{ "components": [ { "bom-ref": "CacheControl==0.14.4", "description": "httplib2 caching for requests", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/psf/cachecontrol/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/psf/cachecontrol" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pypi.org/project/CacheControl/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "CacheControl", "properties": [ { "name": "cdx:python:package:required-extra", "value": "filecache" } ], "purl": "pkg:pypi/cachecontrol@0.14.4", "type": "library", "version": "0.14.4" }, { "bom-ref": "PyYAML==6.0.3", "description": "YAML parser and emitter for Python", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://pypi.org/project/PyYAML/" }, { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pyyaml.org/wiki/PyYAMLDocumentation" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/yaml/pyyaml/issues" }, { "comment": "from packaging metadata Project-URL: Mailing lists", "type": "other", "url": "http://lists.sourceforge.net/lists/listinfo/yaml-core" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/yaml/pyyaml" }, { "comment": "from packaging metadata Project-URL: CI", "type": "other", "url": "https://github.com/yaml/pyyaml/actions" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://pyyaml.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "PyYAML", "purl": "pkg:pypi/pyyaml@6.0.3", "type": "library", "version": "6.0.3" }, { "bom-ref": "Pygments==2.20.0", "description": "Pygments is a syntax highlighting package written in Python.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pygments.org/docs" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/pygments/pygments/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pygments/pygments" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/pygments/pygments/blob/master/CHANGES" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pygments.org" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-2-Clause" } } ], "name": "Pygments", "purl": "pkg:pypi/pygments@2.20.0", "type": "library", "version": "2.20.0" }, { "bom-ref": "arrow==1.4.0", "description": "Better dates & times for Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://arrow.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/arrow-py/arrow/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/arrow-py/arrow" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "arrow", "purl": "pkg:pypi/arrow@1.4.0", "type": "library", "version": "1.4.0" }, { "bom-ref": "attrs==26.1.0", "description": "Classes Without Boilerplate", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://www.attrs.org/" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/hynek" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-attrs?utm_source=pypi-attrs&utm_medium=pypi" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://www.attrs.org/en/stable/changelog.html" }, { "comment": "from packaging metadata Project-URL: GitHub", "type": "vcs", "url": "https://github.com/python-attrs/attrs" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "attrs", "purl": "pkg:pypi/attrs@26.1.0", "type": "library", "version": "26.1.0" }, { "bom-ref": "bandit==1.9.4", "description": "Security oriented static analyser for python code.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://bandit.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/PyCQA/bandit/issues" }, { "comment": "from packaging metadata Project-URL: Discord", "type": "other", "url": "https://discord.gg/qYxpadCgkx" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/PyCQA/bandit" }, { "comment": "from packaging metadata Project-URL: Release Notes", "type": "other", "url": "https://github.com/PyCQA/bandit/releases" }, { "comment": "from packaging metadata Project-URL: Sponsor", "type": "other", "url": "https://psfmember.org/civicrm/contribute/transact/?reset=1&id=42" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://bandit.readthedocs.io/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "bandit", "purl": "pkg:pypi/bandit@1.9.4", "type": "library", "version": "1.9.4" }, { "bom-ref": "boolean.py==5.0", "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/bastikr/boolean.py" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-2-Clause" } } ], "name": "boolean.py", "purl": "pkg:pypi/boolean.py@5.0", "type": "library", "version": "5.0" }, { "bom-ref": "certifi==2026.2.25", "description": "Python package for providing Mozilla's CA Bundle.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/certifi/python-certifi" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/certifi/python-certifi" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MPL-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)" } } ], "name": "certifi", "purl": "pkg:pypi/certifi@2026.2.25", "type": "library", "version": "2026.2.25" }, { "bom-ref": "chardet==5.2.0", "description": "Universal encoding detector for Python 3", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://chardet.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue Tracker", "type": "issue-tracker", "url": "https://github.com/chardet/chardet/issues" }, { "comment": "from packaging metadata Project-URL: GitHub Project", "type": "other", "url": "https://github.com/chardet/chardet" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/chardet/chardet" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: GNU Lesser General Public License v2 or later (LGPLv2+)" } } ], "name": "chardet", "purl": "pkg:pypi/chardet@5.2.0", "type": "library", "version": "5.2.0" }, { "bom-ref": "charset-normalizer==3.4.7", "description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://charset-normalizer.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/jawah/charset_normalizer/issues" }, { "comment": "from packaging metadata Project-URL: Code", "type": "other", "url": "https://github.com/jawah/charset_normalizer" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "charset-normalizer", "purl": "pkg:pypi/charset-normalizer@3.4.7", "type": "library", "version": "3.4.7" }, { "bom-ref": "cyclonedx-bom==7.3.0", "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://cyclonedx-bom-tool.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python/issues" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python/releases" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python/#readme" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "cyclonedx-bom", "purl": "pkg:pypi/cyclonedx-bom@7.3.0", "type": "library", "version": "7.3.0" }, { "bom-ref": "cyclonedx-py==1.0.1", "description": "Alias for package 'cyclonedx-bom'", "externalReferences": [ { "comment": "from packaging metadata Project-URL: repository", "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/#package_aliases/cyclonedx-py" } ], "name": "cyclonedx-py", "purl": "pkg:pypi/cyclonedx-py@1.0.1", "type": "library", "version": "1.0.1" }, { "bom-ref": "cyclonedx-python-lib==11.7.0", "description": "Python library for CycloneDX", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://cyclonedx-python-library.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/releases" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python-lib" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "cyclonedx-python-lib", "properties": [ { "name": "cdx:python:package:required-extra", "value": "validation" } ], "purl": "pkg:pypi/cyclonedx-python-lib@11.7.0", "type": "library", "version": "11.7.0" }, { "bom-ref": "defusedxml==0.7.1", "description": "XML bomb protection for Python stdlib modules", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://pypi.python.org/pypi/defusedxml" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/tiran/defusedxml" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Python-2.0" } } ], "name": "defusedxml", "purl": "pkg:pypi/defusedxml@0.7.1", "type": "library", "version": "0.7.1" }, { "bom-ref": "filelock==3.25.2", "description": "A platform independent file lock.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://py-filelock.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/tox-dev/py-filelock/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/tox-dev/py-filelock" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/tox-dev/py-filelock" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "filelock", "purl": "pkg:pypi/filelock@3.25.2", "type": "library", "version": "3.25.2" }, { "bom-ref": "fqdn==1.5.1", "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/ypcrts/fqdn" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)" } } ], "name": "fqdn", "purl": "pkg:pypi/fqdn@1.5.1", "type": "library", "version": "1.5.1" }, { "bom-ref": "idna==3.11", "description": "Internationalized Domain Names in Applications (IDNA)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/kjd/idna/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/kjd/idna" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/kjd/idna/blob/master/HISTORY.rst" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "idna", "purl": "pkg:pypi/idna@3.11", "type": "library", "version": "3.11" }, { "bom-ref": "isoduration==20.11.0", "description": "Operations with ISO 8601 durations", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Bug Reports", "type": "issue-tracker", "url": "https://github.com/bolsote/isoduration/issues" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/bolsote/isoduration/blob/master/CHANGELOG" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/bolsote/isoduration" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/bolsote/isoduration" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "ISC" } } ], "name": "isoduration", "purl": "pkg:pypi/isoduration@20.11.0", "type": "library", "version": "20.11.0" }, { "bom-ref": "jsonpointer==3.1.1", "description": "Identify specific nodes in a JSON document (RFC 6901) ", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/stefankoegl/python-json-pointer" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "jsonpointer", "purl": "pkg:pypi/jsonpointer@3.1.1", "type": "library", "version": "3.1.1" }, { "bom-ref": "jsonschema==4.26.0", "description": "An implementation of JSON Schema validation for Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://python-jsonschema.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/python-jsonschema/jsonschema/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-jsonschema/jsonschema" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema?utm_source=pypi-jsonschema&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/python-jsonschema/jsonschema" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "jsonschema", "properties": [ { "name": "cdx:python:package:required-extra", "value": "format-nongpl" } ], "purl": "pkg:pypi/jsonschema@4.26.0", "type": "library", "version": "4.26.0" }, { "bom-ref": "jsonschema-specifications==2025.9.1", "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://jsonschema-specifications.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/python-jsonschema/jsonschema-specifications/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-jsonschema/jsonschema-specifications" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema-specifications?utm_source=pypi-jsonschema-specifications&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/python-jsonschema/jsonschema-specifications" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "jsonschema-specifications", "purl": "pkg:pypi/jsonschema-specifications@2025.9.1", "type": "library", "version": "2025.9.1" }, { "bom-ref": "lark==1.3.1", "description": "a modern parsing library", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Download", "type": "distribution", "url": "https://github.com/lark-parser/lark/tarball/master" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/lark-parser/lark" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "lark", "purl": "pkg:pypi/lark@1.3.1", "type": "library", "version": "1.3.1" }, { "bom-ref": "license-expression==30.4.4", "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/aboutcode-org/license-expression" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "license-expression", "purl": "pkg:pypi/license-expression@30.4.4", "type": "library", "version": "30.4.4" }, { "bom-ref": "lxml==6.0.2", "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://bugs.launchpad.net/lxml" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/lxml/lxml" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://lxml.de/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "lxml", "purl": "pkg:pypi/lxml@6.0.2", "type": "library", "version": "6.0.2" }, { "bom-ref": "markdown-it-py==4.0.0", "description": "Python port of markdown-it. Markdown parsing, done right!", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://markdown-it-py.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/executablebooks/markdown-it-py" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "markdown-it-py", "purl": "pkg:pypi/markdown-it-py@4.0.0", "type": "library", "version": "4.0.0" }, { "bom-ref": "mdurl==0.1.2", "description": "Markdown URL utilities", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/executablebooks/mdurl" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "mdurl", "purl": "pkg:pypi/mdurl@0.1.2", "type": "library", "version": "0.1.2" }, { "bom-ref": "msgpack==1.1.2", "description": "MessagePack serializer", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://msgpack-python.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/msgpack/msgpack-python/issues" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/msgpack/msgpack-python/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://msgpack.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "msgpack", "purl": "pkg:pypi/msgpack@1.1.2", "type": "library", "version": "1.1.2" }, { "bom-ref": "packageurl-python==0.17.6", "description": "A purl aka. Package URL parser and builder", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/package-url/packageurl-python" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "packageurl-python", "purl": "pkg:pypi/packageurl-python@0.17.6", "type": "library", "version": "0.17.6" }, { "bom-ref": "packaging==26.0", "description": "Core utilities for Python packages", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://packaging.pypa.io/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/packaging" } ], "licenses": [ { "acknowledgement": "declared", "expression": "Apache-2.0 OR BSD-2-Clause" } ], "name": "packaging", "purl": "pkg:pypi/packaging@26.0", "type": "library", "version": "26.0" }, { "bom-ref": "pip==25.0.1", "description": "The PyPA recommended tool for installing Python packages.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pip.pypa.io" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/pip" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://pip.pypa.io/en/stable/news/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pip.pypa.io/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pip", "purl": "pkg:pypi/pip@25.0.1", "type": "library", "version": "25.0.1" }, { "bom-ref": "pip-api==0.0.34", "description": "An unofficial, importable pip API", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "http://github.com/di/pip-api" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "pip-api", "purl": "pkg:pypi/pip-api@0.0.34", "type": "library", "version": "0.0.34" }, { "bom-ref": "pip-requirements-parser==32.0.1", "description": "pip requirements parser - a mostly correct pip requirements parsing library because it uses pip's own code.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/nexB/pip-requirements-parser" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pip-requirements-parser", "purl": "pkg:pypi/pip-requirements-parser@32.0.1", "type": "library", "version": "32.0.1" }, { "bom-ref": "pip_audit==2.10.0", "description": "A tool for scanning Python environments for known vulnerabilities", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/pypa/pip-audit/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/pip-audit" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pypi.org/project/pip-audit/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "pip_audit", "purl": "pkg:pypi/pip-audit@2.10.0", "type": "library", "version": "2.10.0" }, { "bom-ref": "platformdirs==4.9.4", "description": "A small Python package for determining appropriate platform-specific dirs, e.g. a `user data dir`.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://platformdirs.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/tox-dev/platformdirs/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/tox-dev/platformdirs" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://platformdirs.readthedocs.io/en/latest/changelog.html" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/tox-dev/platformdirs" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "platformdirs", "purl": "pkg:pypi/platformdirs@4.9.4", "type": "library", "version": "4.9.4" }, { "bom-ref": "ptyprocess==0.7.0", "description": "Run a subprocess in a pseudo terminal", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/pexpect/ptyprocess" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "ISC" } } ], "name": "ptyprocess", "purl": "pkg:pypi/ptyprocess@0.7.0", "type": "library", "version": "0.7.0" }, { "bom-ref": "py-serializable==2.1.0", "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://py-serializable.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/madpah/serializable/issues" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/madpah/serializable" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/madpah/serializable#readme" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "py-serializable", "purl": "pkg:pypi/py-serializable@2.1.0", "type": "library", "version": "2.1.0" }, { "bom-ref": "pyparsing==3.3.2", "description": "pyparsing - Classes and methods to define and execute parsing grammars", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pyparsing-docs.readthedocs.io/en/latest/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pyparsing/pyparsing.git" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/pyparsing/pyparsing/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pyparsing", "purl": "pkg:pypi/pyparsing@3.3.2", "type": "library", "version": "3.3.2" }, { "bom-ref": "python-dateutil==2.9.0.post0", "description": "Extensions to the standard Python datetime module", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://dateutil.readthedocs.io/en/stable/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/dateutil/dateutil" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/dateutil/dateutil" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "python-dateutil", "purl": "pkg:pypi/python-dateutil@2.9.0.post0", "type": "library", "version": "2.9.0.post0" }, { "bom-ref": "referencing==0.37.0", "description": "JSON Referencing + Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://referencing.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/python-jsonschema/referencing/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-jsonschema/referencing" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-referencing?utm_source=pypi-referencing&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://referencing.readthedocs.io/en/stable/changes/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/python-jsonschema/referencing" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "referencing", "purl": "pkg:pypi/referencing@0.37.0", "type": "library", "version": "0.37.0" }, { "bom-ref": "requests==2.33.1", "description": "Python HTTP for Humans.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://requests.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/psf/requests" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "requests", "purl": "pkg:pypi/requests@2.33.1", "type": "library", "version": "2.33.1" }, { "bom-ref": "rfc3339-validator==0.1.4", "description": "A pure python RFC3339 validator", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/naimetti/rfc3339-validator" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rfc3339-validator", "purl": "pkg:pypi/rfc3339-validator@0.1.4", "type": "library", "version": "0.1.4" }, { "bom-ref": "rfc3986-validator==0.1.1", "description": "Pure python rfc3986 validator", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/naimetti/rfc3986-validator" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rfc3986-validator", "purl": "pkg:pypi/rfc3986-validator@0.1.1", "type": "library", "version": "0.1.1" }, { "bom-ref": "rfc3987-syntax==1.1.0", "description": "Helper functions to syntactically validate strings according to RFC 3987.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://github.com/willynilly/rfc3987-syntax#readme" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/willynilly/rfc3987-syntax/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/willynilly/rfc3987-syntax" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/willynilly/rfc3987-syntax" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rfc3987-syntax", "purl": "pkg:pypi/rfc3987-syntax@1.1.0", "type": "library", "version": "1.1.0" }, { "bom-ref": "rich==14.3.3", "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://rich.readthedocs.io/en/latest/" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/Textualize/rich" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rich", "purl": "pkg:pypi/rich@14.3.3", "type": "library", "version": "14.3.3" }, { "bom-ref": "rpds-py==0.30.0", "description": "Python bindings to Rust's persistent data structures (rpds)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://rpds.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/crate-py/rpds/issues/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/crate-py/rpds" }, { "comment": "from packaging metadata Project-URL: Upstream", "type": "other", "url": "https://github.com/orium/rpds" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://github.com/sponsors/Julian" }, { "comment": "from packaging metadata Project-URL: Tidelift", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/crate-py/rpds" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "rpds-py", "purl": "pkg:pypi/rpds-py@0.30.0", "type": "library", "version": "0.30.0" }, { "bom-ref": "six==1.17.0", "description": "Python 2 and 3 compatibility utilities", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/benjaminp/six" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "six", "purl": "pkg:pypi/six@1.17.0", "type": "library", "version": "1.17.0" }, { "bom-ref": "sortedcontainers==2.4.0", "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "http://www.grantjenks.com/docs/sortedcontainers/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "sortedcontainers", "purl": "pkg:pypi/sortedcontainers@2.4.0", "type": "library", "version": "2.4.0" }, { "bom-ref": "stevedore==5.7.0", "description": "Manage dynamic plugins for Python applications", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://opendev.org/openstack/stevedore" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://docs.openstack.org/stevedore" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "stevedore", "purl": "pkg:pypi/stevedore@5.7.0", "type": "library", "version": "5.7.0" }, { "bom-ref": "tomli==2.4.1", "description": "A lil' TOML parser", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/hukkin/tomli/blob/master/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/hukkin/tomli" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "tomli", "purl": "pkg:pypi/tomli@2.4.1", "type": "library", "version": "2.4.1" }, { "bom-ref": "tomli_w==1.2.0", "description": "A lil' TOML writer", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/hukkin/tomli-w/blob/master/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/hukkin/tomli-w" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "tomli_w", "purl": "pkg:pypi/tomli-w@1.2.0", "type": "library", "version": "1.2.0" }, { "bom-ref": "typing_extensions==4.15.0", "description": "Backported and Experimental Type Hints for Python 3.9+", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://typing-extensions.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/python/typing_extensions/issues" }, { "comment": "from packaging metadata Project-URL: Q & A", "type": "other", "url": "https://github.com/python/typing/discussions" }, { "comment": "from packaging metadata Project-URL: Changes", "type": "release-notes", "url": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/python/typing_extensions" }, { "comment": "from packaging metadata Project-URL: Home", "type": "website", "url": "https://github.com/python/typing_extensions" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "PSF-2.0" } } ], "name": "typing_extensions", "purl": "pkg:pypi/typing-extensions@4.15.0", "type": "library", "version": "4.15.0" }, { "bom-ref": "tzdata==2026.1", "description": "Provider of IANA time zone data", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://tzdata.python.org" }, { "comment": "from packaging metadata Project-URL: Bug Reports", "type": "issue-tracker", "url": "https://github.com/python/tzdata/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python/tzdata" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/python/tzdata" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "tzdata", "purl": "pkg:pypi/tzdata@2026.1", "type": "library", "version": "2026.1" }, { "bom-ref": "uri-template==1.3.0", "description": "RFC 6570 URI Template Processor", "externalReferences": [ { "comment": "from packaging metadata Project-URL: homepage", "type": "website", "url": "https://gitlab.linss.com/open-source/python/uri-template" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "uri-template", "purl": "pkg:pypi/uri-template@1.3.0", "type": "library", "version": "1.3.0" }, { "bom-ref": "urllib3==2.6.3", "description": "HTTP library with thread-safe connection pooling, file post, and more.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://urllib3.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/urllib3/urllib3/issues" }, { "comment": "from packaging metadata Project-URL: Code", "type": "other", "url": "https://github.com/urllib3/urllib3" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/urllib3/urllib3/blob/main/CHANGES.rst" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "urllib3", "purl": "pkg:pypi/urllib3@2.6.3", "type": "library", "version": "2.6.3" }, { "bom-ref": "webcolors==25.10.0", "description": "A library for working with the color formats defined by HTML and CSS.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://webcolors.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/ubernostrum/webcolors" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "webcolors", "purl": "pkg:pypi/webcolors@25.10.0", "type": "library", "version": "25.10.0" } ], "dependencies": [ { "dependsOn": [ "filelock==3.25.2", "msgpack==1.1.2", "requests==2.33.1" ], "ref": "CacheControl==0.14.4" }, { "ref": "PyYAML==6.0.3" }, { "ref": "Pygments==2.20.0" }, { "dependsOn": [ "python-dateutil==2.9.0.post0", "tzdata==2026.1" ], "ref": "arrow==1.4.0" }, { "ref": "attrs==26.1.0" }, { "dependsOn": [ "PyYAML==6.0.3", "rich==14.3.3", "stevedore==5.7.0", "tomli==2.4.1" ], "ref": "bandit==1.9.4" }, { "ref": "boolean.py==5.0" }, { "ref": "certifi==2026.2.25" }, { "ref": "chardet==5.2.0" }, { "ref": "charset-normalizer==3.4.7" }, { "dependsOn": [ "chardet==5.2.0", "cyclonedx-python-lib==11.7.0", "packageurl-python==0.17.6", "packaging==26.0", "pip-requirements-parser==32.0.1", "tomli==2.4.1" ], "ref": "cyclonedx-bom==7.3.0" }, { "dependsOn": [ "cyclonedx-bom==7.3.0" ], "ref": "cyclonedx-py==1.0.1" }, { "dependsOn": [ "jsonschema==4.26.0", "license-expression==30.4.4", "lxml==6.0.2", "packageurl-python==0.17.6", "py-serializable==2.1.0", "referencing==0.37.0", "sortedcontainers==2.4.0", "typing_extensions==4.15.0" ], "ref": "cyclonedx-python-lib==11.7.0" }, { "ref": "defusedxml==0.7.1" }, { "ref": "filelock==3.25.2" }, { "ref": "fqdn==1.5.1" }, { "ref": "idna==3.11" }, { "dependsOn": [ "arrow==1.4.0" ], "ref": "isoduration==20.11.0" }, { "ref": "jsonpointer==3.1.1" }, { "dependsOn": [ "referencing==0.37.0" ], "ref": "jsonschema-specifications==2025.9.1" }, { "dependsOn": [ "attrs==26.1.0", "fqdn==1.5.1", "idna==3.11", "isoduration==20.11.0", "jsonpointer==3.1.1", "jsonschema-specifications==2025.9.1", "referencing==0.37.0", "rfc3339-validator==0.1.4", "rfc3986-validator==0.1.1", "rfc3987-syntax==1.1.0", "rpds-py==0.30.0", "uri-template==1.3.0", "webcolors==25.10.0" ], "ref": "jsonschema==4.26.0" }, { "ref": "lark==1.3.1" }, { "dependsOn": [ "boolean.py==5.0" ], "ref": "license-expression==30.4.4" }, { "ref": "lxml==6.0.2" }, { "dependsOn": [ "PyYAML==6.0.3", "mdurl==0.1.2", "requests==2.33.1" ], "ref": "markdown-it-py==4.0.0" }, { "ref": "mdurl==0.1.2" }, { "ref": "msgpack==1.1.2" }, { "ref": "packageurl-python==0.17.6" }, { "ref": "packaging==26.0" }, { "dependsOn": [ "pip==25.0.1" ], "ref": "pip-api==0.0.34" }, { "dependsOn": [ "packaging==26.0", "pyparsing==3.3.2" ], "ref": "pip-requirements-parser==32.0.1" }, { "ref": "pip==25.0.1" }, { "dependsOn": [ "CacheControl==0.14.4", "cyclonedx-python-lib==11.7.0", "packaging==26.0", "pip-api==0.0.34", "pip-requirements-parser==32.0.1", "platformdirs==4.9.4", "requests==2.33.1", "rich==14.3.3", "tomli==2.4.1", "tomli_w==1.2.0" ], "ref": "pip_audit==2.10.0" }, { "ref": "platformdirs==4.9.4" }, { "ref": "ptyprocess==0.7.0" }, { "dependsOn": [ "defusedxml==0.7.1" ], "ref": "py-serializable==2.1.0" }, { "ref": "pyparsing==3.3.2" }, { "dependsOn": [ "six==1.17.0" ], "ref": "python-dateutil==2.9.0.post0" }, { "dependsOn": [ "attrs==26.1.0", "rpds-py==0.30.0", "typing_extensions==4.15.0" ], "ref": "referencing==0.37.0" }, { "dependsOn": [ "certifi==2026.2.25", "chardet==5.2.0", "charset-normalizer==3.4.7", "idna==3.11", "urllib3==2.6.3" ], "ref": "requests==2.33.1" }, { "dependsOn": [ "six==1.17.0" ], "ref": "rfc3339-validator==0.1.4" }, { "ref": "rfc3986-validator==0.1.1" }, { "dependsOn": [ "lark==1.3.1" ], "ref": "rfc3987-syntax==1.1.0" }, { "dependsOn": [ "Pygments==2.20.0", "markdown-it-py==4.0.0" ], "ref": "rich==14.3.3" }, { "ref": "rpds-py==0.30.0" }, { "ref": "six==1.17.0" }, { "ref": "sortedcontainers==2.4.0" }, { "ref": "stevedore==5.7.0" }, { "ref": "tomli==2.4.1" }, { "ref": "tomli_w==1.2.0" }, { "ref": "typing_extensions==4.15.0" }, { "ref": "tzdata==2026.1" }, { "ref": "uri-template==1.3.0" }, { "ref": "urllib3==2.6.3" }, { "ref": "webcolors==25.10.0" } ], "metadata": { "timestamp": "2026-04-04T03:15:17.057035+00:00", "tools": { "components": [ { "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments", "externalReferences": [ { "type": "build-system", "url": "https://github.com/CycloneDX/cyclonedx-python/actions" }, { "type": "distribution", "url": "https://pypi.org/project/cyclonedx-bom/" }, { "type": "documentation", "url": "https://cyclonedx-bom-tool.readthedocs.io/" }, { "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python/issues" }, { "type": "license", "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE" }, { "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md" }, { "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/" }, { "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python/#readme" } ], "group": "CycloneDX", "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "cyclonedx-py", "type": "application", "version": "7.3.0" }, { "description": "Python library for CycloneDX", "externalReferences": [ { "type": "build-system", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions" }, { "type": "distribution", "url": "https://pypi.org/project/cyclonedx-python-lib/" }, { "type": "documentation", "url": "https://cyclonedx-python-library.readthedocs.io/" }, { "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues" }, { "type": "license", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE" }, { "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md" }, { "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python-lib" }, { "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme" } ], "group": "CycloneDX", "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "cyclonedx-python-lib", "type": "library", "version": "11.7.0" } ] } }, "serialNumber": "urn:uuid:aca033a9-dba9-42bc-b118-a33a8d1c8c16", "version": 1, "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6" }