{
  "components": [
    {
      "bom-ref": "CacheControl==0.14.4",
      "description": "httplib2 caching for requests",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/psf/cachecontrol/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/psf/cachecontrol"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pypi.org/project/CacheControl/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "CacheControl",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "filecache"
        }
      ],
      "purl": "pkg:pypi/cachecontrol@0.14.4",
      "type": "library",
      "version": "0.14.4"
    },
    {
      "bom-ref": "GitPython==3.1.46",
      "description": "GitPython is a Python library used to interact with Git repositories",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/gitpython-developers/GitPython"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "GitPython",
      "purl": "pkg:pypi/gitpython@3.1.46",
      "type": "library",
      "version": "3.1.46"
    },
    {
      "bom-ref": "PyYAML==6.0.3",
      "description": "YAML parser and emitter for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.org/project/PyYAML/"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pyyaml.org/wiki/PyYAMLDocumentation"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/yaml/pyyaml/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mailing lists",
          "type": "other",
          "url": "http://lists.sourceforge.net/lists/listinfo/yaml-core"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/yaml/pyyaml"
        },
        {
          "comment": "from packaging metadata Project-URL: CI",
          "type": "other",
          "url": "https://github.com/yaml/pyyaml/actions"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://pyyaml.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "PyYAML",
      "purl": "pkg:pypi/pyyaml@6.0.3",
      "type": "library",
      "version": "6.0.3"
    },
    {
      "bom-ref": "Pygments==2.20.0",
      "description": "Pygments is a syntax highlighting package written in Python.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pygments.org/docs"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/pygments/pygments/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pygments/pygments"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pygments/pygments/blob/master/CHANGES"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pygments.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "Pygments",
      "purl": "pkg:pypi/pygments@2.20.0",
      "type": "library",
      "version": "2.20.0"
    },
    {
      "bom-ref": "aiobotocore==3.3.0",
      "description": "Async client for aws services using botocore and aiohttp",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://aiobotocore.aio-libs.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/aio-libs/aiobotocore"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "aiobotocore",
      "purl": "pkg:pypi/aiobotocore@3.3.0",
      "type": "library",
      "version": "3.3.0"
    },
    {
      "bom-ref": "aiohappyeyeballs==2.6.1",
      "description": "Happy Eyeballs for asyncio",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://aiohappyeyeballs.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/aio-libs/aiohappyeyeballs/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/aio-libs/aiohappyeyeballs/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/aio-libs/aiohappyeyeballs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "PSF-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Python-2.0"
          }
        }
      ],
      "name": "aiohappyeyeballs",
      "purl": "pkg:pypi/aiohappyeyeballs@2.6.1",
      "type": "library",
      "version": "2.6.1"
    },
    {
      "bom-ref": "aiohttp==3.13.5",
      "description": "Async http client/server framework (asyncio)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Coverage: codecov",
          "type": "other",
          "url": "https://codecov.io/github/aio-libs/aiohttp"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: RTD",
          "type": "other",
          "url": "https://docs.aiohttp.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: Changelog",
          "type": "other",
          "url": "https://docs.aiohttp.org/en/stable/changes.html"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: repo",
          "type": "other",
          "url": "https://github.com/aio-libs/aiohttp"
        },
        {
          "comment": "from packaging metadata Project-URL: CI: GitHub Actions",
          "type": "other",
          "url": "https://github.com/aio-libs/aiohttp/actions?query=workflow%3ACI"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: issues",
          "type": "other",
          "url": "https://github.com/aio-libs/aiohttp/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/aio-libs/aiohttp"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 AND MIT"
        }
      ],
      "name": "aiohttp",
      "purl": "pkg:pypi/aiohttp@3.13.5",
      "type": "library",
      "version": "3.13.5"
    },
    {
      "bom-ref": "aiohttp-retry==2.9.1",
      "description": "Simple retry client for aiohttp",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/inyutin/aiohttp_retry"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "aiohttp-retry",
      "purl": "pkg:pypi/aiohttp-retry@2.9.1",
      "type": "library",
      "version": "2.9.1"
    },
    {
      "bom-ref": "aioitertools==0.13.0",
      "description": "itertools and builtins for AsyncIO and mixed iterables",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://aioitertools.omnilib.dev"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://aioitertools.omnilib.dev/en/latest/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Github",
          "type": "vcs",
          "url": "https://github.com/omnilib/aioitertools"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "aioitertools",
      "purl": "pkg:pypi/aioitertools@0.13.0",
      "type": "library",
      "version": "0.13.0"
    },
    {
      "bom-ref": "aiosignal==1.4.0",
      "description": "aiosignal: a list of registered asynchronous callbacks",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Coverage: codecov",
          "type": "other",
          "url": "https://codecov.io/github/aio-libs/aiosignal"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: RTD",
          "type": "other",
          "url": "https://docs.aiosignal.org"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: repo",
          "type": "other",
          "url": "https://github.com/aio-libs/aiosignal"
        },
        {
          "comment": "from packaging metadata Project-URL: CI: GitHub Actions",
          "type": "other",
          "url": "https://github.com/aio-libs/aiosignal/actions"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: issues",
          "type": "other",
          "url": "https://github.com/aio-libs/aiosignal/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Chat: Gitter",
          "type": "other",
          "url": "https://gitter.im/aio-libs/Lobby"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aio-libs/aiosignal"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "aiosignal",
      "purl": "pkg:pypi/aiosignal@1.4.0",
      "type": "library",
      "version": "1.4.0"
    },
    {
      "bom-ref": "amqp==5.3.1",
      "description": "Low-level AMQP client for Python (fork of amqplib).",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://github.com/celery/py-amqp"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "amqp",
      "purl": "pkg:pypi/amqp@5.3.1",
      "type": "library",
      "version": "5.3.1"
    },
    {
      "bom-ref": "annotated-doc==0.0.4",
      "description": "Document parameters, class attributes, return types, and variables inline, with Annotated.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://github.com/fastapi/annotated-doc"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/fastapi/annotated-doc/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/fastapi/annotated-doc/release-notes.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/fastapi/annotated-doc"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fastapi/annotated-doc"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "annotated-doc",
      "purl": "pkg:pypi/annotated-doc@0.0.4",
      "type": "library",
      "version": "0.0.4"
    },
    {
      "bom-ref": "annotated-types==0.7.0",
      "description": "Reusable constraint types to use with typing.Annotated",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/annotated-types/annotated-types"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/annotated-types/annotated-types/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/annotated-types/annotated-types"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "annotated-types",
      "purl": "pkg:pypi/annotated-types@0.7.0",
      "type": "library",
      "version": "0.7.0"
    },
    {
      "bom-ref": "antlr4-python3-runtime==4.9.3",
      "description": "ANTLR 4.9.3 runtime for Python 3.7",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://www.antlr.org"
        }
      ],
      "name": "antlr4-python3-runtime",
      "purl": "pkg:pypi/antlr4-python3-runtime@4.9.3",
      "type": "library",
      "version": "4.9.3"
    },
    {
      "bom-ref": "appdirs==1.4.4",
      "description": "A small Python module for determining appropriate platform-specific dirs, e.g. a \"user data dir\".",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://github.com/ActiveState/appdirs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "appdirs",
      "purl": "pkg:pypi/appdirs@1.4.4",
      "type": "library",
      "version": "1.4.4"
    },
    {
      "bom-ref": "arrow==1.4.0",
      "description": "Better dates & times for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://arrow.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/arrow-py/arrow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/arrow-py/arrow"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "arrow",
      "purl": "pkg:pypi/arrow@1.4.0",
      "type": "library",
      "version": "1.4.0"
    },
    {
      "bom-ref": "asyncssh==2.22.0",
      "description": "AsyncSSH: Asynchronous SSHv2 client and server library",
      "evidence": {
        "licenses": [
          {
            "license": {
              "acknowledgement": "declared",
              "name": "License :: OSI Approved"
            }
          }
        ]
      },
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://asyncssh.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/ronf/asyncssh/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/ronf/asyncssh"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "http://asyncssh.timeheart.net"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "EPL-2.0 OR GPL-2.0-or-later"
        }
      ],
      "name": "asyncssh",
      "purl": "pkg:pypi/asyncssh@2.22.0",
      "type": "library",
      "version": "2.22.0"
    },
    {
      "bom-ref": "atpublic==7.0.0",
      "description": "Keep all y'all's __all__'s in sync",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://public.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://gitlab.com/warsaw/public/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://gitlab.com/warsaw/public.git"
        },
        {
          "comment": "from packaging metadata Project-URL: Home Page",
          "type": "website",
          "url": "https://public.readthedocs.io"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "atpublic",
      "purl": "pkg:pypi/atpublic@7.0.0",
      "type": "library",
      "version": "7.0.0"
    },
    {
      "bom-ref": "attrs==26.1.0",
      "description": "Classes Without Boilerplate",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.attrs.org/"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-attrs?utm_source=pypi-attrs&utm_medium=pypi"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://www.attrs.org/en/stable/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub",
          "type": "vcs",
          "url": "https://github.com/python-attrs/attrs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "attrs",
      "purl": "pkg:pypi/attrs@26.1.0",
      "type": "library",
      "version": "26.1.0"
    },
    {
      "bom-ref": "bandit==1.9.4",
      "description": "Security oriented static analyser for python code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://bandit.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/PyCQA/bandit/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Discord",
          "type": "other",
          "url": "https://discord.gg/qYxpadCgkx"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/PyCQA/bandit"
        },
        {
          "comment": "from packaging metadata Project-URL: Release Notes",
          "type": "other",
          "url": "https://github.com/PyCQA/bandit/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Sponsor",
          "type": "other",
          "url": "https://psfmember.org/civicrm/contribute/transact/?reset=1&id=42"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://bandit.readthedocs.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "bandit",
      "purl": "pkg:pypi/bandit@1.9.4",
      "type": "library",
      "version": "1.9.4"
    },
    {
      "bom-ref": "billiard==4.2.4",
      "description": "Python multiprocessing fork with improvements and bugfixes",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/celery/billiard"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "billiard",
      "purl": "pkg:pypi/billiard@4.2.4",
      "type": "library",
      "version": "4.2.4"
    },
    {
      "bom-ref": "boolean.py==5.0",
      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/bastikr/boolean.py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "boolean.py",
      "purl": "pkg:pypi/boolean.py@5.0",
      "type": "library",
      "version": "5.0"
    },
    {
      "bom-ref": "botocore==1.42.70",
      "description": "Low-level, data-driven core of boto 3.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/boto/botocore"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "botocore",
      "purl": "pkg:pypi/botocore@1.42.70",
      "type": "library",
      "version": "1.42.70"
    },
    {
      "bom-ref": "celery==5.6.3",
      "description": "Distributed Task Queue.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.celeryq.dev/en/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/celery/celery/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/celery/celery"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://opencollective.com/celery"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://docs.celeryq.dev/en/stable/changelog.html"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://docs.celeryq.dev/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "celery",
      "purl": "pkg:pypi/celery@5.6.3",
      "type": "library",
      "version": "5.6.3"
    },
    {
      "bom-ref": "certifi==2026.2.25",
      "description": "Python package for providing Mozilla's CA Bundle.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/certifi/python-certifi"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/certifi/python-certifi"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MPL-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "certifi",
      "purl": "pkg:pypi/certifi@2026.2.25",
      "type": "library",
      "version": "2026.2.25"
    },
    {
      "bom-ref": "cffi==2.0.0",
      "description": "Foreign Function Interface for Python calling C code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cffi.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python-cffi/cffi/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/python-cffi/cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Downloads",
          "type": "other",
          "url": "https://github.com/python-cffi/cffi/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Contact",
          "type": "other",
          "url": "https://groups.google.com/forum/#!forum/python-cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://cffi.readthedocs.io/en/latest/whatsnew.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "cffi",
      "purl": "pkg:pypi/cffi@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "chardet==5.2.0",
      "description": "Universal encoding detector for Python 3",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://chardet.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/chardet/chardet/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub Project",
          "type": "other",
          "url": "https://github.com/chardet/chardet"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/chardet/chardet"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: GNU Lesser General Public License v2 or later (LGPLv2+)"
          }
        }
      ],
      "name": "chardet",
      "purl": "pkg:pypi/chardet@5.2.0",
      "type": "library",
      "version": "5.2.0"
    },
    {
      "bom-ref": "charset-normalizer==3.4.7",
      "description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://charset-normalizer.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/jawah/charset_normalizer/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/jawah/charset_normalizer"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "charset-normalizer",
      "purl": "pkg:pypi/charset-normalizer@3.4.7",
      "type": "library",
      "version": "3.4.7"
    },
    {
      "bom-ref": "click==8.3.2",
      "description": "Composable command line interface toolkit",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Chat",
          "type": "chat",
          "url": "https://discord.gg/pallets"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://click.palletsprojects.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pallets/click/"
        },
        {
          "comment": "from packaging metadata Project-URL: Donate",
          "type": "other",
          "url": "https://palletsprojects.com/donate"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://click.palletsprojects.com/page/changes/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "click",
      "purl": "pkg:pypi/click@8.3.2",
      "type": "library",
      "version": "8.3.2"
    },
    {
      "bom-ref": "click-didyoumean==0.3.1",
      "description": "Enables git-like *did-you-mean* feature in click",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/click-contrib/click-didyoumean"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/click-contrib/click-didyoumean"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "click-didyoumean",
      "purl": "pkg:pypi/click-didyoumean@0.3.1",
      "type": "library",
      "version": "0.3.1"
    },
    {
      "bom-ref": "click-plugins==1.1.1.2",
      "description": "An extension module for click to enable registering CLI commands via setuptools entry-points.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/click-contrib/click-plugins"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "click-plugins",
      "purl": "pkg:pypi/click-plugins@1.1.1.2",
      "type": "library",
      "version": "1.1.1.2"
    },
    {
      "bom-ref": "click-repl==0.3.0",
      "description": "REPL plugin for Click",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/untitaker/click-repl"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "click-repl",
      "purl": "pkg:pypi/click-repl@0.3.0",
      "type": "library",
      "version": "0.3.0"
    },
    {
      "bom-ref": "colorama==0.4.6",
      "description": "Cross-platform colored terminal text.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tartley/colorama"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "colorama",
      "purl": "pkg:pypi/colorama@0.4.6",
      "type": "library",
      "version": "0.4.6"
    },
    {
      "bom-ref": "configobj==5.0.9",
      "description": "Config file reading, writing and validation.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/DiffSK/configobj"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "configobj",
      "purl": "pkg:pypi/configobj@5.0.9",
      "type": "library",
      "version": "5.0.9"
    },
    {
      "bom-ref": "cryptography==46.0.6",
      "description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: documentation",
          "type": "documentation",
          "url": "https://cryptography.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: issues",
          "type": "issue-tracker",
          "url": "https://github.com/pyca/cryptography/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: source",
          "type": "other",
          "url": "https://github.com/pyca/cryptography/"
        },
        {
          "comment": "from packaging metadata Project-URL: changelog",
          "type": "release-notes",
          "url": "https://cryptography.io/en/latest/changelog/"
        },
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://github.com/pyca/cryptography"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 OR BSD-3-Clause"
        }
      ],
      "name": "cryptography",
      "purl": "pkg:pypi/cryptography@46.0.6",
      "type": "library",
      "version": "46.0.6"
    },
    {
      "bom-ref": "cyclonedx-bom==7.3.0",
      "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cyclonedx-bom-tool.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/CycloneDX/cyclonedx-python/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/CycloneDX/cyclonedx-python/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "cyclonedx-bom",
      "purl": "pkg:pypi/cyclonedx-bom@7.3.0",
      "type": "library",
      "version": "7.3.0"
    },
    {
      "bom-ref": "cyclonedx-py==1.0.1",
      "description": "Alias for package 'cyclonedx-bom'",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python/#package_aliases/cyclonedx-py"
        }
      ],
      "name": "cyclonedx-py",
      "purl": "pkg:pypi/cyclonedx-py@1.0.1",
      "type": "library",
      "version": "1.0.1"
    },
    {
      "bom-ref": "cyclonedx-python-lib==11.7.0",
      "description": "Python library for CycloneDX",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cyclonedx-python-library.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "cyclonedx-python-lib",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "validation"
        }
      ],
      "purl": "pkg:pypi/cyclonedx-python-lib@11.7.0",
      "type": "library",
      "version": "11.7.0"
    },
    {
      "bom-ref": "defusedxml==0.7.1",
      "description": "XML bomb protection for Python stdlib modules",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.python.org/pypi/defusedxml"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/tiran/defusedxml"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Python-2.0"
          }
        }
      ],
      "name": "defusedxml",
      "purl": "pkg:pypi/defusedxml@0.7.1",
      "type": "library",
      "version": "0.7.1"
    },
    {
      "bom-ref": "dictdiffer==0.9.0",
      "description": "Dictdiffer is a library that helps you to diff and patch dictionaries.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Docs",
          "type": "documentation",
          "url": "https://dictdiffer.rtfd.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/inveniosoftware/dictdiffer/blob/master/CHANGES"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/inveniosoftware/dictdiffer"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "dictdiffer",
      "purl": "pkg:pypi/dictdiffer@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "diskcache==5.6.3",
      "description": "Disk Cache -- Disk and file backed persistent cache.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "http://www.grantjenks.com/docs/diskcache/"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/grantjenks/python-diskcache/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/grantjenks/python-diskcache"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://gum.co/diskcache"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://www.grantjenks.com/docs/diskcache/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "diskcache",
      "purl": "pkg:pypi/diskcache@5.6.3",
      "type": "library",
      "version": "5.6.3"
    },
    {
      "bom-ref": "distro==1.9.0",
      "description": "Distro - an OS platform information API",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/python-distro/distro"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "distro",
      "purl": "pkg:pypi/distro@1.9.0",
      "type": "library",
      "version": "1.9.0"
    },
    {
      "bom-ref": "dpath==2.2.0",
      "description": "Filesystem-like pathing and searching for dictionaries",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/dpath-maintainers/dpath-python"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "dpath",
      "purl": "pkg:pypi/dpath@2.2.0",
      "type": "library",
      "version": "2.2.0"
    },
    {
      "bom-ref": "dulwich==1.1.0",
      "description": "Python Git Library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/dulwich/dulwich/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub",
          "type": "vcs",
          "url": "https://github.com/dulwich/dulwich"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://www.dulwich.io/code/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://www.dulwich.io/"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 OR GPL-2.0-or-later"
        }
      ],
      "name": "dulwich",
      "purl": "pkg:pypi/dulwich@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "dvc==3.67.1",
      "description": "Git for data scientists - manage your code and data together",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://dvc.org/doc"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/treeverse/dvc/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/treeverse/dvc"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "dvc",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "testing"
        }
      ],
      "purl": "pkg:pypi/dvc@3.67.1",
      "type": "library",
      "version": "3.67.1"
    },
    {
      "bom-ref": "dvc-data==3.18.3",
      "description": "DVC's data management subsystem",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/iterative/dvc-data/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/iterative/dvc-data"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "dvc-data",
      "purl": "pkg:pypi/dvc-data@3.18.3",
      "type": "library",
      "version": "3.18.3"
    },
    {
      "bom-ref": "dvc-http==2.32.0",
      "description": "http plugin for dvc",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://github.com/iterative/dvc-http"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://dvc.org/doc"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/iterative/dvc-http"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://dvc.org"
        }
      ],
      "name": "dvc-http",
      "purl": "pkg:pypi/dvc-http@2.32.0",
      "type": "library",
      "version": "2.32.0"
    },
    {
      "bom-ref": "dvc-objects==5.2.0",
      "description": "dvc objects - filesystem and object-db level abstractions to use in dvc and dvc-data",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/treeverse/dvc-objects/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/treeverse/dvc-objects"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "dvc-objects",
      "purl": "pkg:pypi/dvc-objects@5.2.0",
      "type": "library",
      "version": "5.2.0"
    },
    {
      "bom-ref": "dvc-render==1.0.2",
      "description": "Dvc Render",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/iterative/dvc-render/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/iterative/dvc-render"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "dvc-render",
      "purl": "pkg:pypi/dvc-render@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "dvc-s3==3.3.0",
      "description": "s3 plugin for dvc",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://dvc.org/doc"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/iterative/dvc-s3"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "dvc-s3",
      "purl": "pkg:pypi/dvc-s3@3.3.0",
      "type": "library",
      "version": "3.3.0"
    },
    {
      "bom-ref": "dvc-studio-client==0.22.0",
      "description": "Small library to post data from DVC/DVCLive to Iterative Studio ",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/iterative/dvc-studio-client/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/iterative/dvc-studio-client"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "dvc-studio-client",
      "purl": "pkg:pypi/dvc-studio-client@0.22.0",
      "type": "library",
      "version": "0.22.0"
    },
    {
      "bom-ref": "dvc-task==0.40.2",
      "description": "Extensible task queue used in DVC.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/iterative/dvc-task/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/iterative/dvc-task"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "dvc-task",
      "purl": "pkg:pypi/dvc-task@0.40.2",
      "type": "library",
      "version": "0.40.2"
    },
    {
      "bom-ref": "entrypoints==0.4",
      "description": "Discover and load entry points from installed packages.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://entrypoints.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/takluyver/entrypoints"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "entrypoints",
      "purl": "pkg:pypi/entrypoints@0.4",
      "type": "library",
      "version": "0.4"
    },
    {
      "bom-ref": "filelock==3.25.2",
      "description": "A platform independent file lock.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://py-filelock.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/tox-dev/py-filelock/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/tox-dev/py-filelock"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tox-dev/py-filelock"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "filelock",
      "purl": "pkg:pypi/filelock@3.25.2",
      "type": "library",
      "version": "3.25.2"
    },
    {
      "bom-ref": "flatten-dict==0.4.2",
      "description": "A flexible utility for flattening and unflattening dict-like objects in Python.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/ianlini/flatten-dict"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/ianlini/flatten-dict"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "flatten-dict",
      "purl": "pkg:pypi/flatten-dict@0.4.2",
      "type": "library",
      "version": "0.4.2"
    },
    {
      "bom-ref": "flufl.lock==9.0.0",
      "description": "NFS-safe file locking with timeouts for POSIX and Windows",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://flufllock.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://gitlab.com/warsaw/flufl.lock/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://gitlab.com/warsaw/flufl.lock.git"
        },
        {
          "comment": "from packaging metadata Project-URL: Home Page",
          "type": "website",
          "url": "https://flufllock.readthedocs.io"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "flufl.lock",
      "purl": "pkg:pypi/flufl.lock@9.0.0",
      "type": "library",
      "version": "9.0.0"
    },
    {
      "bom-ref": "fqdn==1.5.1",
      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/ypcrts/fqdn"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "fqdn",
      "purl": "pkg:pypi/fqdn@1.5.1",
      "type": "library",
      "version": "1.5.1"
    },
    {
      "bom-ref": "frozenlist==1.8.0",
      "description": "A list-like structure which implements collections.abc.MutableSequence",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Coverage: codecov",
          "type": "other",
          "url": "https://codecov.io/github/aio-libs/frozenlist"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: RTD",
          "type": "other",
          "url": "https://frozenlist.aio-libs.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Code of Conduct",
          "type": "other",
          "url": "https://github.com/aio-libs/.github/blob/master/CODE_OF_CONDUCT.md"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: repo",
          "type": "other",
          "url": "https://github.com/aio-libs/frozenlist"
        },
        {
          "comment": "from packaging metadata Project-URL: CI: Github Actions",
          "type": "other",
          "url": "https://github.com/aio-libs/frozenlist/actions"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: Changelog",
          "type": "other",
          "url": "https://github.com/aio-libs/frozenlist/blob/master/CHANGES.rst#changelog"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: issues",
          "type": "other",
          "url": "https://github.com/aio-libs/frozenlist/issues"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aio-libs/frozenlist"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "frozenlist",
      "purl": "pkg:pypi/frozenlist@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "fsspec==2026.3.0",
      "description": "File-system specification",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://filesystem-spec.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://filesystem-spec.readthedocs.io/en/latest/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fsspec/filesystem_spec"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "fsspec",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "http"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "tqdm"
        }
      ],
      "purl": "pkg:pypi/fsspec@2026.3.0",
      "type": "library",
      "version": "2026.3.0"
    },
    {
      "bom-ref": "funcy==2.0",
      "description": "A fancy and practical functional tools",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://github.com/Suor/funcy"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "funcy",
      "purl": "pkg:pypi/funcy@2.0",
      "type": "library",
      "version": "2.0"
    },
    {
      "bom-ref": "gitdb==4.0.12",
      "description": "Git Object Database",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/gitpython-developers/gitdb"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "gitdb",
      "purl": "pkg:pypi/gitdb@4.0.12",
      "type": "library",
      "version": "4.0.12"
    },
    {
      "bom-ref": "grandalf==0.8",
      "description": "Graph and drawing algorithms framework",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/bdcht/grandalf"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "GPL-2.0-only"
          }
        }
      ],
      "name": "grandalf",
      "purl": "pkg:pypi/grandalf@0.8",
      "type": "library",
      "version": "0.8"
    },
    {
      "bom-ref": "gto==1.9.0",
      "description": "Version and deploy your models following GitOps principles",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/iterative/gto/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/iterative/gto"
        }
      ],
      "name": "gto",
      "purl": "pkg:pypi/gto@1.9.0",
      "type": "library",
      "version": "1.9.0"
    },
    {
      "bom-ref": "hydra-core==1.3.2",
      "description": "A framework for elegantly configuring complex applications",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/facebookresearch/hydra"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "hydra-core",
      "purl": "pkg:pypi/hydra-core@1.3.2",
      "type": "library",
      "version": "1.3.2"
    },
    {
      "bom-ref": "idna==3.11",
      "description": "Internationalized Domain Names in Applications (IDNA)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/kjd/idna/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/kjd/idna"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/kjd/idna/blob/master/HISTORY.rst"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "idna",
      "purl": "pkg:pypi/idna@3.11",
      "type": "library",
      "version": "3.11"
    },
    {
      "bom-ref": "isoduration==20.11.0",
      "description": "Operations with ISO 8601 durations",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Reports",
          "type": "issue-tracker",
          "url": "https://github.com/bolsote/isoduration/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/bolsote/isoduration/blob/master/CHANGELOG"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/bolsote/isoduration"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/bolsote/isoduration"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "ISC"
          }
        }
      ],
      "name": "isoduration",
      "purl": "pkg:pypi/isoduration@20.11.0",
      "type": "library",
      "version": "20.11.0"
    },
    {
      "bom-ref": "iterative-telemetry==0.0.10",
      "description": "Common library for sending telemetry",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/iterative/telemetry-python"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "iterative-telemetry",
      "purl": "pkg:pypi/iterative-telemetry@0.0.10",
      "type": "library",
      "version": "0.0.10"
    },
    {
      "bom-ref": "jmespath==1.1.0",
      "description": "JSON Matching Expressions",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/jmespath/jmespath.py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jmespath",
      "purl": "pkg:pypi/jmespath@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "jsonpointer==3.1.1",
      "description": "Identify specific nodes in a JSON document (RFC 6901) ",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/stefankoegl/python-json-pointer"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "jsonpointer",
      "purl": "pkg:pypi/jsonpointer@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "jsonschema==4.26.0",
      "description": "An implementation of JSON Schema validation for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-jsonschema.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/jsonschema/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/jsonschema"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema?utm_source=pypi-jsonschema&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/jsonschema"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jsonschema",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "format-nongpl"
        }
      ],
      "purl": "pkg:pypi/jsonschema@4.26.0",
      "type": "library",
      "version": "4.26.0"
    },
    {
      "bom-ref": "jsonschema-specifications==2025.9.1",
      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://jsonschema-specifications.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema-specifications?utm_source=pypi-jsonschema-specifications&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jsonschema-specifications",
      "purl": "pkg:pypi/jsonschema-specifications@2025.9.1",
      "type": "library",
      "version": "2025.9.1"
    },
    {
      "bom-ref": "kombu==5.6.2",
      "description": "Messaging library for Python.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/celery/kombu"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://kombu.readthedocs.io"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "kombu",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "mongodb"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "msgpack"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "redis"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "sqlalchemy"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "sqs"
        },
        {
          "name": "cdx:python:package:required-extra",
          "value": "yaml"
        }
      ],
      "purl": "pkg:pypi/kombu@5.6.2",
      "type": "library",
      "version": "5.6.2"
    },
    {
      "bom-ref": "lark==1.3.1",
      "description": "a modern parsing library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Download",
          "type": "distribution",
          "url": "https://github.com/lark-parser/lark/tarball/master"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/lark-parser/lark"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "lark",
      "purl": "pkg:pypi/lark@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "license-expression==30.4.4",
      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aboutcode-org/license-expression"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "license-expression",
      "purl": "pkg:pypi/license-expression@30.4.4",
      "type": "library",
      "version": "30.4.4"
    },
    {
      "bom-ref": "lxml==6.0.2",
      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://bugs.launchpad.net/lxml"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/lxml/lxml"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://lxml.de/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "lxml",
      "purl": "pkg:pypi/lxml@6.0.2",
      "type": "library",
      "version": "6.0.2"
    },
    {
      "bom-ref": "markdown-it-py==4.0.0",
      "description": "Python port of markdown-it. Markdown parsing, done right!",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://markdown-it-py.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/executablebooks/markdown-it-py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "markdown-it-py",
      "purl": "pkg:pypi/markdown-it-py@4.0.0",
      "type": "library",
      "version": "4.0.0"
    },
    {
      "bom-ref": "mdurl==0.1.2",
      "description": "Markdown URL utilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/executablebooks/mdurl"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "mdurl",
      "purl": "pkg:pypi/mdurl@0.1.2",
      "type": "library",
      "version": "0.1.2"
    },
    {
      "bom-ref": "msgpack==1.1.2",
      "description": "MessagePack serializer",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://msgpack-python.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/msgpack/msgpack-python/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/msgpack/msgpack-python/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://msgpack.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "msgpack",
      "purl": "pkg:pypi/msgpack@1.1.2",
      "type": "library",
      "version": "1.1.2"
    },
    {
      "bom-ref": "multidict==6.7.1",
      "description": "multidict implementation",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Coverage: codecov",
          "type": "other",
          "url": "https://codecov.io/github/aio-libs/multidict"
        },
        {
          "comment": "from packaging metadata Project-URL: Code of Conduct",
          "type": "other",
          "url": "https://github.com/aio-libs/.github/blob/master/CODE_OF_CONDUCT.md"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: repo",
          "type": "other",
          "url": "https://github.com/aio-libs/multidict"
        },
        {
          "comment": "from packaging metadata Project-URL: CI: GitHub",
          "type": "other",
          "url": "https://github.com/aio-libs/multidict/actions"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: issues",
          "type": "other",
          "url": "https://github.com/aio-libs/multidict/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: RTD",
          "type": "other",
          "url": "https://multidict.aio-libs.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: Changelog",
          "type": "other",
          "url": "https://multidict.aio-libs.org/en/latest/changes/"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aio-libs/multidict"
        }
      ],
      "name": "multidict",
      "purl": "pkg:pypi/multidict@6.7.1",
      "type": "library",
      "version": "6.7.1"
    },
    {
      "bom-ref": "networkx==3.6.1",
      "description": "Python package for creating and manipulating graphs and networks",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://networkx.org/documentation/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/networkx/networkx/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/networkx/networkx"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://networkx.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "networkx",
      "purl": "pkg:pypi/networkx@3.6.1",
      "type": "library",
      "version": "3.6.1"
    },
    {
      "bom-ref": "omegaconf==2.3.0",
      "description": "A flexible configuration library",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/omry/omegaconf"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "omegaconf",
      "purl": "pkg:pypi/omegaconf@2.3.0",
      "type": "library",
      "version": "2.3.0"
    },
    {
      "bom-ref": "orjson==3.11.8",
      "description": "Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: documentation",
          "type": "documentation",
          "url": "https://github.com/ijl/orjson"
        },
        {
          "comment": "from packaging metadata Project-URL: source",
          "type": "other",
          "url": "https://github.com/ijl/orjson"
        },
        {
          "comment": "from packaging metadata Project-URL: changelog",
          "type": "release-notes",
          "url": "https://github.com/ijl/orjson/blob/master/CHANGELOG.md"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "MPL-2.0 AND (Apache-2.0 OR MIT)"
        }
      ],
      "name": "orjson",
      "purl": "pkg:pypi/orjson@3.11.8",
      "type": "library",
      "version": "3.11.8"
    },
    {
      "bom-ref": "packageurl-python==0.17.6",
      "description": "A purl aka. Package URL parser and builder",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/package-url/packageurl-python"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "packageurl-python",
      "purl": "pkg:pypi/packageurl-python@0.17.6",
      "type": "library",
      "version": "0.17.6"
    },
    {
      "bom-ref": "packaging==26.0",
      "description": "Core utilities for Python packages",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://packaging.pypa.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/packaging"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 OR BSD-2-Clause"
        }
      ],
      "name": "packaging",
      "purl": "pkg:pypi/packaging@26.0",
      "type": "library",
      "version": "26.0"
    },
    {
      "bom-ref": "pathspec==1.0.4",
      "description": "Utility library for gitignore style pattern matching of file paths.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-path-specification.readthedocs.io/en/latest/index.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/cpburnz/python-pathspec/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/cpburnz/python-pathspec"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "pathspec",
      "purl": "pkg:pypi/pathspec@1.0.4",
      "type": "library",
      "version": "1.0.4"
    },
    {
      "bom-ref": "pip==25.0.1",
      "description": "The PyPA recommended tool for installing Python packages.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pip.pypa.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/pip"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://pip.pypa.io/en/stable/news/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pip.pypa.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pip",
      "purl": "pkg:pypi/pip@25.0.1",
      "type": "library",
      "version": "25.0.1"
    },
    {
      "bom-ref": "pip-api==0.0.34",
      "description": "An unofficial, importable pip API",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://github.com/di/pip-api"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pip-api",
      "purl": "pkg:pypi/pip-api@0.0.34",
      "type": "library",
      "version": "0.0.34"
    },
    {
      "bom-ref": "pip-requirements-parser==32.0.1",
      "description": "pip requirements parser - a mostly correct pip requirements parsing library because it uses pip's own code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/nexB/pip-requirements-parser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pip-requirements-parser",
      "purl": "pkg:pypi/pip-requirements-parser@32.0.1",
      "type": "library",
      "version": "32.0.1"
    },
    {
      "bom-ref": "pip_audit==2.10.0",
      "description": "A tool for scanning Python environments for known vulnerabilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/pypa/pip-audit/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/pip-audit"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pypi.org/project/pip-audit/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pip_audit",
      "purl": "pkg:pypi/pip-audit@2.10.0",
      "type": "library",
      "version": "2.10.0"
    },
    {
      "bom-ref": "platformdirs==4.9.4",
      "description": "A small Python package for determining appropriate platform-specific dirs, e.g. a `user data dir`.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://platformdirs.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/tox-dev/platformdirs/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/tox-dev/platformdirs"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://platformdirs.readthedocs.io/en/latest/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tox-dev/platformdirs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "platformdirs",
      "purl": "pkg:pypi/platformdirs@4.9.4",
      "type": "library",
      "version": "4.9.4"
    },
    {
      "bom-ref": "prompt_toolkit==3.0.52",
      "description": "Library for building powerful interactive command lines in Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-prompt-toolkit.readthedocs.io/en/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/prompt-toolkit/python-prompt-toolkit"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "prompt_toolkit",
      "purl": "pkg:pypi/prompt-toolkit@3.0.52",
      "type": "library",
      "version": "3.0.52"
    },
    {
      "bom-ref": "propcache==0.4.1",
      "description": "Accelerated property cache",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Coverage: codecov",
          "type": "other",
          "url": "https://codecov.io/github/aio-libs/propcache"
        },
        {
          "comment": "from packaging metadata Project-URL: Code of Conduct",
          "type": "other",
          "url": "https://github.com/aio-libs/.github/blob/master/CODE_OF_CONDUCT.md"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: repo",
          "type": "other",
          "url": "https://github.com/aio-libs/propcache"
        },
        {
          "comment": "from packaging metadata Project-URL: CI: GitHub Workflows",
          "type": "other",
          "url": "https://github.com/aio-libs/propcache/actions?query=branch:master"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: issues",
          "type": "other",
          "url": "https://github.com/aio-libs/propcache/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: RTD",
          "type": "other",
          "url": "https://propcache.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: Changelog",
          "type": "other",
          "url": "https://propcache.readthedocs.io/en/latest/changes/"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aio-libs/propcache"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "propcache",
      "purl": "pkg:pypi/propcache@0.4.1",
      "type": "library",
      "version": "0.4.1"
    },
    {
      "bom-ref": "psutil==7.2.2",
      "description": "Cross-platform lib for process and system monitoring.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/giampaolo/psutil"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "psutil",
      "purl": "pkg:pypi/psutil@7.2.2",
      "type": "library",
      "version": "7.2.2"
    },
    {
      "bom-ref": "py-serializable==2.1.0",
      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://py-serializable.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/madpah/serializable/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/madpah/serializable"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/madpah/serializable#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "py-serializable",
      "purl": "pkg:pypi/py-serializable@2.1.0",
      "type": "library",
      "version": "2.1.0"
    },
    {
      "bom-ref": "pycparser==3.0",
      "description": "C parser in Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/eliben/pycparser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "pycparser",
      "purl": "pkg:pypi/pycparser@3.0",
      "type": "library",
      "version": "3.0"
    },
    {
      "bom-ref": "pydantic==2.12.5",
      "description": "Data validation using Python type hints",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.pydantic.dev"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/pydantic"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://docs.pydantic.dev/latest/changelog/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pydantic",
      "purl": "pkg:pypi/pydantic@2.12.5",
      "type": "library",
      "version": "2.12.5"
    },
    {
      "bom-ref": "pydantic-settings==2.13.1",
      "description": "Settings management using Pydantic",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.pydantic.dev/dev-v2/concepts/pydantic_settings/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/pydantic-settings"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pydantic/pydantic-settings/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic-settings"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pydantic-settings",
      "purl": "pkg:pypi/pydantic-settings@2.13.1",
      "type": "library",
      "version": "2.13.1"
    },
    {
      "bom-ref": "pydantic_core==2.41.5",
      "description": "Core functionality for Pydantic validation and serialization",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/pydantic-core"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic-core"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic-core"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pydantic_core",
      "purl": "pkg:pypi/pydantic-core@2.41.5",
      "type": "library",
      "version": "2.41.5"
    },
    {
      "bom-ref": "pydot==4.0.1",
      "description": "Python interface to Graphviz's Dot",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/pydot/pydot/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pydot/pydot/blob/main/ChangeLog"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydot/pydot"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pydot",
      "purl": "pkg:pypi/pydot@4.0.1",
      "type": "library",
      "version": "4.0.1"
    },
    {
      "bom-ref": "pygit2==1.19.2",
      "description": "Python bindings for libgit2.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.pygit2.org/"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/jdavid"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/libgit2/pygit2/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/libgit2/pygit2"
        }
      ],
      "name": "pygit2",
      "purl": "pkg:pypi/pygit2@1.19.2",
      "type": "library",
      "version": "1.19.2"
    },
    {
      "bom-ref": "pygtrie==2.5.0",
      "description": "A pure Python trie data structure implementation.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://github.com/mina86/pygtrie/tarball/v2.5.0"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/mina86/pygtrie"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pygtrie",
      "purl": "pkg:pypi/pygtrie@2.5.0",
      "type": "library",
      "version": "2.5.0"
    },
    {
      "bom-ref": "pyparsing==3.3.2",
      "description": "pyparsing - Classes and methods to define and execute parsing grammars",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pyparsing-docs.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pyparsing/pyparsing.git"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pyparsing/pyparsing/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pyparsing",
      "purl": "pkg:pypi/pyparsing@3.3.2",
      "type": "library",
      "version": "3.3.2"
    },
    {
      "bom-ref": "python-dateutil==2.9.0.post0",
      "description": "Extensions to the standard Python datetime module",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://dateutil.readthedocs.io/en/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/dateutil/dateutil"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/dateutil/dateutil"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "python-dateutil",
      "purl": "pkg:pypi/python-dateutil@2.9.0.post0",
      "type": "library",
      "version": "2.9.0.post0"
    },
    {
      "bom-ref": "python-dotenv==1.2.2",
      "description": "Read key-value pairs from a .env file and set them as environment variables",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/theskumar/python-dotenv"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "python-dotenv",
      "purl": "pkg:pypi/python-dotenv@1.2.2",
      "type": "library",
      "version": "1.2.2"
    },
    {
      "bom-ref": "referencing==0.37.0",
      "description": "JSON Referencing + Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://referencing.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/referencing/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/referencing"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-referencing?utm_source=pypi-referencing&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://referencing.readthedocs.io/en/stable/changes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/referencing"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "referencing",
      "purl": "pkg:pypi/referencing@0.37.0",
      "type": "library",
      "version": "0.37.0"
    },
    {
      "bom-ref": "requests==2.33.1",
      "description": "Python HTTP for Humans.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://requests.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/psf/requests"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "requests",
      "purl": "pkg:pypi/requests@2.33.1",
      "type": "library",
      "version": "2.33.1"
    },
    {
      "bom-ref": "rfc3339-validator==0.1.4",
      "description": "A pure python RFC3339 validator",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/naimetti/rfc3339-validator"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3339-validator",
      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
      "type": "library",
      "version": "0.1.4"
    },
    {
      "bom-ref": "rfc3986-validator==0.1.1",
      "description": "Pure python rfc3986 validator",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/naimetti/rfc3986-validator"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3986-validator",
      "purl": "pkg:pypi/rfc3986-validator@0.1.1",
      "type": "library",
      "version": "0.1.1"
    },
    {
      "bom-ref": "rfc3987-syntax==1.1.0",
      "description": "Helper functions to syntactically validate strings according to RFC 3987.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://github.com/willynilly/rfc3987-syntax#readme"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/willynilly/rfc3987-syntax/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/willynilly/rfc3987-syntax"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/willynilly/rfc3987-syntax"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3987-syntax",
      "purl": "pkg:pypi/rfc3987-syntax@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "rich==14.3.3",
      "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://rich.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/Textualize/rich"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rich",
      "purl": "pkg:pypi/rich@14.3.3",
      "type": "library",
      "version": "14.3.3"
    },
    {
      "bom-ref": "rpds-py==0.30.0",
      "description": "Python bindings to Rust's persistent data structures (rpds)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://rpds.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/crate-py/rpds/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/crate-py/rpds"
        },
        {
          "comment": "from packaging metadata Project-URL: Upstream",
          "type": "other",
          "url": "https://github.com/orium/rpds"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/crate-py/rpds"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rpds-py",
      "purl": "pkg:pypi/rpds-py@0.30.0",
      "type": "library",
      "version": "0.30.0"
    },
    {
      "bom-ref": "ruamel.yaml==0.19.1",
      "description": "ruamel.yaml is a YAML parser/emitter that supports roundtrip preservation of comments, seq/map flow style, and map key order",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://yaml.dev/doc/ruamel.yaml"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://sourceforge.net/p/ruamel-yaml/tickets/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://sourceforge.net/p/ruamel-yaml/code/ci/default/tree/"
        },
        {
          "comment": "from packaging metadata Project-URL: Home",
          "type": "website",
          "url": "https://sourceforge.net/p/ruamel-yaml/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "ruamel.yaml",
      "purl": "pkg:pypi/ruamel.yaml@0.19.1",
      "type": "library",
      "version": "0.19.1"
    },
    {
      "bom-ref": "s3fs==2026.3.0",
      "description": "Convenient Filesystem interface over S3",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://github.com/fsspec/s3fs/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "s3fs",
      "purl": "pkg:pypi/s3fs@2026.3.0",
      "type": "library",
      "version": "2026.3.0"
    },
    {
      "bom-ref": "scmrepo==3.6.2",
      "description": "scmrepo",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/treeverse/scmrepo/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/treeverse/scmrepo"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "scmrepo",
      "purl": "pkg:pypi/scmrepo@3.6.2",
      "type": "library",
      "version": "3.6.2"
    },
    {
      "bom-ref": "semver==3.0.4",
      "description": "Python helper for Semantic Versioning (https://semver.org)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-semver.rtfd.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python-semver/python-semver/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub Homepage",
          "type": "other",
          "url": "https://github.com/python-semver/python-semver"
        },
        {
          "comment": "from packaging metadata Project-URL: Releases",
          "type": "other",
          "url": "https://github.com/python-semver/python-semver/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://python-semver.readthedocs.io/en/latest/changelog.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "semver",
      "purl": "pkg:pypi/semver@3.0.4",
      "type": "library",
      "version": "3.0.4"
    },
    {
      "bom-ref": "setuptools==82.0.1",
      "description": "Most extensible Python build backend with support for C/C++ extension modules",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://setuptools.pypa.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/setuptools"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://setuptools.pypa.io/en/stable/history.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "setuptools",
      "purl": "pkg:pypi/setuptools@82.0.1",
      "type": "library",
      "version": "82.0.1"
    },
    {
      "bom-ref": "shellingham==1.5.4",
      "description": "Tool to Detect Surrounding Shell",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/sarugaku/shellingham"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "ISC"
          }
        }
      ],
      "name": "shellingham",
      "purl": "pkg:pypi/shellingham@1.5.4",
      "type": "library",
      "version": "1.5.4"
    },
    {
      "bom-ref": "shortuuid==1.0.13",
      "description": "A generator library for concise, unambiguous and URL-safe UUIDs.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/skorokithakis/shortuuid/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "shortuuid",
      "purl": "pkg:pypi/shortuuid@1.0.13",
      "type": "library",
      "version": "1.0.13"
    },
    {
      "bom-ref": "shtab==1.8.0",
      "description": "Automagic shell tab completion for Python CLI applications",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: documentation",
          "type": "documentation",
          "url": "https://docs.iterative.ai/shtab"
        },
        {
          "comment": "from packaging metadata Project-URL: changelog",
          "type": "release-notes",
          "url": "https://github.com/iterative/shtab/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: repository",
          "type": "vcs",
          "url": "https://github.com/iterative/shtab"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "shtab",
      "purl": "pkg:pypi/shtab@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "six==1.17.0",
      "description": "Python 2 and 3 compatibility utilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/benjaminp/six"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "six",
      "purl": "pkg:pypi/six@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "smmap==5.0.3",
      "description": "A pure Python implementation of a sliding window memory map manager",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/gitpython-developers/smmap"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "smmap",
      "purl": "pkg:pypi/smmap@5.0.3",
      "type": "library",
      "version": "5.0.3"
    },
    {
      "bom-ref": "sortedcontainers==2.4.0",
      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://www.grantjenks.com/docs/sortedcontainers/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "sortedcontainers",
      "purl": "pkg:pypi/sortedcontainers@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "sqltrie==0.11.2",
      "description": "SQL-based prefix tree inspired by pygtrie and python-diskcache",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/efiop/sqltrie/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/efiop/sqltrie"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "sqltrie",
      "purl": "pkg:pypi/sqltrie@0.11.2",
      "type": "library",
      "version": "0.11.2"
    },
    {
      "bom-ref": "stevedore==5.7.0",
      "description": "Manage dynamic plugins for Python applications",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://opendev.org/openstack/stevedore"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://docs.openstack.org/stevedore"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "stevedore",
      "purl": "pkg:pypi/stevedore@5.7.0",
      "type": "library",
      "version": "5.7.0"
    },
    {
      "bom-ref": "tabulate==0.10.0",
      "description": "Pretty-print tabular data",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/astanin/python-tabulate"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tabulate",
      "purl": "pkg:pypi/tabulate@0.10.0",
      "type": "library",
      "version": "0.10.0"
    },
    {
      "bom-ref": "tomli==2.4.1",
      "description": "A lil' TOML parser",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hukkin/tomli/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/hukkin/tomli"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomli",
      "purl": "pkg:pypi/tomli@2.4.1",
      "type": "library",
      "version": "2.4.1"
    },
    {
      "bom-ref": "tomli_w==1.2.0",
      "description": "A lil' TOML writer",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hukkin/tomli-w/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/hukkin/tomli-w"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomli_w",
      "purl": "pkg:pypi/tomli-w@1.2.0",
      "type": "library",
      "version": "1.2.0"
    },
    {
      "bom-ref": "tomlkit==0.14.0",
      "description": "Style preserving TOML library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/sdispater/tomlkit"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/sdispater/tomlkit"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomlkit",
      "purl": "pkg:pypi/tomlkit@0.14.0",
      "type": "library",
      "version": "0.14.0"
    },
    {
      "bom-ref": "tqdm==4.67.3",
      "description": "Fast, Extensible Progress Meter",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: wiki",
          "type": "other",
          "url": "https://github.com/tqdm/tqdm/wiki"
        },
        {
          "comment": "from packaging metadata Project-URL: changelog",
          "type": "release-notes",
          "url": "https://tqdm.github.io/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: repository",
          "type": "vcs",
          "url": "https://github.com/tqdm/tqdm"
        },
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://tqdm.github.io"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "MPL-2.0 AND MIT"
        }
      ],
      "name": "tqdm",
      "purl": "pkg:pypi/tqdm@4.67.3",
      "type": "library",
      "version": "4.67.3"
    },
    {
      "bom-ref": "typer==0.24.1",
      "description": "Typer, build great CLIs. Easy to code. Based on Python type hints.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://typer.tiangolo.com"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/fastapi/typer/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://typer.tiangolo.com/release-notes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/fastapi/typer"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fastapi/typer"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "typer",
      "purl": "pkg:pypi/typer@0.24.1",
      "type": "library",
      "version": "0.24.1"
    },
    {
      "bom-ref": "typing-inspection==0.4.2",
      "description": "Runtime typing introspection tools",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pydantic.github.io/typing-inspection/dev/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/typing-inspection"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/typing-inspection"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "typing-inspection",
      "purl": "pkg:pypi/typing-inspection@0.4.2",
      "type": "library",
      "version": "0.4.2"
    },
    {
      "bom-ref": "typing_extensions==4.15.0",
      "description": "Backported and Experimental Type Hints for Python 3.9+",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://typing-extensions.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python/typing_extensions/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Q & A",
          "type": "other",
          "url": "https://github.com/python/typing/discussions"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/python/typing_extensions"
        },
        {
          "comment": "from packaging metadata Project-URL: Home",
          "type": "website",
          "url": "https://github.com/python/typing_extensions"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "PSF-2.0"
          }
        }
      ],
      "name": "typing_extensions",
      "purl": "pkg:pypi/typing-extensions@4.15.0",
      "type": "library",
      "version": "4.15.0"
    },
    {
      "bom-ref": "tzdata==2026.1",
      "description": "Provider of IANA time zone data",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://tzdata.python.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Reports",
          "type": "issue-tracker",
          "url": "https://github.com/python/tzdata/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python/tzdata"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/python/tzdata"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "tzdata",
      "purl": "pkg:pypi/tzdata@2026.1",
      "type": "library",
      "version": "2026.1"
    },
    {
      "bom-ref": "tzlocal==5.3.1",
      "description": "tzinfo object for the local timezone",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/regebro/tzlocal/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source code",
          "type": "other",
          "url": "https://github.com/regebro/tzlocal"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/regebro/tzlocal/blob/master/CHANGES.txt"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tzlocal",
      "purl": "pkg:pypi/tzlocal@5.3.1",
      "type": "library",
      "version": "5.3.1"
    },
    {
      "bom-ref": "uri-template==1.3.0",
      "description": "RFC 6570 URI Template Processor",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://gitlab.linss.com/open-source/python/uri-template"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "uri-template",
      "purl": "pkg:pypi/uri-template@1.3.0",
      "type": "library",
      "version": "1.3.0"
    },
    {
      "bom-ref": "urllib3==2.6.3",
      "description": "HTTP library with thread-safe connection pooling, file post, and more.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://urllib3.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/urllib3/urllib3/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/urllib3/urllib3"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/urllib3/urllib3/blob/main/CHANGES.rst"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "urllib3",
      "purl": "pkg:pypi/urllib3@2.6.3",
      "type": "library",
      "version": "2.6.3"
    },
    {
      "bom-ref": "vine==5.1.0",
      "description": "Python promises.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/celery/vine"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "vine",
      "purl": "pkg:pypi/vine@5.1.0",
      "type": "library",
      "version": "5.1.0"
    },
    {
      "bom-ref": "voluptuous==0.16.0",
      "description": "Python data validation library",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.python.org/pypi/voluptuous"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/alecthomas/voluptuous"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "voluptuous",
      "purl": "pkg:pypi/voluptuous@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "wcwidth==0.6.0",
      "description": "Measures the displayed width of unicode strings in a terminal",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/jquast/wcwidth"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "wcwidth",
      "purl": "pkg:pypi/wcwidth@0.6.0",
      "type": "library",
      "version": "0.6.0"
    },
    {
      "bom-ref": "webcolors==25.10.0",
      "description": "A library for working with the color formats defined by HTML and CSS.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://webcolors.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/ubernostrum/webcolors"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "webcolors",
      "purl": "pkg:pypi/webcolors@25.10.0",
      "type": "library",
      "version": "25.10.0"
    },
    {
      "bom-ref": "wrapt==2.1.2",
      "description": "Module for decorators, wrappers and monkey patching.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://wrapt.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/GrahamDumpleton/wrapt/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://wrapt.readthedocs.io/en/latest/changes.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/GrahamDumpleton/wrapt"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "wrapt",
      "purl": "pkg:pypi/wrapt@2.1.2",
      "type": "library",
      "version": "2.1.2"
    },
    {
      "bom-ref": "yarl==1.23.0",
      "description": "Yet another URL library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Coverage: codecov",
          "type": "other",
          "url": "https://codecov.io/github/aio-libs/yarl"
        },
        {
          "comment": "from packaging metadata Project-URL: Code of Conduct",
          "type": "other",
          "url": "https://github.com/aio-libs/.github/blob/master/CODE_OF_CONDUCT.md"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: repo",
          "type": "other",
          "url": "https://github.com/aio-libs/yarl"
        },
        {
          "comment": "from packaging metadata Project-URL: CI: GitHub Workflows",
          "type": "other",
          "url": "https://github.com/aio-libs/yarl/actions?query=branch:master"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub: issues",
          "type": "other",
          "url": "https://github.com/aio-libs/yarl/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: RTD",
          "type": "other",
          "url": "https://yarl.aio-libs.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Docs: Changelog",
          "type": "other",
          "url": "https://yarl.aio-libs.org/en/latest/changes/"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aio-libs/yarl"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "yarl",
      "purl": "pkg:pypi/yarl@1.23.0",
      "type": "library",
      "version": "1.23.0"
    },
    {
      "bom-ref": "zc.lockfile==4.0",
      "description": "Basic inter-process locks",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/zopefoundation/zc.lockfile"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "ZPL-2.1"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Zope Public License"
          }
        }
      ],
      "name": "zc.lockfile",
      "purl": "pkg:pypi/zc.lockfile@4.0",
      "type": "library",
      "version": "4.0"
    }
  ],
  "dependencies": [
    {
      "dependsOn": [
        "filelock==3.25.2",
        "msgpack==1.1.2",
        "requests==2.33.1"
      ],
      "ref": "CacheControl==0.14.4"
    },
    {
      "dependsOn": [
        "gitdb==4.0.12",
        "typing_extensions==4.15.0"
      ],
      "ref": "GitPython==3.1.46"
    },
    {
      "ref": "PyYAML==6.0.3"
    },
    {
      "dependsOn": [
        "colorama==0.4.6"
      ],
      "ref": "Pygments==2.20.0"
    },
    {
      "dependsOn": [
        "aiohttp==3.13.5",
        "aioitertools==0.13.0",
        "botocore==1.42.70",
        "jmespath==1.1.0",
        "multidict==6.7.1",
        "python-dateutil==2.9.0.post0",
        "typing_extensions==4.15.0",
        "wrapt==2.1.2"
      ],
      "ref": "aiobotocore==3.3.0"
    },
    {
      "ref": "aiohappyeyeballs==2.6.1"
    },
    {
      "dependsOn": [
        "aiohttp==3.13.5"
      ],
      "ref": "aiohttp-retry==2.9.1"
    },
    {
      "dependsOn": [
        "aiohappyeyeballs==2.6.1",
        "aiosignal==1.4.0",
        "attrs==26.1.0",
        "frozenlist==1.8.0",
        "multidict==6.7.1",
        "propcache==0.4.1",
        "yarl==1.23.0"
      ],
      "ref": "aiohttp==3.13.5"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "aioitertools==0.13.0"
    },
    {
      "dependsOn": [
        "frozenlist==1.8.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "aiosignal==1.4.0"
    },
    {
      "dependsOn": [
        "vine==5.1.0"
      ],
      "ref": "amqp==5.3.1"
    },
    {
      "ref": "annotated-doc==0.0.4"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "annotated-types==0.7.0"
    },
    {
      "ref": "antlr4-python3-runtime==4.9.3"
    },
    {
      "ref": "appdirs==1.4.4"
    },
    {
      "dependsOn": [
        "python-dateutil==2.9.0.post0",
        "tzdata==2026.1"
      ],
      "ref": "arrow==1.4.0"
    },
    {
      "dependsOn": [
        "cryptography==46.0.6",
        "typing_extensions==4.15.0"
      ],
      "ref": "asyncssh==2.22.0"
    },
    {
      "ref": "atpublic==7.0.0"
    },
    {
      "ref": "attrs==26.1.0"
    },
    {
      "dependsOn": [
        "GitPython==3.1.46",
        "PyYAML==6.0.3",
        "colorama==0.4.6",
        "rich==14.3.3",
        "stevedore==5.7.0",
        "tomli==2.4.1"
      ],
      "ref": "bandit==1.9.4"
    },
    {
      "ref": "billiard==4.2.4"
    },
    {
      "ref": "boolean.py==5.0"
    },
    {
      "dependsOn": [
        "jmespath==1.1.0",
        "python-dateutil==2.9.0.post0",
        "urllib3==2.6.3"
      ],
      "ref": "botocore==1.42.70"
    },
    {
      "dependsOn": [
        "billiard==4.2.4",
        "click-didyoumean==0.3.1",
        "click-plugins==1.1.1.2",
        "click-repl==0.3.0",
        "click==8.3.2",
        "cryptography==46.0.6",
        "kombu==5.6.2",
        "pydantic==2.12.5",
        "python-dateutil==2.9.0.post0",
        "tzlocal==5.3.1",
        "urllib3==2.6.3",
        "vine==5.1.0"
      ],
      "ref": "celery==5.6.3"
    },
    {
      "ref": "certifi==2026.2.25"
    },
    {
      "dependsOn": [
        "pycparser==3.0"
      ],
      "ref": "cffi==2.0.0"
    },
    {
      "ref": "chardet==5.2.0"
    },
    {
      "ref": "charset-normalizer==3.4.7"
    },
    {
      "dependsOn": [
        "click==8.3.2"
      ],
      "ref": "click-didyoumean==0.3.1"
    },
    {
      "dependsOn": [
        "click==8.3.2"
      ],
      "ref": "click-plugins==1.1.1.2"
    },
    {
      "dependsOn": [
        "click==8.3.2",
        "prompt_toolkit==3.0.52"
      ],
      "ref": "click-repl==0.3.0"
    },
    {
      "dependsOn": [
        "colorama==0.4.6"
      ],
      "ref": "click==8.3.2"
    },
    {
      "ref": "colorama==0.4.6"
    },
    {
      "ref": "configobj==5.0.9"
    },
    {
      "dependsOn": [
        "certifi==2026.2.25",
        "cffi==2.0.0",
        "click==8.3.2",
        "typing_extensions==4.15.0"
      ],
      "ref": "cryptography==46.0.6"
    },
    {
      "dependsOn": [
        "chardet==5.2.0",
        "cyclonedx-python-lib==11.7.0",
        "packageurl-python==0.17.6",
        "packaging==26.0",
        "pip-requirements-parser==32.0.1",
        "tomli==2.4.1"
      ],
      "ref": "cyclonedx-bom==7.3.0"
    },
    {
      "dependsOn": [
        "cyclonedx-bom==7.3.0"
      ],
      "ref": "cyclonedx-py==1.0.1"
    },
    {
      "dependsOn": [
        "jsonschema==4.26.0",
        "license-expression==30.4.4",
        "lxml==6.0.2",
        "packageurl-python==0.17.6",
        "py-serializable==2.1.0",
        "referencing==0.37.0",
        "sortedcontainers==2.4.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "cyclonedx-python-lib==11.7.0"
    },
    {
      "ref": "defusedxml==0.7.1"
    },
    {
      "ref": "dictdiffer==0.9.0"
    },
    {
      "ref": "diskcache==5.6.3"
    },
    {
      "ref": "distro==1.9.0"
    },
    {
      "ref": "dpath==2.2.0"
    },
    {
      "dependsOn": [
        "aiohttp==3.13.5",
        "rich==14.3.3",
        "typing_extensions==4.15.0",
        "urllib3==2.6.3"
      ],
      "ref": "dulwich==1.1.0"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "dictdiffer==0.9.0",
        "diskcache==5.6.3",
        "dvc-objects==5.2.0",
        "fsspec==2026.3.0",
        "funcy==2.0",
        "orjson==3.11.8",
        "pygtrie==2.5.0",
        "sqltrie==0.11.2",
        "tqdm==4.67.3",
        "typer==0.24.1"
      ],
      "ref": "dvc-data==3.18.3"
    },
    {
      "dependsOn": [
        "aiohttp-retry==2.9.1",
        "dvc==3.67.1",
        "fsspec==2026.3.0"
      ],
      "ref": "dvc-http==2.32.0"
    },
    {
      "dependsOn": [
        "fsspec==2026.3.0",
        "funcy==2.0"
      ],
      "ref": "dvc-objects==5.2.0"
    },
    {
      "dependsOn": [
        "flatten-dict==0.4.2",
        "tabulate==0.10.0"
      ],
      "ref": "dvc-render==1.0.2"
    },
    {
      "dependsOn": [
        "aiobotocore==3.3.0",
        "botocore==1.42.70",
        "dvc==3.67.1",
        "flatten-dict==0.4.2",
        "fsspec==2026.3.0",
        "funcy==2.0",
        "s3fs==2026.3.0"
      ],
      "ref": "dvc-s3==3.3.0"
    },
    {
      "dependsOn": [
        "dulwich==1.1.0",
        "requests==2.33.1",
        "voluptuous==0.16.0"
      ],
      "ref": "dvc-studio-client==0.22.0"
    },
    {
      "dependsOn": [
        "celery==5.6.3",
        "funcy==2.0",
        "kombu==5.6.2",
        "shortuuid==1.0.13"
      ],
      "ref": "dvc-task==0.40.2"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "celery==5.6.3",
        "colorama==0.4.6",
        "configobj==5.0.9",
        "distro==1.9.0",
        "dpath==2.2.0",
        "dulwich==1.1.0",
        "dvc-data==3.18.3",
        "dvc-http==2.32.0",
        "dvc-objects==5.2.0",
        "dvc-render==1.0.2",
        "dvc-s3==3.3.0",
        "dvc-studio-client==0.22.0",
        "dvc-task==0.40.2",
        "filelock==3.25.2",
        "flatten-dict==0.4.2",
        "flufl.lock==9.0.0",
        "fsspec==2026.3.0",
        "funcy==2.0",
        "grandalf==0.8",
        "gto==1.9.0",
        "hydra-core==1.3.2",
        "iterative-telemetry==0.0.10",
        "kombu==5.6.2",
        "networkx==3.6.1",
        "omegaconf==2.3.0",
        "packaging==26.0",
        "pathspec==1.0.4",
        "platformdirs==4.9.4",
        "psutil==7.2.2",
        "pydot==4.0.1",
        "pygtrie==2.5.0",
        "pyparsing==3.3.2",
        "requests==2.33.1",
        "rich==14.3.3",
        "ruamel.yaml==0.19.1",
        "scmrepo==3.6.2",
        "shortuuid==1.0.13",
        "shtab==1.8.0",
        "tabulate==0.10.0",
        "tomlkit==0.14.0",
        "tqdm==4.67.3",
        "typing_extensions==4.15.0",
        "tzdata==2026.1",
        "voluptuous==0.16.0",
        "zc.lockfile==4.0"
      ],
      "ref": "dvc==3.67.1"
    },
    {
      "ref": "entrypoints==0.4"
    },
    {
      "ref": "filelock==3.25.2"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "flatten-dict==0.4.2"
    },
    {
      "dependsOn": [
        "atpublic==7.0.0",
        "psutil==7.2.2"
      ],
      "ref": "flufl.lock==9.0.0"
    },
    {
      "ref": "fqdn==1.5.1"
    },
    {
      "ref": "frozenlist==1.8.0"
    },
    {
      "dependsOn": [
        "aiobotocore==3.3.0",
        "aiohttp==3.13.5",
        "pygit2==1.19.2",
        "requests==2.33.1",
        "s3fs==2026.3.0",
        "tqdm==4.67.3",
        "urllib3==2.6.3",
        "yarl==1.23.0"
      ],
      "ref": "fsspec==2026.3.0"
    },
    {
      "ref": "funcy==2.0"
    },
    {
      "dependsOn": [
        "smmap==5.0.3"
      ],
      "ref": "gitdb==4.0.12"
    },
    {
      "dependsOn": [
        "pyparsing==3.3.2"
      ],
      "ref": "grandalf==0.8"
    },
    {
      "dependsOn": [
        "entrypoints==0.4",
        "funcy==2.0",
        "pydantic-settings==2.13.1",
        "pydantic==2.12.5",
        "pygit2==1.19.2",
        "rich==14.3.3",
        "ruamel.yaml==0.19.1",
        "scmrepo==3.6.2",
        "semver==3.0.4",
        "tabulate==0.10.0",
        "typer==0.24.1"
      ],
      "ref": "gto==1.9.0"
    },
    {
      "dependsOn": [
        "antlr4-python3-runtime==4.9.3",
        "omegaconf==2.3.0",
        "packaging==26.0"
      ],
      "ref": "hydra-core==1.3.2"
    },
    {
      "ref": "idna==3.11"
    },
    {
      "dependsOn": [
        "arrow==1.4.0"
      ],
      "ref": "isoduration==20.11.0"
    },
    {
      "dependsOn": [
        "appdirs==1.4.4",
        "distro==1.9.0",
        "filelock==3.25.2",
        "requests==2.33.1"
      ],
      "ref": "iterative-telemetry==0.0.10"
    },
    {
      "ref": "jmespath==1.1.0"
    },
    {
      "ref": "jsonpointer==3.1.1"
    },
    {
      "dependsOn": [
        "referencing==0.37.0"
      ],
      "ref": "jsonschema-specifications==2025.9.1"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "fqdn==1.5.1",
        "idna==3.11",
        "isoduration==20.11.0",
        "jsonpointer==3.1.1",
        "jsonschema-specifications==2025.9.1",
        "referencing==0.37.0",
        "rfc3339-validator==0.1.4",
        "rfc3986-validator==0.1.1",
        "rfc3987-syntax==1.1.0",
        "rpds-py==0.30.0",
        "uri-template==1.3.0",
        "webcolors==25.10.0"
      ],
      "ref": "jsonschema==4.26.0"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "amqp==5.3.1",
        "msgpack==1.1.2",
        "packaging==26.0",
        "tzdata==2026.1",
        "urllib3==2.6.3",
        "vine==5.1.0"
      ],
      "ref": "kombu==5.6.2"
    },
    {
      "ref": "lark==1.3.1"
    },
    {
      "dependsOn": [
        "boolean.py==5.0"
      ],
      "ref": "license-expression==30.4.4"
    },
    {
      "ref": "lxml==6.0.2"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "mdurl==0.1.2",
        "psutil==7.2.2",
        "requests==2.33.1"
      ],
      "ref": "markdown-it-py==4.0.0"
    },
    {
      "ref": "mdurl==0.1.2"
    },
    {
      "ref": "msgpack==1.1.2"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "multidict==6.7.1"
    },
    {
      "dependsOn": [
        "lxml==6.0.2",
        "pydot==4.0.1"
      ],
      "ref": "networkx==3.6.1"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "antlr4-python3-runtime==4.9.3"
      ],
      "ref": "omegaconf==2.3.0"
    },
    {
      "ref": "orjson==3.11.8"
    },
    {
      "dependsOn": [
        "setuptools==82.0.1"
      ],
      "ref": "packageurl-python==0.17.6"
    },
    {
      "ref": "packaging==26.0"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "pathspec==1.0.4"
    },
    {
      "dependsOn": [
        "pip==25.0.1"
      ],
      "ref": "pip-api==0.0.34"
    },
    {
      "dependsOn": [
        "packaging==26.0",
        "pyparsing==3.3.2"
      ],
      "ref": "pip-requirements-parser==32.0.1"
    },
    {
      "ref": "pip==25.0.1"
    },
    {
      "dependsOn": [
        "CacheControl==0.14.4",
        "cyclonedx-python-lib==11.7.0",
        "packaging==26.0",
        "pip-api==0.0.34",
        "pip-requirements-parser==32.0.1",
        "platformdirs==4.9.4",
        "requests==2.33.1",
        "rich==14.3.3",
        "tomli==2.4.1",
        "tomli_w==1.2.0"
      ],
      "ref": "pip_audit==2.10.0"
    },
    {
      "ref": "platformdirs==4.9.4"
    },
    {
      "dependsOn": [
        "wcwidth==0.6.0"
      ],
      "ref": "prompt_toolkit==3.0.52"
    },
    {
      "ref": "propcache==0.4.1"
    },
    {
      "dependsOn": [
        "colorama==0.4.6",
        "packaging==26.0",
        "requests==2.33.1",
        "setuptools==82.0.1"
      ],
      "ref": "psutil==7.2.2"
    },
    {
      "dependsOn": [
        "defusedxml==0.7.1"
      ],
      "ref": "py-serializable==2.1.0"
    },
    {
      "ref": "pycparser==3.0"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "pydantic==2.12.5",
        "python-dotenv==1.2.2",
        "tomli==2.4.1",
        "typing-inspection==0.4.2"
      ],
      "ref": "pydantic-settings==2.13.1"
    },
    {
      "dependsOn": [
        "annotated-types==0.7.0",
        "pydantic_core==2.41.5",
        "typing-inspection==0.4.2",
        "typing_extensions==4.15.0",
        "tzdata==2026.1"
      ],
      "ref": "pydantic==2.12.5"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "pydantic_core==2.41.5"
    },
    {
      "dependsOn": [
        "chardet==5.2.0",
        "pyparsing==3.3.2"
      ],
      "ref": "pydot==4.0.1"
    },
    {
      "dependsOn": [
        "cffi==2.0.0"
      ],
      "ref": "pygit2==1.19.2"
    },
    {
      "ref": "pygtrie==2.5.0"
    },
    {
      "ref": "pyparsing==3.3.2"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "python-dateutil==2.9.0.post0"
    },
    {
      "dependsOn": [
        "click==8.3.2"
      ],
      "ref": "python-dotenv==1.2.2"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "rpds-py==0.30.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "referencing==0.37.0"
    },
    {
      "dependsOn": [
        "certifi==2026.2.25",
        "chardet==5.2.0",
        "charset-normalizer==3.4.7",
        "idna==3.11",
        "urllib3==2.6.3"
      ],
      "ref": "requests==2.33.1"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "rfc3339-validator==0.1.4"
    },
    {
      "ref": "rfc3986-validator==0.1.1"
    },
    {
      "dependsOn": [
        "lark==1.3.1"
      ],
      "ref": "rfc3987-syntax==1.1.0"
    },
    {
      "dependsOn": [
        "Pygments==2.20.0",
        "markdown-it-py==4.0.0"
      ],
      "ref": "rich==14.3.3"
    },
    {
      "ref": "rpds-py==0.30.0"
    },
    {
      "ref": "ruamel.yaml==0.19.1"
    },
    {
      "dependsOn": [
        "aiobotocore==3.3.0",
        "aiohttp==3.13.5",
        "fsspec==2026.3.0"
      ],
      "ref": "s3fs==2026.3.0"
    },
    {
      "dependsOn": [
        "GitPython==3.1.46",
        "aiohttp-retry==2.9.1",
        "asyncssh==2.22.0",
        "dulwich==1.1.0",
        "fsspec==2026.3.0",
        "funcy==2.0",
        "pathspec==1.0.4",
        "pygit2==1.19.2",
        "pygtrie==2.5.0",
        "tqdm==4.67.3"
      ],
      "ref": "scmrepo==3.6.2"
    },
    {
      "ref": "semver==3.0.4"
    },
    {
      "dependsOn": [
        "filelock==3.25.2",
        "packaging==26.0",
        "pip==25.0.1",
        "tomli==2.4.1",
        "tomli_w==1.2.0"
      ],
      "ref": "setuptools==82.0.1"
    },
    {
      "ref": "shellingham==1.5.4"
    },
    {
      "ref": "shortuuid==1.0.13"
    },
    {
      "ref": "shtab==1.8.0"
    },
    {
      "ref": "six==1.17.0"
    },
    {
      "ref": "smmap==5.0.3"
    },
    {
      "ref": "sortedcontainers==2.4.0"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "orjson==3.11.8",
        "pygtrie==2.5.0"
      ],
      "ref": "sqltrie==0.11.2"
    },
    {
      "ref": "stevedore==5.7.0"
    },
    {
      "dependsOn": [
        "wcwidth==0.6.0"
      ],
      "ref": "tabulate==0.10.0"
    },
    {
      "ref": "tomli==2.4.1"
    },
    {
      "ref": "tomli_w==1.2.0"
    },
    {
      "ref": "tomlkit==0.14.0"
    },
    {
      "dependsOn": [
        "colorama==0.4.6",
        "requests==2.33.1"
      ],
      "ref": "tqdm==4.67.3"
    },
    {
      "dependsOn": [
        "annotated-doc==0.0.4",
        "click==8.3.2",
        "rich==14.3.3",
        "shellingham==1.5.4"
      ],
      "ref": "typer==0.24.1"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "typing-inspection==0.4.2"
    },
    {
      "ref": "typing_extensions==4.15.0"
    },
    {
      "ref": "tzdata==2026.1"
    },
    {
      "dependsOn": [
        "tzdata==2026.1"
      ],
      "ref": "tzlocal==5.3.1"
    },
    {
      "ref": "uri-template==1.3.0"
    },
    {
      "ref": "urllib3==2.6.3"
    },
    {
      "ref": "vine==5.1.0"
    },
    {
      "ref": "voluptuous==0.16.0"
    },
    {
      "ref": "wcwidth==0.6.0"
    },
    {
      "ref": "webcolors==25.10.0"
    },
    {
      "dependsOn": [
        "setuptools==82.0.1"
      ],
      "ref": "wrapt==2.1.2"
    },
    {
      "dependsOn": [
        "idna==3.11",
        "multidict==6.7.1",
        "propcache==0.4.1"
      ],
      "ref": "yarl==1.23.0"
    },
    {
      "dependsOn": [
        "setuptools==82.0.1"
      ],
      "ref": "zc.lockfile==4.0"
    }
  ],
  "metadata": {
    "timestamp": "2026-04-04T17:23:57.838968+00:00",
    "tools": {
      "components": [
        {
          "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-bom/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-bom-tool.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python/"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-py",
          "type": "application",
          "version": "7.3.0"
        },
        {
          "description": "Python library for CycloneDX",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-python-lib/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-python-library.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-python-lib",
          "type": "library",
          "version": "11.7.0"
        }
      ]
    }
  },
  "serialNumber": "urn:uuid:3a138539-acc7-4517-81e9-324cdd8b28e7",
  "version": 1,
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6"
}