{
  "components": [
    {
      "bom-ref": "CacheControl==0.14.4",
      "description": "httplib2 caching for requests",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/psf/cachecontrol/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/psf/cachecontrol"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pypi.org/project/CacheControl/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "CacheControl",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "filecache"
        }
      ],
      "purl": "pkg:pypi/cachecontrol@0.14.4",
      "type": "library",
      "version": "0.14.4"
    },
    {
      "bom-ref": "GitPython==3.1.46",
      "description": "GitPython is a Python library used to interact with Git repositories",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/gitpython-developers/GitPython"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "GitPython",
      "purl": "pkg:pypi/gitpython@3.1.46",
      "type": "library",
      "version": "3.1.46"
    },
    {
      "bom-ref": "PyYAML==6.0.3",
      "description": "YAML parser and emitter for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.org/project/PyYAML/"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pyyaml.org/wiki/PyYAMLDocumentation"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/yaml/pyyaml/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mailing lists",
          "type": "other",
          "url": "http://lists.sourceforge.net/lists/listinfo/yaml-core"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/yaml/pyyaml"
        },
        {
          "comment": "from packaging metadata Project-URL: CI",
          "type": "other",
          "url": "https://github.com/yaml/pyyaml/actions"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://pyyaml.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "PyYAML",
      "purl": "pkg:pypi/pyyaml@6.0.3",
      "type": "library",
      "version": "6.0.3"
    },
    {
      "bom-ref": "Pygments==2.20.0",
      "description": "Pygments is a syntax highlighting package written in Python.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pygments.org/docs"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/pygments/pygments/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pygments/pygments"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pygments/pygments/blob/master/CHANGES"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pygments.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "Pygments",
      "purl": "pkg:pypi/pygments@2.20.0",
      "type": "library",
      "version": "2.20.0"
    },
    {
      "bom-ref": "angr==9.2.208",
      "description": "A multi-architecture binary analysis toolkit, with the ability to perform dynamic symbolic execution and various static analyses on binaries",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/angr/angr"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://angr.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "angr",
      "purl": "pkg:pypi/angr@9.2.208",
      "type": "library",
      "version": "9.2.208"
    },
    {
      "bom-ref": "archinfo==9.2.208",
      "description": "Classes with architecture-specific information useful to other projects.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/angr/archinfo"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://api.angr.io/projects/archinfo/en/latest/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "archinfo",
      "purl": "pkg:pypi/archinfo@9.2.208",
      "type": "library",
      "version": "9.2.208"
    },
    {
      "bom-ref": "arpy==1.1.1",
      "description": "Library for accessing \"ar\" files",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/viraptor/arpy"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "arpy",
      "purl": "pkg:pypi/arpy@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "arrow==1.4.0",
      "description": "Better dates & times for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://arrow.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/arrow-py/arrow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/arrow-py/arrow"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "arrow",
      "purl": "pkg:pypi/arrow@1.4.0",
      "type": "library",
      "version": "1.4.0"
    },
    {
      "bom-ref": "attrs==26.1.0",
      "description": "Classes Without Boilerplate",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.attrs.org/"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-attrs?utm_source=pypi-attrs&utm_medium=pypi"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://www.attrs.org/en/stable/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub",
          "type": "vcs",
          "url": "https://github.com/python-attrs/attrs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "attrs",
      "purl": "pkg:pypi/attrs@26.1.0",
      "type": "library",
      "version": "26.1.0"
    },
    {
      "bom-ref": "bandit==1.9.4",
      "description": "Security oriented static analyser for python code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://bandit.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/PyCQA/bandit/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Discord",
          "type": "other",
          "url": "https://discord.gg/qYxpadCgkx"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/PyCQA/bandit"
        },
        {
          "comment": "from packaging metadata Project-URL: Release Notes",
          "type": "other",
          "url": "https://github.com/PyCQA/bandit/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Sponsor",
          "type": "other",
          "url": "https://psfmember.org/civicrm/contribute/transact/?reset=1&id=42"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://bandit.readthedocs.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "bandit",
      "purl": "pkg:pypi/bandit@1.9.4",
      "type": "library",
      "version": "1.9.4"
    },
    {
      "bom-ref": "bitarray==3.8.1",
      "description": "efficient arrays of booleans -- C extension",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/ilanschnell/bitarray"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "PSF-2.0"
          }
        }
      ],
      "name": "bitarray",
      "purl": "pkg:pypi/bitarray@3.8.1",
      "type": "library",
      "version": "3.8.1"
    },
    {
      "bom-ref": "bitstring==4.4.0",
      "description": "Simple construction, analysis and modification of binary data.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: documentation",
          "type": "documentation",
          "url": "https://bitstring.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://github.com/scott-griffiths/bitstring"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "bitstring",
      "purl": "pkg:pypi/bitstring@4.4.0",
      "type": "library",
      "version": "4.4.0"
    },
    {
      "bom-ref": "boolean.py==5.0",
      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/bastikr/boolean.py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "boolean.py",
      "purl": "pkg:pypi/boolean.py@5.0",
      "type": "library",
      "version": "5.0"
    },
    {
      "bom-ref": "cachetools==7.0.5",
      "description": "Extensible memoizing collections and decorators",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tkem/cachetools/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "cachetools",
      "purl": "pkg:pypi/cachetools@7.0.5",
      "type": "library",
      "version": "7.0.5"
    },
    {
      "bom-ref": "capstone==5.0.6",
      "description": "Capstone disassembly engine",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://www.capstone-engine.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "capstone",
      "purl": "pkg:pypi/capstone@5.0.6",
      "type": "library",
      "version": "5.0.6"
    },
    {
      "bom-ref": "cart==1.2.3",
      "description": "CaRT Neutering format",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/CybercentreCanada/cart"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "cart",
      "purl": "pkg:pypi/cart@1.2.3",
      "type": "library",
      "version": "1.2.3"
    },
    {
      "bom-ref": "certifi==2026.2.25",
      "description": "Python package for providing Mozilla's CA Bundle.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/certifi/python-certifi"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/certifi/python-certifi"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MPL-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "certifi",
      "purl": "pkg:pypi/certifi@2026.2.25",
      "type": "library",
      "version": "2026.2.25"
    },
    {
      "bom-ref": "cffi==2.0.0",
      "description": "Foreign Function Interface for Python calling C code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cffi.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python-cffi/cffi/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/python-cffi/cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Downloads",
          "type": "other",
          "url": "https://github.com/python-cffi/cffi/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Contact",
          "type": "other",
          "url": "https://groups.google.com/forum/#!forum/python-cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://cffi.readthedocs.io/en/latest/whatsnew.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "cffi",
      "purl": "pkg:pypi/cffi@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "chardet==5.2.0",
      "description": "Universal encoding detector for Python 3",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://chardet.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/chardet/chardet/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub Project",
          "type": "other",
          "url": "https://github.com/chardet/chardet"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/chardet/chardet"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: GNU Lesser General Public License v2 or later (LGPLv2+)"
          }
        }
      ],
      "name": "chardet",
      "purl": "pkg:pypi/chardet@5.2.0",
      "type": "library",
      "version": "5.2.0"
    },
    {
      "bom-ref": "charset-normalizer==3.4.7",
      "description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://charset-normalizer.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/jawah/charset_normalizer/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/jawah/charset_normalizer"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "charset-normalizer",
      "purl": "pkg:pypi/charset-normalizer@3.4.7",
      "type": "library",
      "version": "3.4.7"
    },
    {
      "bom-ref": "claripy==9.2.208",
      "description": "An abstraction layer for constraint solvers",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/angr/claripy"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "claripy",
      "purl": "pkg:pypi/claripy@9.2.208",
      "type": "library",
      "version": "9.2.208"
    },
    {
      "bom-ref": "cle==9.2.208",
      "description": "CLE Loads Everything (at least, many binary formats!) and provides a pythonic interface to analyze what they are and what they would look like in memory.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/angr/cle"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://api.angr.io/projects/cle/en/latest/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "cle",
      "purl": "pkg:pypi/cle@9.2.208",
      "type": "library",
      "version": "9.2.208"
    },
    {
      "bom-ref": "cxxheaderparser==1.7.0",
      "description": "Modern C++ header parser",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source code",
          "type": "other",
          "url": "https://github.com/robotpy/cxxheaderparser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "cxxheaderparser",
      "purl": "pkg:pypi/cxxheaderparser@1.7.0",
      "type": "library",
      "version": "1.7.0"
    },
    {
      "bom-ref": "cyclonedx-bom==7.3.0",
      "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cyclonedx-bom-tool.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/CycloneDX/cyclonedx-python/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/CycloneDX/cyclonedx-python/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "cyclonedx-bom",
      "purl": "pkg:pypi/cyclonedx-bom@7.3.0",
      "type": "library",
      "version": "7.3.0"
    },
    {
      "bom-ref": "cyclonedx-py==1.0.1",
      "description": "Alias for package 'cyclonedx-bom'",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python/#package_aliases/cyclonedx-py"
        }
      ],
      "name": "cyclonedx-py",
      "purl": "pkg:pypi/cyclonedx-py@1.0.1",
      "type": "library",
      "version": "1.0.1"
    },
    {
      "bom-ref": "cyclonedx-python-lib==11.7.0",
      "description": "Python library for CycloneDX",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cyclonedx-python-library.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "cyclonedx-python-lib",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "validation"
        }
      ],
      "purl": "pkg:pypi/cyclonedx-python-lib@11.7.0",
      "type": "library",
      "version": "11.7.0"
    },
    {
      "bom-ref": "defusedxml==0.7.1",
      "description": "XML bomb protection for Python stdlib modules",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.python.org/pypi/defusedxml"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/tiran/defusedxml"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Python-2.0"
          }
        }
      ],
      "name": "defusedxml",
      "purl": "pkg:pypi/defusedxml@0.7.1",
      "type": "library",
      "version": "0.7.1"
    },
    {
      "bom-ref": "filelock==3.25.2",
      "description": "A platform independent file lock.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://py-filelock.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/tox-dev/py-filelock/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/tox-dev/py-filelock"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tox-dev/py-filelock"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "filelock",
      "purl": "pkg:pypi/filelock@3.25.2",
      "type": "library",
      "version": "3.25.2"
    },
    {
      "bom-ref": "fqdn==1.5.1",
      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/ypcrts/fqdn"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "fqdn",
      "purl": "pkg:pypi/fqdn@1.5.1",
      "type": "library",
      "version": "1.5.1"
    },
    {
      "bom-ref": "future==1.0.0",
      "description": "Clean single-source support for Python 3 and 2",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/PythonCharmers/python-future"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://python-future.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved"
          }
        }
      ],
      "name": "future",
      "purl": "pkg:pypi/future@1.0.0",
      "type": "library",
      "version": "1.0.0"
    },
    {
      "bom-ref": "gitdb==4.0.12",
      "description": "Git Object Database",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/gitpython-developers/gitdb"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "gitdb",
      "purl": "pkg:pypi/gitdb@4.0.12",
      "type": "library",
      "version": "4.0.12"
    },
    {
      "bom-ref": "idna==3.11",
      "description": "Internationalized Domain Names in Applications (IDNA)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/kjd/idna/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/kjd/idna"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/kjd/idna/blob/master/HISTORY.rst"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "idna",
      "purl": "pkg:pypi/idna@3.11",
      "type": "library",
      "version": "3.11"
    },
    {
      "bom-ref": "isoduration==20.11.0",
      "description": "Operations with ISO 8601 durations",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Reports",
          "type": "issue-tracker",
          "url": "https://github.com/bolsote/isoduration/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/bolsote/isoduration/blob/master/CHANGELOG"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/bolsote/isoduration"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/bolsote/isoduration"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "ISC"
          }
        }
      ],
      "name": "isoduration",
      "purl": "pkg:pypi/isoduration@20.11.0",
      "type": "library",
      "version": "20.11.0"
    },
    {
      "bom-ref": "jsonpointer==3.1.1",
      "description": "Identify specific nodes in a JSON document (RFC 6901) ",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/stefankoegl/python-json-pointer"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "jsonpointer",
      "purl": "pkg:pypi/jsonpointer@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "jsonschema==4.26.0",
      "description": "An implementation of JSON Schema validation for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-jsonschema.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/jsonschema/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/jsonschema"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema?utm_source=pypi-jsonschema&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/jsonschema"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jsonschema",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "format-nongpl"
        }
      ],
      "purl": "pkg:pypi/jsonschema@4.26.0",
      "type": "library",
      "version": "4.26.0"
    },
    {
      "bom-ref": "jsonschema-specifications==2025.9.1",
      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://jsonschema-specifications.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema-specifications?utm_source=pypi-jsonschema-specifications&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jsonschema-specifications",
      "purl": "pkg:pypi/jsonschema-specifications@2025.9.1",
      "type": "library",
      "version": "2025.9.1"
    },
    {
      "bom-ref": "lark==1.3.1",
      "description": "a modern parsing library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Download",
          "type": "distribution",
          "url": "https://github.com/lark-parser/lark/tarball/master"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/lark-parser/lark"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "lark",
      "purl": "pkg:pypi/lark@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "license-expression==30.4.4",
      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aboutcode-org/license-expression"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "license-expression",
      "purl": "pkg:pypi/license-expression@30.4.4",
      "type": "library",
      "version": "30.4.4"
    },
    {
      "bom-ref": "lmdb==2.1.1",
      "description": "Universal Python binding for the LMDB 'Lightning' Database",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://github.com/jnwatson/py-lmdb/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "OLDAP-2.8"
          }
        }
      ],
      "name": "lmdb",
      "purl": "pkg:pypi/lmdb@2.1.1",
      "type": "library",
      "version": "2.1.1"
    },
    {
      "bom-ref": "lxml==6.0.2",
      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://bugs.launchpad.net/lxml"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/lxml/lxml"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://lxml.de/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "lxml",
      "purl": "pkg:pypi/lxml@6.0.2",
      "type": "library",
      "version": "6.0.2"
    },
    {
      "bom-ref": "markdown-it-py==4.0.0",
      "description": "Python port of markdown-it. Markdown parsing, done right!",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://markdown-it-py.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/executablebooks/markdown-it-py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "markdown-it-py",
      "purl": "pkg:pypi/markdown-it-py@4.0.0",
      "type": "library",
      "version": "4.0.0"
    },
    {
      "bom-ref": "mdurl==0.1.2",
      "description": "Markdown URL utilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/executablebooks/mdurl"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "mdurl",
      "purl": "pkg:pypi/mdurl@0.1.2",
      "type": "library",
      "version": "0.1.2"
    },
    {
      "bom-ref": "minidump==0.0.24",
      "description": "Python library to parse Windows minidump file format",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/skelsec/minidump"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "minidump",
      "purl": "pkg:pypi/minidump@0.0.24",
      "type": "library",
      "version": "0.0.24"
    },
    {
      "bom-ref": "mpmath==1.3.0",
      "description": "Python library for arbitrary-precision floating-point arithmetic",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "http://mpmath.org/doc/current/"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/fredrik-johansson/mpmath/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/fredrik-johansson/mpmath"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://mpmath.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "mpmath",
      "purl": "pkg:pypi/mpmath@1.3.0",
      "type": "library",
      "version": "1.3.0"
    },
    {
      "bom-ref": "msgpack==1.1.2",
      "description": "MessagePack serializer",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://msgpack-python.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/msgpack/msgpack-python/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/msgpack/msgpack-python/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://msgpack.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "msgpack",
      "purl": "pkg:pypi/msgpack@1.1.2",
      "type": "library",
      "version": "1.1.2"
    },
    {
      "bom-ref": "msgspec==0.20.0",
      "description": "A fast serialization and validation library, with builtin support for JSON, MessagePack, YAML, and TOML.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/jcrist/msgspec/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/jcrist/msgspec"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://jcristharif.com/msgspec/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "msgspec",
      "purl": "pkg:pypi/msgspec@0.20.0",
      "type": "library",
      "version": "0.20.0"
    },
    {
      "bom-ref": "mulpyplexer==0.9",
      "description": "A module that multiplexes interactions with lists of python objects.",
      "name": "mulpyplexer",
      "purl": "pkg:pypi/mulpyplexer@0.9",
      "type": "library",
      "version": "0.9"
    },
    {
      "bom-ref": "networkx==3.6.1",
      "description": "Python package for creating and manipulating graphs and networks",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://networkx.org/documentation/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/networkx/networkx/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/networkx/networkx"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://networkx.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "networkx",
      "purl": "pkg:pypi/networkx@3.6.1",
      "type": "library",
      "version": "3.6.1"
    },
    {
      "bom-ref": "packageurl-python==0.17.6",
      "description": "A purl aka. Package URL parser and builder",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/package-url/packageurl-python"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "packageurl-python",
      "purl": "pkg:pypi/packageurl-python@0.17.6",
      "type": "library",
      "version": "0.17.6"
    },
    {
      "bom-ref": "packaging==26.0",
      "description": "Core utilities for Python packages",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://packaging.pypa.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/packaging"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 OR BSD-2-Clause"
        }
      ],
      "name": "packaging",
      "purl": "pkg:pypi/packaging@26.0",
      "type": "library",
      "version": "26.0"
    },
    {
      "bom-ref": "pefile==2024.8.26",
      "description": "Python PE parsing module",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://github.com/erocarrera/pefile/releases/download/v2024.8.26/pefile-2024.8.26.tar.gz"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/erocarrera/pefile"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pefile",
      "purl": "pkg:pypi/pefile@2024.8.26",
      "type": "library",
      "version": "2024.8.26"
    },
    {
      "bom-ref": "pip==25.0.1",
      "description": "The PyPA recommended tool for installing Python packages.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pip.pypa.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/pip"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://pip.pypa.io/en/stable/news/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pip.pypa.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pip",
      "purl": "pkg:pypi/pip@25.0.1",
      "type": "library",
      "version": "25.0.1"
    },
    {
      "bom-ref": "pip-api==0.0.34",
      "description": "An unofficial, importable pip API",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://github.com/di/pip-api"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pip-api",
      "purl": "pkg:pypi/pip-api@0.0.34",
      "type": "library",
      "version": "0.0.34"
    },
    {
      "bom-ref": "pip-requirements-parser==32.0.1",
      "description": "pip requirements parser - a mostly correct pip requirements parsing library because it uses pip's own code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/nexB/pip-requirements-parser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pip-requirements-parser",
      "purl": "pkg:pypi/pip-requirements-parser@32.0.1",
      "type": "library",
      "version": "32.0.1"
    },
    {
      "bom-ref": "pip_audit==2.10.0",
      "description": "A tool for scanning Python environments for known vulnerabilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/pypa/pip-audit/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/pip-audit"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pypi.org/project/pip-audit/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pip_audit",
      "purl": "pkg:pypi/pip-audit@2.10.0",
      "type": "library",
      "version": "2.10.0"
    },
    {
      "bom-ref": "platformdirs==4.9.4",
      "description": "A small Python package for determining appropriate platform-specific dirs, e.g. a `user data dir`.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://platformdirs.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/tox-dev/platformdirs/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/tox-dev/platformdirs"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://platformdirs.readthedocs.io/en/latest/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tox-dev/platformdirs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "platformdirs",
      "purl": "pkg:pypi/platformdirs@4.9.4",
      "type": "library",
      "version": "4.9.4"
    },
    {
      "bom-ref": "protobuf==7.34.1",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://developers.google.com/protocol-buffers/"
        }
      ],
      "name": "protobuf",
      "purl": "pkg:pypi/protobuf@7.34.1",
      "type": "library",
      "version": "7.34.1"
    },
    {
      "bom-ref": "psutil==7.2.2",
      "description": "Cross-platform lib for process and system monitoring.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/giampaolo/psutil"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "psutil",
      "purl": "pkg:pypi/psutil@7.2.2",
      "type": "library",
      "version": "7.2.2"
    },
    {
      "bom-ref": "py-serializable==2.1.0",
      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://py-serializable.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/madpah/serializable/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/madpah/serializable"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/madpah/serializable#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "py-serializable",
      "purl": "pkg:pypi/py-serializable@2.1.0",
      "type": "library",
      "version": "2.1.0"
    },
    {
      "bom-ref": "pycparser==3.0",
      "description": "C parser in Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/eliben/pycparser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "pycparser",
      "purl": "pkg:pypi/pycparser@3.0",
      "type": "library",
      "version": "3.0"
    },
    {
      "bom-ref": "pycryptodome==3.23.0",
      "description": "Cryptographic library for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/Legrandin/pycryptodome/"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://www.pycryptodome.org/src/changelog"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://www.pycryptodome.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: Public Domain"
          }
        }
      ],
      "name": "pycryptodome",
      "purl": "pkg:pypi/pycryptodome@3.23.0",
      "type": "library",
      "version": "3.23.0"
    },
    {
      "bom-ref": "pydemumble==0.0.1",
      "description": "A Python wrapper library for demumble; demumble is a tool to demangle C++, Rust, and Swift symbol names.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/angr/pydemumble"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "pydemumble",
      "purl": "pkg:pypi/pydemumble@0.0.1",
      "type": "library",
      "version": "0.0.1"
    },
    {
      "bom-ref": "pyelftools==0.32",
      "description": "Library for analyzing ELF files and DWARF debugging information",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/eliben/pyelftools"
        }
      ],
      "name": "pyelftools",
      "purl": "pkg:pypi/pyelftools@0.32",
      "type": "library",
      "version": "0.32"
    },
    {
      "bom-ref": "pyparsing==3.3.2",
      "description": "pyparsing - Classes and methods to define and execute parsing grammars",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pyparsing-docs.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pyparsing/pyparsing.git"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pyparsing/pyparsing/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pyparsing",
      "purl": "pkg:pypi/pyparsing@3.3.2",
      "type": "library",
      "version": "3.3.2"
    },
    {
      "bom-ref": "pypcode==3.3.3",
      "description": "Machine code disassembly and IR translation library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/angr/pypcode"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://api.angr.io/projects/pypcode/en/latest/"
        }
      ],
      "name": "pypcode",
      "purl": "pkg:pypi/pypcode@3.3.3",
      "type": "library",
      "version": "3.3.3"
    },
    {
      "bom-ref": "python-dateutil==2.9.0.post0",
      "description": "Extensions to the standard Python datetime module",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://dateutil.readthedocs.io/en/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/dateutil/dateutil"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/dateutil/dateutil"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "python-dateutil",
      "purl": "pkg:pypi/python-dateutil@2.9.0.post0",
      "type": "library",
      "version": "2.9.0.post0"
    },
    {
      "bom-ref": "pyvex==9.2.208",
      "description": "A Python interface to libVEX and VEX IR",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/angr/pyvex"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://api.angr.io/projects/pyvex/en/latest/"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "BSD-2-Clause AND GPL-2.0-only"
        }
      ],
      "name": "pyvex",
      "purl": "pkg:pypi/pyvex@9.2.208",
      "type": "library",
      "version": "9.2.208"
    },
    {
      "bom-ref": "pyxbe==1.0.3",
      "description": "Library to work with XBE files",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/mborgerson/pyxbe"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pyxbe",
      "purl": "pkg:pypi/pyxbe@1.0.3",
      "type": "library",
      "version": "1.0.3"
    },
    {
      "bom-ref": "pyxdia==0.1.0",
      "description": "Extract useful program information from PDB files",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/mborgerson/xdia"
        }
      ],
      "name": "pyxdia",
      "purl": "pkg:pypi/pyxdia@0.1.0",
      "type": "library",
      "version": "0.1.0"
    },
    {
      "bom-ref": "referencing==0.37.0",
      "description": "JSON Referencing + Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://referencing.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/referencing/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/referencing"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-referencing?utm_source=pypi-referencing&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://referencing.readthedocs.io/en/stable/changes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/referencing"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "referencing",
      "purl": "pkg:pypi/referencing@0.37.0",
      "type": "library",
      "version": "0.37.0"
    },
    {
      "bom-ref": "requests==2.33.1",
      "description": "Python HTTP for Humans.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://requests.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/psf/requests"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "requests",
      "purl": "pkg:pypi/requests@2.33.1",
      "type": "library",
      "version": "2.33.1"
    },
    {
      "bom-ref": "rfc3339-validator==0.1.4",
      "description": "A pure python RFC3339 validator",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/naimetti/rfc3339-validator"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3339-validator",
      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
      "type": "library",
      "version": "0.1.4"
    },
    {
      "bom-ref": "rfc3986-validator==0.1.1",
      "description": "Pure python rfc3986 validator",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/naimetti/rfc3986-validator"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3986-validator",
      "purl": "pkg:pypi/rfc3986-validator@0.1.1",
      "type": "library",
      "version": "0.1.1"
    },
    {
      "bom-ref": "rfc3987-syntax==1.1.0",
      "description": "Helper functions to syntactically validate strings according to RFC 3987.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://github.com/willynilly/rfc3987-syntax#readme"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/willynilly/rfc3987-syntax/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/willynilly/rfc3987-syntax"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/willynilly/rfc3987-syntax"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3987-syntax",
      "purl": "pkg:pypi/rfc3987-syntax@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "rich==14.3.3",
      "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://rich.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/Textualize/rich"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rich",
      "purl": "pkg:pypi/rich@14.3.3",
      "type": "library",
      "version": "14.3.3"
    },
    {
      "bom-ref": "rpds-py==0.30.0",
      "description": "Python bindings to Rust's persistent data structures (rpds)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://rpds.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/crate-py/rpds/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/crate-py/rpds"
        },
        {
          "comment": "from packaging metadata Project-URL: Upstream",
          "type": "other",
          "url": "https://github.com/orium/rpds"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/crate-py/rpds"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rpds-py",
      "purl": "pkg:pypi/rpds-py@0.30.0",
      "type": "library",
      "version": "0.30.0"
    },
    {
      "bom-ref": "six==1.17.0",
      "description": "Python 2 and 3 compatibility utilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/benjaminp/six"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "six",
      "purl": "pkg:pypi/six@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "smmap==5.0.3",
      "description": "A pure Python implementation of a sliding window memory map manager",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/gitpython-developers/smmap"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "smmap",
      "purl": "pkg:pypi/smmap@5.0.3",
      "type": "library",
      "version": "5.0.3"
    },
    {
      "bom-ref": "sortedcontainers==2.4.0",
      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://www.grantjenks.com/docs/sortedcontainers/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "sortedcontainers",
      "purl": "pkg:pypi/sortedcontainers@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "stevedore==5.7.0",
      "description": "Manage dynamic plugins for Python applications",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://opendev.org/openstack/stevedore"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://docs.openstack.org/stevedore"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "stevedore",
      "purl": "pkg:pypi/stevedore@5.7.0",
      "type": "library",
      "version": "5.7.0"
    },
    {
      "bom-ref": "sympy==1.14.0",
      "description": "Computer algebra system (CAS) in Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/sympy/sympy"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://sympy.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "sympy",
      "purl": "pkg:pypi/sympy@1.14.0",
      "type": "library",
      "version": "1.14.0"
    },
    {
      "bom-ref": "tibs==0.5.7",
      "description": "A sleek Python library for binary data.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: documentation",
          "type": "documentation",
          "url": "https://mutibs.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://github.com/scott-griffiths/tibs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tibs",
      "purl": "pkg:pypi/tibs@0.5.7",
      "type": "library",
      "version": "0.5.7"
    },
    {
      "bom-ref": "tomli==2.4.1",
      "description": "A lil' TOML parser",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hukkin/tomli/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/hukkin/tomli"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomli",
      "purl": "pkg:pypi/tomli@2.4.1",
      "type": "library",
      "version": "2.4.1"
    },
    {
      "bom-ref": "tomli_w==1.2.0",
      "description": "A lil' TOML writer",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hukkin/tomli-w/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/hukkin/tomli-w"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomli_w",
      "purl": "pkg:pypi/tomli-w@1.2.0",
      "type": "library",
      "version": "1.2.0"
    },
    {
      "bom-ref": "typing_extensions==4.15.0",
      "description": "Backported and Experimental Type Hints for Python 3.9+",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://typing-extensions.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python/typing_extensions/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Q & A",
          "type": "other",
          "url": "https://github.com/python/typing/discussions"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/python/typing_extensions"
        },
        {
          "comment": "from packaging metadata Project-URL: Home",
          "type": "website",
          "url": "https://github.com/python/typing_extensions"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "PSF-2.0"
          }
        }
      ],
      "name": "typing_extensions",
      "purl": "pkg:pypi/typing-extensions@4.15.0",
      "type": "library",
      "version": "4.15.0"
    },
    {
      "bom-ref": "tzdata==2026.1",
      "description": "Provider of IANA time zone data",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://tzdata.python.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Reports",
          "type": "issue-tracker",
          "url": "https://github.com/python/tzdata/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python/tzdata"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/python/tzdata"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "tzdata",
      "purl": "pkg:pypi/tzdata@2026.1",
      "type": "library",
      "version": "2026.1"
    },
    {
      "bom-ref": "uefi-firmware==1.11",
      "description": "Various data structures and parsing tools for UEFI firmware.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/theopolis/uefi-firmware-parser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "uefi-firmware",
      "purl": "pkg:pypi/uefi-firmware@1.11",
      "type": "library",
      "version": "1.11"
    },
    {
      "bom-ref": "uri-template==1.3.0",
      "description": "RFC 6570 URI Template Processor",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://gitlab.linss.com/open-source/python/uri-template"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "uri-template",
      "purl": "pkg:pypi/uri-template@1.3.0",
      "type": "library",
      "version": "1.3.0"
    },
    {
      "bom-ref": "urllib3==2.6.3",
      "description": "HTTP library with thread-safe connection pooling, file post, and more.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://urllib3.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/urllib3/urllib3/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/urllib3/urllib3"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/urllib3/urllib3/blob/main/CHANGES.rst"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "urllib3",
      "purl": "pkg:pypi/urllib3@2.6.3",
      "type": "library",
      "version": "2.6.3"
    },
    {
      "bom-ref": "webcolors==25.10.0",
      "description": "A library for working with the color formats defined by HTML and CSS.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://webcolors.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/ubernostrum/webcolors"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "webcolors",
      "purl": "pkg:pypi/webcolors@25.10.0",
      "type": "library",
      "version": "25.10.0"
    },
    {
      "bom-ref": "z3-solver==4.13.0.0",
      "description": "an efficient SMT solver library",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/Z3Prover/z3"
        }
      ],
      "name": "z3-solver",
      "purl": "pkg:pypi/z3-solver@4.13.0.0",
      "type": "library",
      "version": "4.13.0.0"
    }
  ],
  "dependencies": [
    {
      "dependsOn": [
        "filelock==3.25.2",
        "msgpack==1.1.2",
        "requests==2.33.1"
      ],
      "ref": "CacheControl==0.14.4"
    },
    {
      "dependsOn": [
        "gitdb==4.0.12",
        "typing_extensions==4.15.0"
      ],
      "ref": "GitPython==3.1.46"
    },
    {
      "ref": "PyYAML==6.0.3"
    },
    {
      "ref": "Pygments==2.20.0"
    },
    {
      "dependsOn": [
        "GitPython==3.1.46",
        "archinfo==9.2.208",
        "cachetools==7.0.5",
        "capstone==5.0.6",
        "cffi==2.0.0",
        "claripy==9.2.208",
        "cle==9.2.208",
        "cxxheaderparser==1.7.0",
        "lmdb==2.1.1",
        "msgspec==0.20.0",
        "mulpyplexer==0.9",
        "networkx==3.6.1",
        "protobuf==7.34.1",
        "psutil==7.2.2",
        "pycparser==3.0",
        "pydemumble==0.0.1",
        "pypcode==3.3.3",
        "pyvex==9.2.208",
        "rich==14.3.3",
        "sortedcontainers==2.4.0",
        "sympy==1.14.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "angr==9.2.208"
    },
    {
      "dependsOn": [
        "pypcode==3.3.3"
      ],
      "ref": "archinfo==9.2.208"
    },
    {
      "ref": "arpy==1.1.1"
    },
    {
      "dependsOn": [
        "python-dateutil==2.9.0.post0",
        "tzdata==2026.1"
      ],
      "ref": "arrow==1.4.0"
    },
    {
      "ref": "attrs==26.1.0"
    },
    {
      "dependsOn": [
        "GitPython==3.1.46",
        "PyYAML==6.0.3",
        "rich==14.3.3",
        "stevedore==5.7.0",
        "tomli==2.4.1"
      ],
      "ref": "bandit==1.9.4"
    },
    {
      "ref": "bitarray==3.8.1"
    },
    {
      "dependsOn": [
        "bitarray==3.8.1",
        "tibs==0.5.7"
      ],
      "ref": "bitstring==4.4.0"
    },
    {
      "ref": "boolean.py==5.0"
    },
    {
      "ref": "cachetools==7.0.5"
    },
    {
      "ref": "capstone==5.0.6"
    },
    {
      "dependsOn": [
        "pycryptodome==3.23.0"
      ],
      "ref": "cart==1.2.3"
    },
    {
      "ref": "certifi==2026.2.25"
    },
    {
      "dependsOn": [
        "pycparser==3.0"
      ],
      "ref": "cffi==2.0.0"
    },
    {
      "ref": "chardet==5.2.0"
    },
    {
      "ref": "charset-normalizer==3.4.7"
    },
    {
      "dependsOn": [
        "cachetools==7.0.5",
        "typing_extensions==4.15.0",
        "z3-solver==4.13.0.0"
      ],
      "ref": "claripy==9.2.208"
    },
    {
      "dependsOn": [
        "archinfo==9.2.208",
        "arpy==1.1.1",
        "cart==1.2.3",
        "cffi==2.0.0",
        "minidump==0.0.24",
        "pefile==2024.8.26",
        "pyelftools==0.32",
        "pypcode==3.3.3",
        "pyvex==9.2.208",
        "pyxbe==1.0.3",
        "pyxdia==0.1.0",
        "sortedcontainers==2.4.0",
        "uefi-firmware==1.11"
      ],
      "ref": "cle==9.2.208"
    },
    {
      "ref": "cxxheaderparser==1.7.0"
    },
    {
      "dependsOn": [
        "chardet==5.2.0",
        "cyclonedx-python-lib==11.7.0",
        "packageurl-python==0.17.6",
        "packaging==26.0",
        "pip-requirements-parser==32.0.1",
        "tomli==2.4.1"
      ],
      "ref": "cyclonedx-bom==7.3.0"
    },
    {
      "dependsOn": [
        "cyclonedx-bom==7.3.0"
      ],
      "ref": "cyclonedx-py==1.0.1"
    },
    {
      "dependsOn": [
        "jsonschema==4.26.0",
        "license-expression==30.4.4",
        "lxml==6.0.2",
        "packageurl-python==0.17.6",
        "py-serializable==2.1.0",
        "referencing==0.37.0",
        "sortedcontainers==2.4.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "cyclonedx-python-lib==11.7.0"
    },
    {
      "ref": "defusedxml==0.7.1"
    },
    {
      "ref": "filelock==3.25.2"
    },
    {
      "ref": "fqdn==1.5.1"
    },
    {
      "ref": "future==1.0.0"
    },
    {
      "dependsOn": [
        "smmap==5.0.3"
      ],
      "ref": "gitdb==4.0.12"
    },
    {
      "ref": "idna==3.11"
    },
    {
      "dependsOn": [
        "arrow==1.4.0"
      ],
      "ref": "isoduration==20.11.0"
    },
    {
      "ref": "jsonpointer==3.1.1"
    },
    {
      "dependsOn": [
        "referencing==0.37.0"
      ],
      "ref": "jsonschema-specifications==2025.9.1"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "fqdn==1.5.1",
        "idna==3.11",
        "isoduration==20.11.0",
        "jsonpointer==3.1.1",
        "jsonschema-specifications==2025.9.1",
        "referencing==0.37.0",
        "rfc3339-validator==0.1.4",
        "rfc3986-validator==0.1.1",
        "rfc3987-syntax==1.1.0",
        "rpds-py==0.30.0",
        "uri-template==1.3.0",
        "webcolors==25.10.0"
      ],
      "ref": "jsonschema==4.26.0"
    },
    {
      "ref": "lark==1.3.1"
    },
    {
      "dependsOn": [
        "boolean.py==5.0"
      ],
      "ref": "license-expression==30.4.4"
    },
    {
      "ref": "lmdb==2.1.1"
    },
    {
      "ref": "lxml==6.0.2"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "mdurl==0.1.2",
        "psutil==7.2.2",
        "requests==2.33.1"
      ],
      "ref": "markdown-it-py==4.0.0"
    },
    {
      "ref": "mdurl==0.1.2"
    },
    {
      "ref": "minidump==0.0.24"
    },
    {
      "ref": "mpmath==1.3.0"
    },
    {
      "ref": "msgpack==1.1.2"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "tomli==2.4.1",
        "tomli_w==1.2.0"
      ],
      "ref": "msgspec==0.20.0"
    },
    {
      "ref": "mulpyplexer==0.9"
    },
    {
      "dependsOn": [
        "lxml==6.0.2",
        "sympy==1.14.0"
      ],
      "ref": "networkx==3.6.1"
    },
    {
      "ref": "packageurl-python==0.17.6"
    },
    {
      "ref": "packaging==26.0"
    },
    {
      "ref": "pefile==2024.8.26"
    },
    {
      "dependsOn": [
        "pip==25.0.1"
      ],
      "ref": "pip-api==0.0.34"
    },
    {
      "dependsOn": [
        "packaging==26.0",
        "pyparsing==3.3.2"
      ],
      "ref": "pip-requirements-parser==32.0.1"
    },
    {
      "ref": "pip==25.0.1"
    },
    {
      "dependsOn": [
        "CacheControl==0.14.4",
        "cyclonedx-python-lib==11.7.0",
        "packaging==26.0",
        "pip-api==0.0.34",
        "pip-requirements-parser==32.0.1",
        "platformdirs==4.9.4",
        "requests==2.33.1",
        "rich==14.3.3",
        "tomli==2.4.1",
        "tomli_w==1.2.0"
      ],
      "ref": "pip_audit==2.10.0"
    },
    {
      "ref": "platformdirs==4.9.4"
    },
    {
      "ref": "protobuf==7.34.1"
    },
    {
      "dependsOn": [
        "packaging==26.0",
        "requests==2.33.1"
      ],
      "ref": "psutil==7.2.2"
    },
    {
      "dependsOn": [
        "defusedxml==0.7.1"
      ],
      "ref": "py-serializable==2.1.0"
    },
    {
      "ref": "pycparser==3.0"
    },
    {
      "ref": "pycryptodome==3.23.0"
    },
    {
      "ref": "pydemumble==0.0.1"
    },
    {
      "ref": "pyelftools==0.32"
    },
    {
      "ref": "pyparsing==3.3.2"
    },
    {
      "ref": "pypcode==3.3.3"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "python-dateutil==2.9.0.post0"
    },
    {
      "dependsOn": [
        "bitstring==4.4.0",
        "cffi==2.0.0"
      ],
      "ref": "pyvex==9.2.208"
    },
    {
      "ref": "pyxbe==1.0.3"
    },
    {
      "ref": "pyxdia==0.1.0"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "rpds-py==0.30.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "referencing==0.37.0"
    },
    {
      "dependsOn": [
        "certifi==2026.2.25",
        "chardet==5.2.0",
        "charset-normalizer==3.4.7",
        "idna==3.11",
        "urllib3==2.6.3"
      ],
      "ref": "requests==2.33.1"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "rfc3339-validator==0.1.4"
    },
    {
      "ref": "rfc3986-validator==0.1.1"
    },
    {
      "dependsOn": [
        "lark==1.3.1"
      ],
      "ref": "rfc3987-syntax==1.1.0"
    },
    {
      "dependsOn": [
        "Pygments==2.20.0",
        "markdown-it-py==4.0.0"
      ],
      "ref": "rich==14.3.3"
    },
    {
      "ref": "rpds-py==0.30.0"
    },
    {
      "ref": "six==1.17.0"
    },
    {
      "ref": "smmap==5.0.3"
    },
    {
      "ref": "sortedcontainers==2.4.0"
    },
    {
      "ref": "stevedore==5.7.0"
    },
    {
      "dependsOn": [
        "mpmath==1.3.0"
      ],
      "ref": "sympy==1.14.0"
    },
    {
      "ref": "tibs==0.5.7"
    },
    {
      "ref": "tomli==2.4.1"
    },
    {
      "ref": "tomli_w==1.2.0"
    },
    {
      "ref": "typing_extensions==4.15.0"
    },
    {
      "ref": "tzdata==2026.1"
    },
    {
      "dependsOn": [
        "future==1.0.0"
      ],
      "ref": "uefi-firmware==1.11"
    },
    {
      "ref": "uri-template==1.3.0"
    },
    {
      "ref": "urllib3==2.6.3"
    },
    {
      "ref": "webcolors==25.10.0"
    },
    {
      "ref": "z3-solver==4.13.0.0"
    }
  ],
  "metadata": {
    "timestamp": "2026-04-04T20:23:59.683352+00:00",
    "tools": {
      "components": [
        {
          "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-bom/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-bom-tool.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python/"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-py",
          "type": "application",
          "version": "7.3.0"
        },
        {
          "description": "Python library for CycloneDX",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-python-lib/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-python-library.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-python-lib",
          "type": "library",
          "version": "11.7.0"
        }
      ]
    }
  },
  "serialNumber": "urn:uuid:87bfac73-f374-43d7-aeeb-740c205f7037",
  "version": 1,
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6"
}