOG.txt"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/django/asgiref/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "asgiref",
      "purl": "pkg:pypi/asgiref@3.11.1",
      "type": "library",
      "version": "3.11.1"
    },
    {
      "bom-ref": "attrs==26.1.0",
      "description": "Classes Without Boilerplate",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.attrs.org/"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-attrs?utm_source=pypi-attrs&utm_medium=pypi"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://www.attrs.org/en/stable/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub",
          "type": "vcs",
          "url": "https://github.com/python-attrs/attrs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "attrs",
      "purl": "pkg:pypi/attrs@26.1.0",
      "type": "library",
      "version": "26.1.0"
    },
    {
      "bom-ref": "babel==2.18.0",
      "description": "Internationalization utilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-babel/babel"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://babel.pocoo.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "babel",
      "purl": "pkg:pypi/babel@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "bandit==1.9.4",
      "description": "Security oriented static analyser for python code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://bandit.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/PyCQA/bandit/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Discord",
          "type": "other",
          "url": "https://discord.gg/qYxpadCgkx"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/PyCQA/bandit"
        },
        {
          "comment": "from packaging metadata Project-URL: Release Notes",
          "type": "other",
          "url": "https://github.com/PyCQA/bandit/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Sponsor",
          "type": "other",
          "url": "https://psfmember.org/civicrm/contribute/transact/?reset=1&id=42"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://bandit.readthedocs.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "bandit",
      "purl": "pkg:pypi/bandit@1.9.4",
      "type": "library",
      "version": "1.9.4"
    },
    {
      "bom-ref": "boolean.py==5.0",
      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/bastikr/boolean.py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "boolean.py",
      "purl": "pkg:pypi/boolean.py@5.0",
      "type": "library",
      "version": "5.0"
    },
    {
      "bom-ref": "cadwyn==5.4.6",
      "description": "Production-ready community-driven modern Stripe-like API versioning in FastAPI",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.cadwyn.dev"
        },
        {
          "comment": "from packaging metadata Project-URL: Source code",
          "type": "other",
          "url": "https://github.com/zmievsa/cadwyn"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "cadwyn",
      "purl": "pkg:pypi/cadwyn@5.4.6",
      "type": "library",
      "version": "5.4.6"
    },
    {
      "bom-ref": "certifi==2026.2.25",
      "description": "Python package for providing Mozilla's CA Bundle.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/certifi/python-certifi"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/certifi/python-certifi"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MPL-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "certifi",
      "purl": "pkg:pypi/certifi@2026.2.25",
      "type": "library",
      "version": "2026.2.25"
    },
    {
      "bom-ref": "cffi==2.0.0",
      "description": "Foreign Function Interface for Python calling C code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cffi.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python-cffi/cffi/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/python-cffi/cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Downloads",
          "type": "other",
          "url": "https://github.com/python-cffi/cffi/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Contact",
          "type": "other",
          "url": "https://groups.google.com/forum/#!forum/python-cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://cffi.readthedocs.io/en/latest/whatsnew.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "cffi",
      "purl": "pkg:pypi/cffi@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "chardet==5.2.0",
      "description": "Universal encoding detector for Python 3",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://chardet.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/chardet/chardet/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub Project",
          "type": "other",
          "url": "https://github.com/chardet/chardet"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/chardet/chardet"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: GNU Lesser General Public License v2 or later (LGPLv2+)"
          }
        }
      ],
      "name": "chardet",
      "purl": "pkg:pypi/chardet@5.2.0",
      "type": "library",
      "version": "5.2.0"
    },
    {
      "bom-ref": "charset-normalizer==3.4.7",
      "description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://charset-normalizer.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/jawah/charset_normalizer/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/jawah/charset_normalizer"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "charset-normalizer",
      "purl": "pkg:pypi/charset-normalizer@3.4.7",
      "type": "library",
      "version": "3.4.7"
    },
    {
      "bom-ref": "click==8.3.2",
      "description": "Composable command line interface toolkit",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Chat",
          "type": "chat",
          "url": "https://discord.gg/pallets"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://click.palletsprojects.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pallets/click/"
        },
        {
          "comment": "from packaging metadata Project-URL: Donate",
          "type": "other",
          "url": "https://palletsprojects.com/donate"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://click.palletsprojects.com/page/changes/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "click",
      "purl": "pkg:pypi/click@8.3.2",
      "type": "library",
      "version": "8.3.2"
    },
    {
      "bom-ref": "colorlog==6.10.1",
      "description": "Add colours to the output of Python's logging module.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/borntyping/python-colorlog"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "colorlog",
      "purl": "pkg:pypi/colorlog@6.10.1",
      "type": "library",
      "version": "6.10.1"
    },
    {
      "bom-ref": "confluent-kafka==2.14.0",
      "description": "Confluent's Python client for Apache Kafka",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/confluentinc/confluent-kafka-python"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "confluent-kafka",
      "purl": "pkg:pypi/confluent-kafka@2.14.0",
      "type": "library",
      "version": "2.14.0"
    },
    {
      "bom-ref": "cron_descriptor==2.0.8",
      "description": "A Python library that converts cron expressions into human readable strings.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/Salamek/cron-descriptor"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "cron_descriptor",
      "purl": "pkg:pypi/cron-descriptor@2.0.8",
      "type": "library",
      "version": "2.0.8"
    },
    {
      "bom-ref": "croniter==6.2.2",
      "description": "croniter provides iteration for datetime object with cron like format",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pallets-eco/croniter"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "croniter",
      "purl": "pkg:pypi/croniter@6.2.2",
      "type": "library",
      "version": "6.2.2"
    },
    {
      "bom-ref": "cryptography==46.0.6",
      "description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: documentation",
          "type": "documentation",
          "url": "https://cryptography.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: issues",
          "type": "issue-tracker",
          "url": "https://github.com/pyca/cryptography/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: source",
          "type": "other",
          "url": "https://github.com/pyca/cryptography/"
        },
        {
          "comment": "from packaging metadata Project-URL: changelog",
          "type": "release-notes",
          "url": "https://cryptography.io/en/latest/changelog/"
        },
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://github.com/pyca/cryptography"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 OR BSD-3-Clause"
        }
      ],
      "name": "cryptography",
      "purl": "pkg:pypi/cryptography@46.0.6",
      "type": "library",
      "version": "46.0.6"
    },
    {
      "bom-ref": "cyclonedx-bom==7.3.0",
      "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cyclonedx-bom-tool.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/CycloneDX/cyclonedx-python/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/CycloneDX/cyclonedx-python/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "cyclonedx-bom",
      "purl": "pkg:pypi/cyclonedx-bom@7.3.0",
      "type": "library",
      "version": "7.3.0"
    },
    {
      "bom-ref": "cyclonedx-py==1.0.1",
      "description": "Alias for package 'cyclonedx-bom'",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python/#package_aliases/cyclonedx-py"
        }
      ],
      "name": "cyclonedx-py",
      "purl": "pkg:pypi/cyclonedx-py@1.0.1",
      "type": "library",
      "version": "1.0.1"
    },
    {
      "bom-ref": "cyclonedx-python-lib==11.7.0",
      "description": "Python library for CycloneDX",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cyclonedx-python-library.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "cyclonedx-python-lib",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "validation"
        }
      ],
      "purl": "pkg:pypi/cyclonedx-python-lib@11.7.0",
      "type": "library",
      "version": "11.7.0"
    },
    {
      "bom-ref": "defusedxml==0.7.1",
      "description": "XML bomb protection for Python stdlib modules",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.python.org/pypi/defusedxml"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/tiran/defusedxml"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Python-2.0"
          }
        }
      ],
      "name": "defusedxml",
      "purl": "pkg:pypi/defusedxml@0.7.1",
      "type": "library",
      "version": "0.7.1"
    },
    {
      "bom-ref": "dill==0.4.1",
      "description": "serialize all of Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.org/project/dill/#files"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "http://dill.rtfd.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/uqfoundation/dill/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/uqfoundation/dill"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/uqfoundation/dill"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "dill",
      "purl": "pkg:pypi/dill@0.4.1",
      "type": "library",
      "version": "0.4.1"
    },
    {
      "bom-ref": "dnspython==2.8.0",
      "description": "DNS toolkit",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: documentation",
          "type": "documentation",
          "url": "https://dnspython.readthedocs.io/en/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: issues",
          "type": "issue-tracker",
          "url": "https://github.com/rthalley/dnspython/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: repository",
          "type": "vcs",
          "url": "https://github.com/rthalley/dnspython.git"
        },
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://www.dnspython.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "ISC"
          }
        }
      ],
      "name": "dnspython",
      "purl": "pkg:pypi/dnspython@2.8.0",
      "type": "library",
      "version": "2.8.0"
    },
    {
      "bom-ref": "email-validator==2.3.0",
      "description": "A robust email address syntax and deliverability validation library.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/JoshData/python-email-validator"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Unlicense"
          }
        }
      ],
      "name": "email-validator",
      "purl": "pkg:pypi/email-validator@2.3.0",
      "type": "library",
      "version": "2.3.0"
    },
    {
      "bom-ref": "fastapi==0.117.1",
      "description": "FastAPI framework, high performance, easy to learn, fast to code, ready for production",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://fastapi.tiangolo.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/fastapi/fastapi/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://fastapi.tiangolo.com/release-notes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/fastapi/fastapi"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fastapi/fastapi"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "fastapi",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "standard"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "standard-no-fastapi-cloud-cli"
        }
      ],
      "purl": "pkg:pypi/fastapi@0.117.1",
      "type": "library",
      "version": "0.117.1"
    },
    {
      "bom-ref": "fastapi-cli==0.0.24",
      "description": "Run and manage FastAPI apps from the command line with FastAPI CLI. \ud83d\ude80",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://fastapi.tiangolo.com/fastapi-cli/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/fastapi/fastapi-cli/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/fastapi/fastapi-cli/blob/main/release-notes.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/fastapi/fastapi-cli"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fastapi/fastapi-cli"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "fastapi-cli",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "standard"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "standard-no-fastapi-cloud-cli"
        }
      ],
      "purl": "pkg:pypi/fastapi-cli@0.0.24",
      "type": "library",
      "version": "0.0.24"
    },
    {
      "bom-ref": "filelock==3.25.2",
      "description": "A platform independent file lock.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://py-filelock.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/tox-dev/py-filelock/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/tox-dev/py-filelock"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tox-dev/py-filelock"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "filelock",
      "purl": "pkg:pypi/filelock@3.25.2",
      "type": "library",
      "version": "3.25.2"
    },
    {
      "bom-ref": "fqdn==1.5.1",
      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/ypcrts/fqdn"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "fqdn",
      "purl": "pkg:pypi/fqdn@1.5.1",
      "type": "library",
      "version": "1.5.1"
    },
    {
      "bom-ref": "fsspec==2026.3.0",
      "description": "File-system specification",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://filesystem-spec.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://filesystem-spec.readthedocs.io/en/latest/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fsspec/filesystem_spec"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "fsspec",
      "purl": "pkg:pypi/fsspec@2026.3.0",
      "type": "library",
      "version": "2026.3.0"
    },
    {
      "bom-ref": "googleapis-common-protos==1.74.0",
      "description": "Common protobufs used in Google APIs",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/googleapis/google-cloud-python/tree/main/packages/googleapis-common-protos"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "googleapis-common-protos",
      "purl": "pkg:pypi/googleapis-common-protos@1.74.0",
      "type": "library",
      "version": "1.74.0"
    },
    {
      "bom-ref": "greenback==1.3.0",
      "description": "Reenter an async event loop from synchronous code",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/oremanj/greenback"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "greenback",
      "purl": "pkg:pypi/greenback@1.3.0",
      "type": "library",
      "version": "1.3.0"
    },
    {
      "bom-ref": "greenlet==3.3.2",
      "description": "Lightweight in-process concurrent programming",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://greenlet.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-greenlet/greenlet/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://greenlet.readthedocs.io/en/latest/changes.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/python-greenlet/greenlet"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://greenlet.readthedocs.io"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "MIT AND PSF-2.0"
        }
      ],
      "name": "greenlet",
      "purl": "pkg:pypi/greenlet@3.3.2",
      "type": "library",
      "version": "3.3.2"
    },
    {
      "bom-ref": "grpcio==1.80.0",
      "description": "HTTP/2-based RPC framework",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://grpc.github.io/grpc/python"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/grpc/grpc/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/grpc/grpc"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://grpc.io"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "grpcio",
      "purl": "pkg:pypi/grpcio@1.80.0",
      "type": "library",
      "version": "1.80.0"
    },
    {
      "bom-ref": "h11==0.16.0",
      "description": "A pure-Python, bring-your-own-I/O implementation of HTTP/1.1",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/python-hyper/h11"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "h11",
      "purl": "pkg:pypi/h11@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "httpcore==1.0.9",
      "description": "A minimal low-level HTTP client.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.encode.io/httpcore"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/encode/httpcore"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://www.encode.io/httpcore/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "httpcore",
      "purl": "pkg:pypi/httpcore@1.0.9",
      "type": "library",
      "version": "1.0.9"
    },
    {
      "bom-ref": "httptools==0.7.1",
      "description": "A collection of framework independent HTTP protocol utils.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/MagicStack/httptools"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "httptools",
      "purl": "pkg:pypi/httptools@0.7.1",
      "type": "library",
      "version": "0.7.1"
    },
    {
      "bom-ref": "httpx==0.28.1",
      "description": "The next generation HTTP client.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.python-httpx.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/encode/httpx"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/encode/httpx/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/encode/httpx"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "httpx",
      "purl": "pkg:pypi/httpx@0.28.1",
      "type": "library",
      "version": "0.28.1"
    },
    {
      "bom-ref": "idna==3.11",
      "description": "Internationalized Domain Names in Applications (IDNA)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/kjd/idna/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/kjd/idna"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/kjd/idna/blob/master/HISTORY.rst"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "idna",
      "purl": "pkg:pypi/idna@3.11",
      "type": "library",
      "version": "3.11"
    },
    {
      "bom-ref": "importlib_metadata==8.7.1",
      "description": "Read metadata from Python packages",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python/importlib_metadata"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "importlib_metadata",
      "purl": "pkg:pypi/importlib-metadata@8.7.1",
      "type": "library",
      "version": "8.7.1"
    },
    {
      "bom-ref": "isoduration==20.11.0",
      "description": "Operations with ISO 8601 durations",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Reports",
          "type": "issue-tracker",
          "url": "https://github.com/bolsote/isoduration/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/bolsote/isoduration/blob/master/CHANGELOG"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/bolsote/isoduration"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/bolsote/isoduration"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "ISC"
          }
        }
      ],
      "name": "isoduration",
      "purl": "pkg:pypi/isoduration@20.11.0",
      "type": "library",
      "version": "20.11.0"
    },
    {
      "bom-ref": "itsdangerous==2.2.0",
      "description": "Safely pass data to untrusted environments and back.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Chat",
          "type": "chat",
          "url": "https://discord.gg/pallets"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://itsdangerous.palletsprojects.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pallets/itsdangerous/"
        },
        {
          "comment": "from packaging metadata Project-URL: Donate",
          "type": "other",
          "url": "https://palletsprojects.com/donate"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://itsdangerous.palletsprojects.com/changes/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "itsdangerous",
      "purl": "pkg:pypi/itsdangerous@2.2.0",
      "type": "library",
      "version": "2.2.0"
    },
    {
      "bom-ref": "jsonpointer==3.1.1",
      "description": "Identify specific nodes in a JSON document (RFC 6901) ",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/stefankoegl/python-json-pointer"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "jsonpointer",
      "purl": "pkg:pypi/jsonpointer@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "jsonschema==4.26.0",
      "description": "An implementation of JSON Schema validation for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-jsonschema.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/jsonschema/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/jsonschema"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema?utm_source=pypi-jsonschema&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/jsonschema"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jsonschema",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "format-nongpl"
        }
      ],
      "purl": "pkg:pypi/jsonschema@4.26.0",
      "type": "library",
      "version": "4.26.0"
    },
    {
      "bom-ref": "jsonschema-specifications==2025.9.1",
      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://jsonschema-specifications.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema-specifications?utm_source=pypi-jsonschema-specifications&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jsonschema-specifications",
      "purl": "pkg:pypi/jsonschema-specifications@2025.9.1",
      "type": "library",
      "version": "2025.9.1"
    },
    {
      "bom-ref": "lark==1.3.1",
      "description": "a modern parsing library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Download",
          "type": "distribution",
          "url": "https://github.com/lark-parser/lark/tarball/master"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/lark-parser/lark"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "lark",
      "purl": "pkg:pypi/lark@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "lazy-object-proxy==1.12.0",
      "description": "A fast and thorough lazy object proxy.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-lazy-object-proxy.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/ionelmc/python-lazy-object-proxy/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Sources",
          "type": "other",
          "url": "https://github.com/ionelmc/python-lazy-object-proxy"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://python-lazy-object-proxy.readthedocs.io/en/latest/changelog.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "lazy-object-proxy",
      "purl": "pkg:pypi/lazy-object-proxy@1.12.0",
      "type": "library",
      "version": "1.12.0"
    },
    {
      "bom-ref": "libcst==1.8.6",
      "description": "A concrete syntax tree with AST-like properties for Python 3.0 through 3.14 programs.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://libcst.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/Instagram/LibCST/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Github",
          "type": "vcs",
          "url": "https://github.com/Instagram/LibCST"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "libcst",
      "purl": "pkg:pypi/libcst@1.8.6",
      "type": "library",
      "version": "1.8.6"
    },
    {
      "bom-ref": "license-expression==30.4.4",
      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aboutcode-org/license-expression"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "license-expression",
      "purl": "pkg:pypi/license-expression@30.4.4",
      "type": "library",
      "version": "30.4.4"
    },
    {
      "bom-ref": "linkify-it-py==2.1.0",
      "description": "Links recognition library with FULL unicode support.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tsutsu3/linkify-it-py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "linkify-it-py",
      "purl": "pkg:pypi/linkify-it-py@2.1.0",
      "type": "library",
      "version": "2.1.0"
    },
    {
      "bom-ref": "lockfile==0.12.2",
      "description": "Platform-independent file locking module",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://launchpad.net/pylockfile"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "lockfile",
      "purl": "pkg:pypi/lockfile@0.12.2",
      "type": "library",
      "version": "0.12.2"
    },
    {
      "bom-ref": "lxml==6.0.2",
      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://bugs.launchpad.net/lxml"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/lxml/lxml"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://lxml.de/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "lxml",
      "purl": "pkg:pypi/lxml@6.0.2",
      "type": "library",
      "version": "6.0.2"
    },
    {
      "bom-ref": "markdown-it-py==4.0.0",
      "description": "Python port of markdown-it. Markdown parsing, done right!",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://markdown-it-py.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/executablebooks/markdown-it-py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "markdown-it-py",
      "purl": "pkg:pypi/markdown-it-py@4.0.0",
      "type": "library",
      "version": "4.0.0"
    },
    {
      "bom-ref": "mdurl==0.1.2",
      "description": "Markdown URL utilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/executablebooks/mdurl"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "mdurl",
      "purl": "pkg:pypi/mdurl@0.1.2",
      "type": "library",
      "version": "0.1.2"
    },
    {
      "bom-ref": "methodtools==0.4.7",
      "description": "Expand standard functools to methods",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/youknowone/methodtools"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "methodtools",
      "purl": "pkg:pypi/methodtools@0.4.7",
      "type": "library",
      "version": "0.4.7"
    },
    {
      "bom-ref": "more-itertools==11.0.1",
      "description": "More routines for operating on iterables, beyond itertools",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://more-itertools.readthedocs.io/en/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/more-itertools/more-itertools"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "more-itertools",
      "purl": "pkg:pypi/more-itertools@11.0.1",
      "type": "library",
      "version": "11.0.1"
    },
    {
      "bom-ref": "msgpack==1.1.2",
      "description": "MessagePack serializer",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://msgpack-python.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/msgpack/msgpack-python/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/msgpack/msgpack-python/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://msgpack.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "msgpack",
      "purl": "pkg:pypi/msgpack@1.1.2",
      "type": "library",
      "version": "1.1.2"
    },
    {
      "bom-ref": "msgspec==0.20.0",
      "description": "A fast serialization and validation library, with builtin support for JSON, MessagePack, YAML, and TOML.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/jcrist/msgspec/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/jcrist/msgspec"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://jcristharif.com/msgspec/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "msgspec",
      "purl": "pkg:pypi/msgspec@0.20.0",
      "type": "library",
      "version": "0.20.0"
    },
    {
      "bom-ref": "natsort==8.4.0",
      "description": "Simple yet flexible natural sorting in Python.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/SethMMorton/natsort"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "natsort",
      "purl": "pkg:pypi/natsort@8.4.0",
      "type": "library",
      "version": "8.4.0"
    },
    {
      "bom-ref": "opentelemetry-api==1.40.0",
      "description": "OpenTelemetry Python API",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/open-telemetry/opentelemetry-python"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "opentelemetry-api",
      "purl": "pkg:pypi/opentelemetry-api@1.40.0",
      "type": "library",
      "version": "1.40.0"
    },
    {
      "bom-ref": "opentelemetry-exporter-otlp==1.40.0",
      "description": "OpenTelemetry Collector Exporters",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/open-telemetry/opentelemetry-python"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/open-telemetry/opentelemetry-python/tree/main/exporter/opentelemetry-exporter-otlp"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "opentelemetry-exporter-otlp",
      "purl": "pkg:pypi/opentelemetry-exporter-otlp@1.40.0",
      "type": "library",
      "version": "1.40.0"
    },
    {
      "bom-ref": "opentelemetry-exporter-otlp-proto-common==1.40.0",
      "description": "OpenTelemetry Protobuf encoding",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/open-telemetry/opentelemetry-python"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/open-telemetry/opentelemetry-python/tree/main/exporter/opentelemetry-exporter-otlp-proto-common"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "opentelemetry-exporter-otlp-proto-common",
      "purl": "pkg:pypi/opentelemetry-exporter-otlp-proto-common@1.40.0",
      "type": "library",
      "version": "1.40.0"
    },
    {
      "bom-ref": "opentelemetry-exporter-otlp-proto-grpc==1.40.0",
      "description": "OpenTelemetry Collector Protobuf over gRPC Exporter",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/open-telemetry/opentelemetry-python"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/open-telemetry/opentelemetry-python/tree/main/exporter/opentelemetry-exporter-otlp-proto-grpc"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "opentelemetry-exporter-otlp-proto-grpc",
      "purl": "pkg:pypi/opentelemetry-exporter-otlp-proto-grpc@1.40.0",
      "type": "library",
      "version": "1.40.0"
    },
    {
      "bom-ref": "opentelemetry-exporter-otlp-proto-http==1.40.0",
      "description": "OpenTelemetry Collector Protobuf over HTTP Exporter",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/open-telemetry/opentelemetry-python"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/open-telemetry/opentelemetry-python/tree/main/exporter/opentelemetry-exporter-otlp-proto-http"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "opentelemetry-exporter-otlp-proto-http",
      "purl": "pkg:pypi/opentelemetry-exporter-otlp-proto-http@1.40.0",
      "type": "library",
      "version": "1.40.0"
    },
    {
      "bom-ref": "opentelemetry-proto==1.40.0",
      "description": "OpenTelemetry Python Proto",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/open-telemetry/opentelemetry-python"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-proto"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "opentelemetry-proto",
      "purl": "pkg:pypi/opentelemetry-proto@1.40.0",
      "type": "library",
      "version": "1.40.0"
    },
    {
      "bom-ref": "opentelemetry-sdk==1.40.0",
      "description": "OpenTelemetry Python SDK",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/open-telemetry/opentelemetry-python"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-sdk"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "opentelemetry-sdk",
      "purl": "pkg:pypi/opentelemetry-sdk@1.40.0",
      "type": "library",
      "version": "1.40.0"
    },
    {
      "bom-ref": "opentelemetry-semantic-conventions==0.61b0",
      "description": "OpenTelemetry Semantic Conventions",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/open-telemetry/opentelemetry-python"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-semantic-conventions"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "opentelemetry-semantic-conventions",
      "purl": "pkg:pypi/opentelemetry-semantic-conventions@0.61b0",
      "type": "library",
      "version": "0.61b0"
    },
    {
      "bom-ref": "outcome==1.3.0.post0",
      "description": "Capture the outcome of Python function calls.",
      "evidence": {
        "licenses": [
          {
            "license": {
              "acknowledgement": "declared",
              "id": "MIT"
            }
          },
          {
            "license": {
              "acknowledgement": "declared",
              "name": "License :: OSI Approved :: Apache Software License"
            }
          }
        ]
      },
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Chat",
          "type": "chat",
          "url": "https://gitter.im/python-trio/general"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://outcome.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://outcome.readthedocs.io/en/latest/history.html"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/python-trio/outcome"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "name": "outcome",
      "purl": "pkg:pypi/outcome@1.3.0.post0",
      "type": "library",
      "version": "1.3.0.post0"
    },
    {
      "bom-ref": "packageurl-python==0.17.6",
      "description": "A purl aka. Package URL parser and builder",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/package-url/packageurl-python"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "packageurl-python",
      "purl": "pkg:pypi/packageurl-python@0.17.6",
      "type": "library",
      "version": "0.17.6"
    },
    {
      "bom-ref": "packaging==26.0",
      "description": "Core utilities for Python packages",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://packaging.pypa.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/packaging"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 OR BSD-2-Clause"
        }
      ],
      "name": "packaging",
      "purl": "pkg:pypi/packaging@26.0",
      "type": "library",
      "version": "26.0"
    },
    {
      "bom-ref": "pathspec==1.0.4",
      "description": "Utility library for gitignore style pattern matching of file paths.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-path-specification.readthedocs.io/en/latest/index.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/cpburnz/python-pathspec/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/cpburnz/python-pathspec"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "pathspec",
      "purl": "pkg:pypi/pathspec@1.0.4",
      "type": "library",
      "version": "1.0.4"
    },
    {
      "bom-ref": "pendulum==3.2.0",
      "description": "Python datetimes made easy",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pendulum.eustace.io/docs"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/sdispater/pendulum"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pendulum.eustace.io"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pendulum",
      "purl": "pkg:pypi/pendulum@3.2.0",
      "type": "library",
      "version": "3.2.0"
    },
    {
      "bom-ref": "pip==25.0.1",
      "description": "The PyPA recommended tool for installing Python packages.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pip.pypa.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/pip"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://pip.pypa.io/en/stable/news/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pip.pypa.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pip",
      "purl": "pkg:pypi/pip@25.0.1",
      "type": "library",
      "version": "25.0.1"
    },
    {
      "bom-ref": "pip-api==0.0.34",
      "description": "An unofficial, importable pip API",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://github.com/di/pip-api"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pip-api",
      "purl": "pkg:pypi/pip-api@0.0.34",
      "type": "library",
      "version": "0.0.34"
    },
    {
      "bom-ref": "pip-requirements-parser==32.0.1",
      "description": "pip requirements parser - a mostly correct pip requirements parsing library because it uses pip's own code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/nexB/pip-requirements-parser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pip-requirements-parser",
      "purl": "pkg:pypi/pip-requirements-parser@32.0.1",
      "type": "library",
      "version": "32.0.1"
    },
    {
      "bom-ref": "pip_audit==2.10.0",
      "description": "A tool for scanning Python environments for known vulnerabilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/pypa/pip-audit/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/pip-audit"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pypi.org/project/pip-audit/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pip_audit",
      "purl": "pkg:pypi/pip-audit@2.10.0",
      "type": "library",
      "version": "2.10.0"
    },
    {
      "bom-ref": "platformdirs==4.9.4",
      "description": "A small Python package for determining appropriate platform-specific dirs, e.g. a `user data dir`.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://platformdirs.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/tox-dev/platformdirs/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/tox-dev/platformdirs"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://platformdirs.readthedocs.io/en/latest/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tox-dev/platformdirs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "platformdirs",
      "purl": "pkg:pypi/platformdirs@4.9.4",
      "type": "library",
      "version": "4.9.4"
    },
    {
      "bom-ref": "pluggy==1.6.0",
      "description": "plugin and hook calling mechanisms for python",
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pluggy",
      "purl": "pkg:pypi/pluggy@1.6.0",
      "type": "library",
      "version": "1.6.0"
    },
    {
      "bom-ref": "protobuf==6.33.6",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://developers.google.com/protocol-buffers/"
        }
      ],
      "name": "protobuf",
      "purl": "pkg:pypi/protobuf@6.33.6",
      "type": "library",
      "version": "6.33.6"
    },
    {
      "bom-ref": "psutil==7.2.2",
      "description": "Cross-platform lib for process and system monitoring.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/giampaolo/psutil"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "psutil",
      "purl": "pkg:pypi/psutil@7.2.2",
      "type": "library",
      "version": "7.2.2"
    },
    {
      "bom-ref": "py-serializable==2.1.0",
      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://py-serializable.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/madpah/serializable/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/madpah/serializable"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/madpah/serializable#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "py-serializable",
      "purl": "pkg:pypi/py-serializable@2.1.0",
      "type": "library",
      "version": "2.1.0"
    },
    {
      "bom-ref": "pycparser==3.0",
      "description": "C parser in Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/eliben/pycparser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "pycparser",
      "purl": "pkg:pypi/pycparser@3.0",
      "type": "library",
      "version": "3.0"
    },
    {
      "bom-ref": "pydantic==2.12.5",
      "description": "Data validation using Python type hints",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.pydantic.dev"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/pydantic"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://docs.pydantic.dev/latest/changelog/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pydantic",
      "purl": "pkg:pypi/pydantic@2.12.5",
      "type": "library",
      "version": "2.12.5"
    },
    {
      "bom-ref": "pydantic_core==2.41.5",
      "description": "Core functionality for Pydantic validation and serialization",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/pydantic-core"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic-core"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic-core"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pydantic_core",
      "purl": "pkg:pypi/pydantic-core@2.41.5",
      "type": "library",
      "version": "2.41.5"
    },
    {
      "bom-ref": "pygtrie==2.5.0",
      "description": "A pure Python trie data structure implementation.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://github.com/mina86/pygtrie/tarball/v2.5.0"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/mina86/pygtrie"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pygtrie",
      "purl": "pkg:pypi/pygtrie@2.5.0",
      "type": "library",
      "version": "2.5.0"
    },
    {
      "bom-ref": "pyparsing==3.3.2",
      "description": "pyparsing - Classes and methods to define and execute parsing grammars",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pyparsing-docs.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pyparsing/pyparsing.git"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pyparsing/pyparsing/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pyparsing",
      "purl": "pkg:pypi/pyparsing@3.3.2",
      "type": "library",
      "version": "3.3.2"
    },
    {
      "bom-ref": "python-daemon==3.1.2",
      "description": "Library to implement a well-behaved Unix daemon process.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://pagure.io/python-daemon/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://pagure.io/python-daemon/"
        },
        {
          "comment": "from packaging metadata Project-URL: Change Log",
          "type": "release-notes",
          "url": "https://pagure.io/python-daemon/blob/main/f/ChangeLog"
        },
        {
          "comment": "from packaging metadata Project-URL: Home Page",
          "type": "website",
          "url": "https://pagure.io/python-daemon/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "python-daemon",
      "purl": "pkg:pypi/python-daemon@3.1.2",
      "type": "library",
      "version": "3.1.2"
    },
    {
      "bom-ref": "python-dateutil==2.9.0.post0",
      "description": "Extensions to the standard Python datetime module",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://dateutil.readthedocs.io/en/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/dateutil/dateutil"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/dateutil/dateutil"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "python-dateutil",
      "purl": "pkg:pypi/python-dateutil@2.9.0.post0",
      "type": "library",
      "version": "2.9.0.post0"
    },
    {
      "bom-ref": "python-dotenv==1.2.2",
      "description": "Read key-value pairs from a .env file and set them as environment variables",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/theskumar/python-dotenv"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "python-dotenv",
      "purl": "pkg:pypi/python-dotenv@1.2.2",
      "type": "library",
      "version": "1.2.2"
    },
    {
      "bom-ref": "python-multipart==0.0.22",
      "description": "A streaming multipart parser for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://kludex.github.io/python-multipart/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/Kludex/python-multipart"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/Kludex/python-multipart"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "python-multipart",
      "purl": "pkg:pypi/python-multipart@0.0.22",
      "type": "library",
      "version": "0.0.22"
    },
    {
      "bom-ref": "python-slugify==8.0.4",
      "description": "A Python slugify application that also handles Unicode",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/un33k/python-slugify"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "python-slugify",
      "purl": "pkg:pypi/python-slugify@8.0.4",
      "type": "library",
      "version": "8.0.4"
    },
    {
      "bom-ref": "referencing==0.37.0",
      "description": "JSON Referencing + Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://referencing.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/referencing/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/referencing"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-referencing?utm_source=pypi-referencing&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://referencing.readthedocs.io/en/stable/changes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/referencing"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "referencing",
      "purl": "pkg:pypi/referencing@0.37.0",
      "type": "library",
      "version": "0.37.0"
    },
    {
      "bom-ref": "requests==2.33.1",
      "description": "Python HTTP for Humans.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://requests.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/psf/requests"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "requests",
      "purl": "pkg:pypi/requests@2.33.1",
      "type": "library",
      "version": "2.33.1"
    },
    {
      "bom-ref": "rfc3339-validator==0.1.4",
      "description": "A pure python RFC3339 validator",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/naimetti/rfc3339-validator"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3339-validator",
      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
      "type": "library",
      "version": "0.1.4"
    },
    {
      "bom-ref": "rfc3986-validator==0.1.1",
      "description": "Pure python rfc3986 validator",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/naimetti/rfc3986-validator"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3986-validator",
      "purl": "pkg:pypi/rfc3986-validator@0.1.1",
      "type": "library",
      "version": "0.1.1"
    },
    {
      "bom-ref": "rfc3987-syntax==1.1.0",
      "description": "Helper functions to syntactically validate strings according to RFC 3987.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://github.com/willynilly/rfc3987-syntax#readme"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/willynilly/rfc3987-syntax/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/willynilly/rfc3987-syntax"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/willynilly/rfc3987-syntax"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3987-syntax",
      "purl": "pkg:pypi/rfc3987-syntax@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "rich==14.3.3",
      "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://rich.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/Textualize/rich"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rich",
      "purl": "pkg:pypi/rich@14.3.3",
      "type": "library",
      "version": "14.3.3"
    },
    {
      "bom-ref": "rich-argparse==1.7.2",
      "description": "Rich help formatters for argparse and optparse",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://github.com/hamdanal/rich-argparse#rich-argparse"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue-Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/hamdanal/rich-argparse/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hamdanal/rich-argparse/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/hamdanal/rich-argparse"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rich-argparse",
      "purl": "pkg:pypi/rich-argparse@1.7.2",
      "type": "library",
      "version": "1.7.2"
    },
    {
      "bom-ref": "rich-toolkit==0.19.7",
      "description": "Rich toolkit for building command-line applications",
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rich-toolkit",
      "purl": "pkg:pypi/rich-toolkit@0.19.7",
      "type": "library",
      "version": "0.19.7"
    },
    {
      "bom-ref": "rpds-py==0.30.0",
      "description": "Python bindings to Rust's persistent data structures (rpds)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://rpds.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/crate-py/rpds/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/crate-py/rpds"
        },
        {
          "comment": "from packaging metadata Project-URL: Upstream",
          "type": "other",
          "url": "https://github.com/orium/rpds"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/crate-py/rpds"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rpds-py",
      "purl": "pkg:pypi/rpds-py@0.30.0",
      "type": "library",
      "version": "0.30.0"
    },
    {
      "bom-ref": "setproctitle==1.3.7",
      "description": "A Python module to customize the process title",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "http://pypi.python.org/pypi/setproctitle/"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/dvarrazzo/py-setproctitle"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "setproctitle",
      "purl": "pkg:pypi/setproctitle@1.3.7",
      "type": "library",
      "version": "1.3.7"
    },
    {
      "bom-ref": "shellingham==1.5.4",
      "description": "Tool to Detect Surrounding Shell",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/sarugaku/shellingham"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "ISC"
          }
        }
      ],
      "name": "shellingham",
      "purl": "pkg:pypi/shellingham@1.5.4",
      "type": "library",
      "version": "1.5.4"
    },
    {
      "bom-ref": "six==1.17.0",
      "description": "Python 2 and 3 compatibility utilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/benjaminp/six"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "six",
      "purl": "pkg:pypi/six@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "sniffio==1.3.1",
      "description": "Sniff out which async library your code is running under",
      "evidence": {
        "licenses": [
          {
            "license": {
              "acknowledgement": "declared",
              "id": "MIT"
            }
          },
          {
            "license": {
              "acknowledgement": "declared",
              "name": "License :: OSI Approved :: Apache Software License"
            }
          }
        ]
      },
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://sniffio.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://sniffio.readthedocs.io/en/latest/history.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-trio/sniffio"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "name": "sniffio",
      "purl": "pkg:pypi/sniffio@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "sortedcontainers==2.4.0",
      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://www.grantjenks.com/docs/sortedcontainers/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "sortedcontainers",
      "purl": "pkg:pypi/sortedcontainers@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "sqlparse==0.5.5",
      "description": "A non-validating SQL parser.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://sqlparse.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/andialbrecht/sqlparse/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/andialbrecht/sqlparse"
        },
        {
          "comment": "from packaging metadata Project-URL: Release Notes",
          "type": "other",
          "url": "https://sqlparse.readthedocs.io/en/latest/changes.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Home",
          "type": "website",
          "url": "https://github.com/andialbrecht/sqlparse"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "sqlparse",
      "purl": "pkg:pypi/sqlparse@0.5.5",
      "type": "library",
      "version": "0.5.5"
    },
    {
      "bom-ref": "starlette==0.48.0",
      "description": "The little ASGI library that shines.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.starlette.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/Kludex/starlette"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Kludex"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://www.starlette.io/release-notes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/Kludex/starlette"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "starlette",
      "purl": "pkg:pypi/starlette@0.48.0",
      "type": "library",
      "version": "0.48.0"
    },
    {
      "bom-ref": "stevedore==5.7.0",
      "description": "Manage dynamic plugins for Python applications",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://opendev.org/openstack/stevedore"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://docs.openstack.org/stevedore"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "stevedore",
      "purl": "pkg:pypi/stevedore@5.7.0",
      "type": "library",
      "version": "5.7.0"
    },
    {
      "bom-ref": "structlog==25.5.0",
      "description": "Structured Logging for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.structlog.org/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bluesky",
          "type": "other",
          "url": "https://bsky.app/profile/hynek.me"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://mastodon.social/@hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com?utm_source=lifter&utm_medium=referral&utm_campaign=hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Twitter",
          "type": "other",
          "url": "https://twitter.com/hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hynek/structlog/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub",
          "type": "vcs",
          "url": "https://github.com/hynek/structlog"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "name": "structlog",
      "purl": "pkg:pypi/structlog@25.5.0",
      "type": "library",
      "version": "25.5.0"
    },
    {
      "bom-ref": "svcs==25.1.0",
      "description": "A Flexible Service Locator",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://svcs.hynek.me/"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Mastodon",
          "type": "other",
          "url": "https://mastodon.social/@hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Twitter",
          "type": "other",
          "url": "https://twitter.com/hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hynek/svcs/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub",
          "type": "vcs",
          "url": "https://github.com/hynek/svcs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "svcs",
      "purl": "pkg:pypi/svcs@25.1.0",
      "type": "library",
      "version": "25.1.0"
    },
    {
      "bom-ref": "tabulate==0.10.0",
      "description": "Pretty-print tabular data",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/astanin/python-tabulate"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tabulate",
      "purl": "pkg:pypi/tabulate@0.10.0",
      "type": "library",
      "version": "0.10.0"
    },
    {
      "bom-ref": "tenacity==9.1.4",
      "description": "Retry code until it succeeds",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/jd/tenacity"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "tenacity",
      "purl": "pkg:pypi/tenacity@9.1.4",
      "type": "library",
      "version": "9.1.4"
    },
    {
      "bom-ref": "termcolor==3.3.0",
      "description": "ANSI color formatting for output in terminal",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/termcolor/termcolor"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/termcolor/termcolor/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/termcolor/termcolor"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "termcolor",
      "purl": "pkg:pypi/termcolor@3.3.0",
      "type": "library",
      "version": "3.3.0"
    },
    {
      "bom-ref": "text-unidecode==1.3",
      "description": "The most basic Text::Unidecode port",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/kmike/text-unidecode/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "GPL-2.0-or-later"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Artistic License"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: GNU General Public License (GPL)"
          }
        }
      ],
      "name": "text-unidecode",
      "purl": "pkg:pypi/text-unidecode@1.3",
      "type": "library",
      "version": "1.3"
    },
    {
      "bom-ref": "tomli==2.4.1",
      "description": "A lil' TOML parser",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hukkin/tomli/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/hukkin/tomli"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomli",
      "purl": "pkg:pypi/tomli@2.4.1",
      "type": "library",
      "version": "2.4.1"
    },
    {
      "bom-ref": "tomli_w==1.2.0",
      "description": "A lil' TOML writer",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hukkin/tomli-w/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/hukkin/tomli-w"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomli_w",
      "purl": "pkg:pypi/tomli-w@1.2.0",
      "type": "library",
      "version": "1.2.0"
    },
    {
      "bom-ref": "typer==0.24.1",
      "description": "Typer, build great CLIs. Easy to code. Based on Python type hints.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://typer.tiangolo.com"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/fastapi/typer/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://typer.tiangolo.com/release-notes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/fastapi/typer"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fastapi/typer"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "typer",
      "purl": "pkg:pypi/typer@0.24.1",
      "type": "library",
      "version": "0.24.1"
    },
    {
      "bom-ref": "typing-inspection==0.4.2",
      "description": "Runtime typing introspection tools",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pydantic.github.io/typing-inspection/dev/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/typing-inspection"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/typing-inspection"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "typing-inspection",
      "purl": "pkg:pypi/typing-inspection@0.4.2",
      "type": "library",
      "version": "0.4.2"
    },
    {
      "bom-ref": "typing_extensions==4.15.0",
      "description": "Backported and Experimental Type Hints for Python 3.9+",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://typing-extensions.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python/typing_extensions/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Q & A",
          "type": "other",
          "url": "https://github.com/python/typing/discussions"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/python/typing_extensions"
        },
        {
          "comment": "from packaging metadata Project-URL: Home",
          "type": "website",
          "url": "https://github.com/python/typing_extensions"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "PSF-2.0"
          }
        }
      ],
      "name": "typing_extensions",
      "purl": "pkg:pypi/typing-extensions@4.15.0",
      "type": "library",
      "version": "4.15.0"
    },
    {
      "bom-ref": "tzdata==2026.1",
      "description": "Provider of IANA time zone data",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://tzdata.python.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Reports",
          "type": "issue-tracker",
          "url": "https://github.com/python/tzdata/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python/tzdata"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/python/tzdata"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "tzdata",
      "purl": "pkg:pypi/tzdata@2026.1",
      "type": "library",
      "version": "2026.1"
    },
    {
      "bom-ref": "uc-micro-py==2.0.0",
      "description": "Micro subset of unicode data files for linkify-it-py projects.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tsutsu3/uc.micro-py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "uc-micro-py",
      "purl": "pkg:pypi/uc-micro-py@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "universal_pathlib==0.2.6",
      "description": "pathlib api extended to use fsspec backends",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/fsspec/universal_pathlib/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fsspec/universal_pathlib"
        }
      ],
      "name": "universal_pathlib",
      "purl": "pkg:pypi/universal-pathlib@0.2.6",
      "type": "library",
      "version": "0.2.6"
    },
    {
      "bom-ref": "uri-template==1.3.0",
      "description": "RFC 6570 URI Template Processor",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://gitlab.linss.com/open-source/python/uri-template"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "uri-template",
      "purl": "pkg:pypi/uri-template@1.3.0",
      "type": "library",
      "version": "1.3.0"
    },
    {
      "bom-ref": "urllib3==2.6.3",
      "description": "HTTP library with thread-safe connection pooling, file post, and more.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://urllib3.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/urllib3/urllib3/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/urllib3/urllib3"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/urllib3/urllib3/blob/main/CHANGES.rst"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "urllib3",
      "purl": "pkg:pypi/urllib3@2.6.3",
      "type": "library",
      "version": "2.6.3"
    },
    {
      "bom-ref": "uuid6==2025.0.1",
      "description": "New time-based UUID formats which are suited for use as a database key",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/oittaa/uuid6-python/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/oittaa/uuid6-python"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "uuid6",
      "purl": "pkg:pypi/uuid6@2025.0.1",
      "type": "library",
      "version": "2025.0.1"
    },
    {
      "bom-ref": "uvicorn==0.43.0",
      "description": "The lightning-fast ASGI server.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/Kludex/uvicorn"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/encode"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://uvicorn.dev/release-notes"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://uvicorn.dev/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "uvicorn",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "standard"
        }
      ],
      "purl": "pkg:pypi/uvicorn@0.43.0",
      "type": "library",
      "version": "0.43.0"
    },
    {
      "bom-ref": "uvloop==0.22.1",
      "description": "Fast implementation of asyncio event loop on top of libuv",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: github",
          "type": "vcs",
          "url": "https://github.com/MagicStack/uvloop"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "uvloop",
      "purl": "pkg:pypi/uvloop@0.22.1",
      "type": "library",
      "version": "0.22.1"
    },
    {
      "bom-ref": "watchfiles==1.1.1",
      "description": "Simple, modern and high performance file watching and code reload in python.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://watchfiles.helpmanual.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/samuelcolvin/watchfiles"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/samuelcolvin/watchfiles/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/samuelcolvin/watchfiles"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/samuelcolvin/watchfiles"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "watchfiles",
      "purl": "pkg:pypi/watchfiles@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "webcolors==25.10.0",
      "description": "A library for working with the color formats defined by HTML and CSS.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://webcolors.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/ubernostrum/webcolors"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "webcolors",
      "purl": "pkg:pypi/webcolors@25.10.0",
      "type": "library",
      "version": "25.10.0"
    },
    {
      "bom-ref": "websockets==16.0",
      "description": "An implementation of the WebSocket Protocol (RFC 6455 & 7692)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://websockets.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python-websockets/websockets/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-websockets?utm_source=pypi-websockets&utm_medium=referral&utm_campaign=readme"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://websockets.readthedocs.io/en/stable/project/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-websockets/websockets"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "websockets",
      "purl": "pkg:pypi/websockets@16.0",
      "type": "library",
      "version": "16.0"
    },
    {
      "bom-ref": "wirerope==1.0.0",
      "description": "'Turn functions and methods into fully controllable objects'",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/youknowone/wirerope"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "wirerope",
      "purl": "pkg:pypi/wirerope@1.0.0",
      "type": "library",
      "version": "1.0.0"
    },
    {
      "bom-ref": "wrapt==2.1.2",
      "description": "Module for decorators, wrappers and monkey patching.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://wrapt.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/GrahamDumpleton/wrapt/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://wrapt.readthedocs.io/en/latest/changes.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/GrahamDumpleton/wrapt"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "wrapt",
      "purl": "pkg:pypi/wrapt@2.1.2",
      "type": "library",
      "version": "2.1.2"
    },
    {
      "bom-ref": "zipp==3.23.0",
      "description": "Backport of pathlib-compatible object wrapper for zip files",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/jaraco/zipp"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "zipp",
      "purl": "pkg:pypi/zipp@3.23.0",
      "type": "library",
      "version": "3.23.0"
    }
  ],
  "dependencies": [
    {
      "dependsOn": [
        "filelock==3.25.2",
        "msgpack==1.1.2",
        "requests==2.33.1"
      ],
      "ref": "CacheControl==0.14.4"
    },
    {
      "dependsOn": [
        "wrapt==2.1.2"
      ],
      "ref": "Deprecated==1.3.1"
    },
    {
      "dependsOn": [
        "MarkupSafe==3.0.3",
        "babel==2.18.0"
      ],
      "ref": "Jinja2==3.1.6"
    },
    {
      "dependsOn": [
        "MarkupSafe==3.0.3",
        "babel==2.18.0"
      ],
      "ref": "Mako==1.3.10"
    },
    {
      "ref": "MarkupSafe==3.0.3"
    },
    {
      "dependsOn": [
        "cryptography==46.0.6",
        "typing_extensions==4.15.0"
      ],
      "ref": "PyJWT==2.12.1"
    },
    {
      "ref": "PyYAML==6.0.3"
    },
    {
      "ref": "Pygments==2.20.0"
    },
    {
      "dependsOn": [
        "SQLAlchemy==2.0.49"
      ],
      "ref": "SQLAlchemy-JSONField==1.0.2"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "Pygments==2.20.0",
        "SQLAlchemy==2.0.49",
        "arrow==1.4.0",
        "babel==2.18.0",
        "cryptography==46.0.6",
        "pendulum==3.2.0",
        "python-dateutil==2.9.0.post0"
      ],
      "ref": "SQLAlchemy-Utils==0.42.1"
    },
    {
      "dependsOn": [
        "aiosqlite==0.21.0",
        "greenlet==3.3.2",
        "importlib_metadata==8.7.1",
        "typing_extensions==4.15.0"
      ],
      "ref": "SQLAlchemy==2.0.49"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "a2wsgi==1.10.10"
    },
    {
      "dependsOn": [
        "uvloop==0.22.1"
      ],
      "ref": "aiosmtplib==5.1.0"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "aiosqlite==0.21.0"
    },
    {
      "dependsOn": [
        "Mako==1.3.10",
        "SQLAlchemy==2.0.49",
        "tomli==2.4.1",
        "typing_extensions==4.15.0",
        "tzdata==2026.1"
      ],
      "ref": "alembic==1.18.4"
    },
    {
      "ref": "annotated-doc==0.0.4"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "annotated-types==0.7.0"
    },
    {
      "dependsOn": [
        "idna==3.11",
        "typing_extensions==4.15.0"
      ],
      "ref": "anyio==4.13.0"
    },
    {
      "dependsOn": [
        "Deprecated==1.3.1",
        "Jinja2==3.1.6",
        "PyJWT==2.12.1",
        "Pygments==2.20.0",
        "SQLAlchemy-JSONField==1.0.2",
        "SQLAlchemy-Utils==0.42.1",
        "SQLAlchemy==2.0.49",
        "a2wsgi==1.10.10",
        "aiosqlite==0.21.0",
        "alembic==1.18.4",
        "apache-airflow-providers-common-compat==1.14.2",
        "apache-airflow-providers-common-io==1.7.2",
        "apache-airflow-providers-common-sql==1.34.0",
        "apache-airflow-providers-smtp==2.4.4",
        "apache-airflow-providers-standard==1.12.2",
        "apache-airflow-task-sdk==1.1.8",
        "argcomplete==3.6.3",
        "asgiref==3.11.1",
        "attrs==26.1.0",
        "cadwyn==5.4.6",
        "colorlog==6.10.1",
        "cron_descriptor==2.0.8",
        "croniter==6.2.2",
        "cryptography==46.0.6",
        "dill==0.4.1",
        "fastapi==0.117.1",
        "greenback==1.3.0",
        "greenlet==3.3.2",
        "httpx==0.28.1",
        "importlib_metadata==8.7.1",
        "itsdangerous==2.2.0",
        "jsonschema==4.26.0",
        "lazy-object-proxy==1.12.0",
        "libcst==1.8.6",
        "linkify-it-py==2.1.0",
        "lockfile==0.12.2",
        "methodtools==0.4.7",
        "msgspec==0.20.0",
        "natsort==8.4.0",
        "opentelemetry-api==1.40.0",
        "opentelemetry-exporter-otlp==1.40.0",
        "opentelemetry-proto==1.40.0",
        "packaging==26.0",
        "pathspec==1.0.4",
        "pendulum==3.2.0",
        "pluggy==1.6.0",
        "psutil==7.2.2",
        "pydantic==2.12.5",
        "pygtrie==2.5.0",
        "python-daemon==3.1.2",
        "python-dateutil==2.9.0.post0",
        "python-slugify==8.0.4",
        "requests==2.33.1",
        "rich-argparse==1.7.2",
        "rich==14.3.3",
        "setproctitle==1.3.7",
        "starlette==0.48.0",
        "structlog==25.5.0",
        "svcs==25.1.0",
        "tabulate==0.10.0",
        "tenacity==9.1.4",
        "termcolor==3.3.0",
        "typing_extensions==4.15.0",
        "universal_pathlib==0.2.6",
        "uuid6==2025.0.1",
        "uvicorn==0.43.0"
      ],
      "ref": "apache-airflow-core==3.1.8"
    },
    {
      "dependsOn": [
        "apache-airflow-providers-common-compat==1.14.2",
        "apache-airflow==3.1.8",
        "asgiref==3.11.1",
        "confluent-kafka==2.14.0"
      ],
      "ref": "apache-airflow-providers-apache-kafka==1.13.1"
    },
    {
      "dependsOn": [
        "apache-airflow-providers-standard==1.12.2",
        "apache-airflow==3.1.8",
        "asgiref==3.11.1"
      ],
      "ref": "apache-airflow-providers-common-compat==1.14.2"
    },
    {
      "dependsOn": [
        "apache-airflow-providers-common-compat==1.14.2",
        "apache-airflow==3.1.8"
      ],
      "ref": "apache-airflow-providers-common-io==1.7.2"
    },
    {
      "dependsOn": [
        "SQLAlchemy==2.0.49",
        "apache-airflow-providers-common-compat==1.14.2",
        "apache-airflow==3.1.8",
        "methodtools==0.4.7",
        "more-itertools==11.0.1",
        "sqlparse==0.5.5"
      ],
      "ref": "apache-airflow-providers-common-sql==1.34.0"
    },
    {
      "dependsOn": [
        "aiosmtplib==5.1.0",
        "apache-airflow-providers-common-compat==1.14.2",
        "apache-airflow==3.1.8"
      ],
      "ref": "apache-airflow-providers-smtp==2.4.4"
    },
    {
      "dependsOn": [
        "apache-airflow-providers-common-compat==1.14.2",
        "apache-airflow==3.1.8"
      ],
      "ref": "apache-airflow-providers-standard==1.12.2"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "apache-airflow-core==3.1.8",
        "asgiref==3.11.1",
        "attrs==26.1.0",
        "babel==2.18.0",
        "colorlog==6.10.1",
        "fsspec==2026.3.0",
        "greenback==1.3.0",
        "httpx==0.28.1",
        "methodtools==0.4.7",
        "msgspec==0.20.0",
        "pendulum==3.2.0",
        "psutil==7.2.2",
        "pydantic==2.12.5",
        "pygtrie==2.5.0",
        "python-dateutil==2.9.0.post0",
        "structlog==25.5.0",
        "tenacity==9.1.4"
      ],
      "ref": "apache-airflow-task-sdk==1.1.8"
    },
    {
      "dependsOn": [
        "apache-airflow-core==3.1.8",
        "apache-airflow-providers-apache-kafka==1.13.1",
        "apache-airflow-providers-common-compat==1.14.2",
        "apache-airflow-providers-common-io==1.7.2",
        "apache-airflow-providers-common-sql==1.34.0",
        "apache-airflow-providers-smtp==2.4.4",
        "apache-airflow-providers-standard==1.12.2",
        "apache-airflow-task-sdk==1.1.8"
      ],
      "ref": "apache-airflow==3.1.8"
    },
    {
      "ref": "argcomplete==3.6.3"
    },
    {
      "dependsOn": [
        "python-dateutil==2.9.0.post0",
        "tzdata==2026.1"
      ],
      "ref": "arrow==1.4.0"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "asgiref==3.11.1"
    },
    {
      "ref": "attrs==26.1.0"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "tzdata==2026.1"
      ],
      "ref": "babel==2.18.0"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "rich==14.3.3",
        "stevedore==5.7.0",
        "tomli==2.4.1"
      ],
      "ref": "bandit==1.9.4"
    },
    {
      "ref": "boolean.py==5.0"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "fastapi==0.117.1",
        "pydantic==2.12.5",
        "starlette==0.48.0",
        "typer==0.24.1",
        "typing-inspection==0.4.2",
        "typing_extensions==4.15.0"
      ],
      "ref": "cadwyn==5.4.6"
    },
    {
      "ref": "certifi==2026.2.25"
    },
    {
      "dependsOn": [
        "pycparser==3.0"
      ],
      "ref": "cffi==2.0.0"
    },
    {
      "ref": "chardet==5.2.0"
    },
    {
      "ref": "charset-normalizer==3.4.7"
    },
    {
      "ref": "click==8.3.2"
    },
    {
      "ref": "colorlog==6.10.1"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "attrs==26.1.0",
        "certifi==2026.2.25",
        "fastapi==0.117.1",
        "googleapis-common-protos==1.74.0",
        "httpx==0.28.1",
        "jsonschema==4.26.0",
        "opentelemetry-exporter-otlp==1.40.0",
        "pluggy==1.6.0",
        "protobuf==6.33.6",
        "psutil==7.2.2",
        "pydantic==2.12.5",
        "requests==2.33.1",
        "six==1.17.0",
        "tomli==2.4.1",
        "typing_extensions==4.15.0",
        "urllib3==2.6.3",
        "uvicorn==0.43.0"
      ],
      "ref": "confluent-kafka==2.14.0"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "cron_descriptor==2.0.8"
    },
    {
      "dependsOn": [
        "python-dateutil==2.9.0.post0"
      ],
      "ref": "croniter==6.2.2"
    },
    {
      "dependsOn": [
        "certifi==2026.2.25",
        "cffi==2.0.0",
        "click==8.3.2",
        "typing_extensions==4.15.0"
      ],
      "ref": "cryptography==46.0.6"
    },
    {
      "dependsOn": [
        "chardet==5.2.0",
        "cyclonedx-python-lib==11.7.0",
        "packageurl-python==0.17.6",
        "packaging==26.0",
        "pip-requirements-parser==32.0.1",
        "tomli==2.4.1"
      ],
      "ref": "cyclonedx-bom==7.3.0"
    },
    {
      "dependsOn": [
        "cyclonedx-bom==7.3.0"
      ],
      "ref": "cyclonedx-py==1.0.1"
    },
    {
      "dependsOn": [
        "jsonschema==4.26.0",
        "license-expression==30.4.4",
        "lxml==6.0.2",
        "packageurl-python==0.17.6",
        "py-serializable==2.1.0",
        "referencing==0.37.0",
        "sortedcontainers==2.4.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "cyclonedx-python-lib==11.7.0"
    },
    {
      "ref": "defusedxml==0.7.1"
    },
    {
      "ref": "dill==0.4.1"
    },
    {
      "dependsOn": [
        "cryptography==46.0.6",
        "httpcore==1.0.9",
        "httpx==0.28.1",
        "idna==3.11"
      ],
      "ref": "dnspython==2.8.0"
    },
    {
      "dependsOn": [
        "dnspython==2.8.0",
        "idna==3.11"
      ],
      "ref": "email-validator==2.3.0"
    },
    {
      "dependsOn": [
        "rich-toolkit==0.19.7",
        "tomli==2.4.1",
        "typer==0.24.1",
        "uvicorn==0.43.0"
      ],
      "ref": "fastapi-cli==0.0.24"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "PyYAML==6.0.3",
        "email-validator==2.3.0",
        "fastapi-cli==0.0.24",
        "httpx==0.28.1",
        "itsdangerous==2.2.0",
        "pydantic==2.12.5",
        "python-multipart==0.0.22",
        "starlette==0.48.0",
        "typing_extensions==4.15.0",
        "uvicorn==0.43.0"
      ],
      "ref": "fastapi==0.117.1"
    },
    {
      "ref": "filelock==3.25.2"
    },
    {
      "ref": "fqdn==1.5.1"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "requests==2.33.1",
        "urllib3==2.6.3"
      ],
      "ref": "fsspec==2026.3.0"
    },
    {
      "dependsOn": [
        "grpcio==1.80.0",
        "protobuf==6.33.6"
      ],
      "ref": "googleapis-common-protos==1.74.0"
    },
    {
      "dependsOn": [
        "greenlet==3.3.2",
        "outcome==1.3.0.post0",
        "sniffio==1.3.1"
      ],
      "ref": "greenback==1.3.0"
    },
    {
      "dependsOn": [
        "psutil==7.2.2"
      ],
      "ref": "greenlet==3.3.2"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "grpcio==1.80.0"
    },
    {
      "ref": "h11==0.16.0"
    },
    {
      "dependsOn": [
        "anyio==4.13.0",
        "certifi==2026.2.25",
        "h11==0.16.0"
      ],
      "ref": "httpcore==1.0.9"
    },
    {
      "ref": "httptools==0.7.1"
    },
    {
      "dependsOn": [
        "Pygments==2.20.0",
        "anyio==4.13.0",
        "certifi==2026.2.25",
        "click==8.3.2",
        "httpcore==1.0.9",
        "idna==3.11",
        "rich==14.3.3"
      ],
      "ref": "httpx==0.28.1"
    },
    {
      "ref": "idna==3.11"
    },
    {
      "dependsOn": [
        "packaging==26.0",
        "zipp==3.23.0"
      ],
      "ref": "importlib_metadata==8.7.1"
    },
    {
      "dependsOn": [
        "arrow==1.4.0"
      ],
      "ref": "isoduration==20.11.0"
    },
    {
      "ref": "itsdangerous==2.2.0"
    },
    {
      "ref": "jsonpointer==3.1.1"
    },
    {
      "dependsOn": [
        "referencing==0.37.0"
      ],
      "ref": "jsonschema-specifications==2025.9.1"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "fqdn==1.5.1",
        "idna==3.11",
        "isoduration==20.11.0",
        "jsonpointer==3.1.1",
        "jsonschema-specifications==2025.9.1",
        "referencing==0.37.0",
        "rfc3339-validator==0.1.4",
        "rfc3986-validator==0.1.1",
        "rfc3987-syntax==1.1.0",
        "rpds-py==0.30.0",
        "uri-template==1.3.0",
        "webcolors==25.10.0"
      ],
      "ref": "jsonschema==4.26.0"
    },
    {
      "ref": "lark==1.3.1"
    },
    {
      "ref": "lazy-object-proxy==1.12.0"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "typing_extensions==4.15.0"
      ],
      "ref": "libcst==1.8.6"
    },
    {
      "dependsOn": [
        "boolean.py==5.0"
      ],
      "ref": "license-expression==30.4.4"
    },
    {
      "dependsOn": [
        "uc-micro-py==2.0.0"
      ],
      "ref": "linkify-it-py==2.1.0"
    },
    {
      "ref": "lockfile==0.12.2"
    },
    {
      "ref": "lxml==6.0.2"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "linkify-it-py==2.1.0",
        "mdurl==0.1.2",
        "psutil==7.2.2",
        "requests==2.33.1"
      ],
      "ref": "markdown-it-py==4.0.0"
    },
    {
      "ref": "mdurl==0.1.2"
    },
    {
      "dependsOn": [
        "wirerope==1.0.0"
      ],
      "ref": "methodtools==0.4.7"
    },
    {
      "ref": "more-itertools==11.0.1"
    },
    {
      "ref": "msgpack==1.1.2"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "tomli==2.4.1",
        "tomli_w==1.2.0"
      ],
      "ref": "msgspec==0.20.0"
    },
    {
      "ref": "natsort==8.4.0"
    },
    {
      "dependsOn": [
        "importlib_metadata==8.7.1",
        "typing_extensions==4.15.0"
      ],
      "ref": "opentelemetry-api==1.40.0"
    },
    {
      "dependsOn": [
        "opentelemetry-proto==1.40.0"
      ],
      "ref": "opentelemetry-exporter-otlp-proto-common==1.40.0"
    },
    {
      "dependsOn": [
        "googleapis-common-protos==1.74.0",
        "grpcio==1.80.0",
        "opentelemetry-api==1.40.0",
        "opentelemetry-exporter-otlp-proto-common==1.40.0",
        "opentelemetry-proto==1.40.0",
        "opentelemetry-sdk==1.40.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "opentelemetry-exporter-otlp-proto-grpc==1.40.0"
    },
    {
      "dependsOn": [
        "googleapis-common-protos==1.74.0",
        "opentelemetry-api==1.40.0",
        "opentelemetry-exporter-otlp-proto-common==1.40.0",
        "opentelemetry-proto==1.40.0",
        "opentelemetry-sdk==1.40.0",
        "requests==2.33.1",
        "typing_extensions==4.15.0"
      ],
      "ref": "opentelemetry-exporter-otlp-proto-http==1.40.0"
    },
    {
      "dependsOn": [
        "opentelemetry-exporter-otlp-proto-grpc==1.40.0",
        "opentelemetry-exporter-otlp-proto-http==1.40.0"
      ],
      "ref": "opentelemetry-exporter-otlp==1.40.0"
    },
    {
      "dependsOn": [
        "protobuf==6.33.6"
      ],
      "ref": "opentelemetry-proto==1.40.0"
    },
    {
      "dependsOn": [
        "opentelemetry-api==1.40.0",
        "opentelemetry-semantic-conventions==0.61b0",
        "typing_extensions==4.15.0"
      ],
      "ref": "opentelemetry-sdk==1.40.0"
    },
    {
      "dependsOn": [
        "opentelemetry-api==1.40.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "opentelemetry-semantic-conventions==0.61b0"
    },
    {
      "dependsOn": [
        "attrs==26.1.0"
      ],
      "ref": "outcome==1.3.0.post0"
    },
    {
      "dependsOn": [
        "SQLAlchemy==2.0.49"
      ],
      "ref": "packageurl-python==0.17.6"
    },
    {
      "ref": "packaging==26.0"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "pathspec==1.0.4"
    },
    {
      "dependsOn": [
        "python-dateutil==2.9.0.post0",
        "tzdata==2026.1"
      ],
      "ref": "pendulum==3.2.0"
    },
    {
      "dependsOn": [
        "pip==25.0.1"
      ],
      "ref": "pip-api==0.0.34"
    },
    {
      "dependsOn": [
        "packaging==26.0",
        "pyparsing==3.3.2"
      ],
      "ref": "pip-requirements-parser==32.0.1"
    },
    {
      "ref": "pip==25.0.1"
    },
    {
      "dependsOn": [
        "CacheControl==0.14.4",
        "cyclonedx-python-lib==11.7.0",
        "packaging==26.0",
        "pip-api==0.0.34",
        "pip-requirements-parser==32.0.1",
        "platformdirs==4.9.4",
        "requests==2.33.1",
        "rich==14.3.3",
        "tomli==2.4.1",
        "tomli_w==1.2.0"
      ],
      "ref": "pip_audit==2.10.0"
    },
    {
      "ref": "platformdirs==4.9.4"
    },
    {
      "ref": "pluggy==1.6.0"
    },
    {
      "ref": "protobuf==6.33.6"
    },
    {
      "dependsOn": [
        "packaging==26.0",
        "requests==2.33.1"
      ],
      "ref": "psutil==7.2.2"
    },
    {
      "dependsOn": [
        "defusedxml==0.7.1"
      ],
      "ref": "py-serializable==2.1.0"
    },
    {
      "ref": "pycparser==3.0"
    },
    {
      "dependsOn": [
        "annotated-types==0.7.0",
        "email-validator==2.3.0",
        "pydantic_core==2.41.5",
        "typing-inspection==0.4.2",
        "typing_extensions==4.15.0",
        "tzdata==2026.1"
      ],
      "ref": "pydantic==2.12.5"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "pydantic_core==2.41.5"
    },
    {
      "ref": "pygtrie==2.5.0"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6"
      ],
      "ref": "pyparsing==3.3.2"
    },
    {
      "dependsOn": [
        "lockfile==0.12.2"
      ],
      "ref": "python-daemon==3.1.2"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "python-dateutil==2.9.0.post0"
    },
    {
      "dependsOn": [
        "click==8.3.2"
      ],
      "ref": "python-dotenv==1.2.2"
    },
    {
      "ref": "python-multipart==0.0.22"
    },
    {
      "dependsOn": [
        "text-unidecode==1.3"
      ],
      "ref": "python-slugify==8.0.4"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "rpds-py==0.30.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "referencing==0.37.0"
    },
    {
      "dependsOn": [
        "certifi==2026.2.25",
        "chardet==5.2.0",
        "charset-normalizer==3.4.7",
        "idna==3.11",
        "urllib3==2.6.3"
      ],
      "ref": "requests==2.33.1"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "rfc3339-validator==0.1.4"
    },
    {
      "ref": "rfc3986-validator==0.1.1"
    },
    {
      "dependsOn": [
        "lark==1.3.1"
      ],
      "ref": "rfc3987-syntax==1.1.0"
    },
    {
      "dependsOn": [
        "rich==14.3.3"
      ],
      "ref": "rich-argparse==1.7.2"
    },
    {
      "dependsOn": [
        "click==8.3.2",
        "rich==14.3.3",
        "typing_extensions==4.15.0"
      ],
      "ref": "rich-toolkit==0.19.7"
    },
    {
      "dependsOn": [
        "Pygments==2.20.0",
        "markdown-it-py==4.0.0"
      ],
      "ref": "rich==14.3.3"
    },
    {
      "ref": "rpds-py==0.30.0"
    },
    {
      "ref": "setproctitle==1.3.7"
    },
    {
      "ref": "shellingham==1.5.4"
    },
    {
      "ref": "six==1.17.0"
    },
    {
      "ref": "sniffio==1.3.1"
    },
    {
      "ref": "sortedcontainers==2.4.0"
    },
    {
      "ref": "sqlparse==0.5.5"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "PyYAML==6.0.3",
        "anyio==4.13.0",
        "httpx==0.28.1",
        "itsdangerous==2.2.0",
        "python-multipart==0.0.22",
        "typing_extensions==4.15.0"
      ],
      "ref": "starlette==0.48.0"
    },
    {
      "ref": "stevedore==5.7.0"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "structlog==25.5.0"
    },
    {
      "dependsOn": [
        "SQLAlchemy==2.0.49",
        "attrs==26.1.0",
        "fastapi==0.117.1",
        "httpx==0.28.1",
        "starlette==0.48.0"
      ],
      "ref": "svcs==25.1.0"
    },
    {
      "ref": "tabulate==0.10.0"
    },
    {
      "ref": "tenacity==9.1.4"
    },
    {
      "ref": "termcolor==3.3.0"
    },
    {
      "ref": "text-unidecode==1.3"
    },
    {
      "ref": "tomli==2.4.1"
    },
    {
      "ref": "tomli_w==1.2.0"
    },
    {
      "dependsOn": [
        "annotated-doc==0.0.4",
        "click==8.3.2",
        "rich==14.3.3",
        "shellingham==1.5.4"
      ],
      "ref": "typer==0.24.1"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "typing-inspection==0.4.2"
    },
    {
      "ref": "typing_extensions==4.15.0"
    },
    {
      "ref": "tzdata==2026.1"
    },
    {
      "ref": "uc-micro-py==2.0.0"
    },
    {
      "dependsOn": [
        "fsspec==2026.3.0",
        "packaging==26.0",
        "pydantic==2.12.5",
        "requests==2.33.1",
        "typing_extensions==4.15.0"
      ],
      "ref": "universal_pathlib==0.2.6"
    },
    {
      "ref": "uri-template==1.3.0"
    },
    {
      "ref": "urllib3==2.6.3"
    },
    {
      "ref": "uuid6==2025.0.1"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "click==8.3.2",
        "h11==0.16.0",
        "httptools==0.7.1",
        "python-dotenv==1.2.2",
        "typing_extensions==4.15.0",
        "uvloop==0.22.1",
        "watchfiles==1.1.1",
        "websockets==16.0"
      ],
      "ref": "uvicorn==0.43.0"
    },
    {
      "dependsOn": [
        "psutil==7.2.2"
      ],
      "ref": "uvloop==0.22.1"
    },
    {
      "dependsOn": [
        "anyio==4.13.0"
      ],
      "ref": "watchfiles==1.1.1"
    },
    {
      "ref": "webcolors==25.10.0"
    },
    {
      "ref": "websockets==16.0"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "wirerope==1.0.0"
    },
    {
      "ref": "wrapt==2.1.2"
    },
    {
      "dependsOn": [
        "more-itertools==11.0.1"
      ],
      "ref": "zipp==3.23.0"
    }
  ],
  "metadata": {
    "timestamp": "2026-04-04T16:23:03.812011+00:00",
    "tools": {
      "components": [
        {
          "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-bom/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-bom-tool.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python/"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-py",
          "type": "application",
          "version": "7.3.0"
        },
        {
          "description": "Python library for CycloneDX",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-python-lib/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-python-library.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-python-lib",
          "type": "library",
          "version": "11.7.0"
        }
      ]
    }
  },
  "serialNumber": "urn:uuid:f5327685-c2dc-422c-b672-727c09ea3b90",
  "version": 1,
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6"
}