{
  "components": [
    {
      "bom-ref": "CacheControl==0.14.4",
      "description": "httplib2 caching for requests",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/psf/cachecontrol/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/psf/cachecontrol"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pypi.org/project/CacheControl/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "CacheControl",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "filecache"
        }
      ],
      "purl": "pkg:pypi/cachecontrol@0.14.4",
      "type": "library",
      "version": "0.14.4"
    },
    {
      "bom-ref": "Jinja2==3.1.6",
      "description": "A very fast and expressive template engine.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Chat",
          "type": "chat",
          "url": "https://discord.gg/pallets"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://jinja.palletsprojects.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pallets/jinja/"
        },
        {
          "comment": "from packaging metadata Project-URL: Donate",
          "type": "other",
          "url": "https://palletsprojects.com/donate"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://jinja.palletsprojects.com/changes/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "Jinja2",
      "purl": "pkg:pypi/jinja2@3.1.6",
      "type": "library",
      "version": "3.1.6"
    },
    {
      "bom-ref": "MarkupSafe==3.0.3",
      "description": "Safely add untrusted strings to HTML/XML markup.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Chat",
          "type": "chat",
          "url": "https://discord.gg/pallets"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://markupsafe.palletsprojects.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pallets/markupsafe/"
        },
        {
          "comment": "from packaging metadata Project-URL: Donate",
          "type": "other",
          "url": "https://palletsprojects.com/donate"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://markupsafe.palletsprojects.com/page/changes/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "MarkupSafe",
      "purl": "pkg:pypi/markupsafe@3.0.3",
      "type": "library",
      "version": "3.0.3"
    },
    {
      "bom-ref": "PyYAML==6.0.3",
      "description": "YAML parser and emitter for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.org/project/PyYAML/"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pyyaml.org/wiki/PyYAMLDocumentation"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/yaml/pyyaml/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Mailing lists",
          "type": "other",
          "url": "http://lists.sourceforge.net/lists/listinfo/yaml-core"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/yaml/pyyaml"
        },
        {
          "comment": "from packaging metadata Project-URL: CI",
          "type": "other",
          "url": "https://github.com/yaml/pyyaml/actions"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://pyyaml.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "PyYAML",
      "purl": "pkg:pypi/pyyaml@6.0.3",
      "type": "library",
      "version": "6.0.3"
    },
    {
      "bom-ref": "Pygments==2.20.0",
      "description": "Pygments is a syntax highlighting package written in Python.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pygments.org/docs"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/pygments/pygments/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pygments/pygments"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pygments/pygments/blob/master/CHANGES"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pygments.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "Pygments",
      "purl": "pkg:pypi/pygments@2.20.0",
      "type": "library",
      "version": "2.20.0"
    },
    {
      "bom-ref": "aiocache==0.12.3",
      "description": "multi backend asyncio cache",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aio-libs/aiocache"
        }
      ],
      "name": "aiocache",
      "purl": "pkg:pypi/aiocache@0.12.3",
      "type": "library",
      "version": "0.12.3"
    },
    {
      "bom-ref": "annotated-doc==0.0.4",
      "description": "Document parameters, class attributes, return types, and variables inline, with Annotated.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://github.com/fastapi/annotated-doc"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/fastapi/annotated-doc/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/fastapi/annotated-doc/release-notes.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/fastapi/annotated-doc"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fastapi/annotated-doc"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "annotated-doc",
      "purl": "pkg:pypi/annotated-doc@0.0.4",
      "type": "library",
      "version": "0.0.4"
    },
    {
      "bom-ref": "annotated-types==0.7.0",
      "description": "Reusable constraint types to use with typing.Annotated",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/annotated-types/annotated-types"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/annotated-types/annotated-types/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/annotated-types/annotated-types"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "annotated-types",
      "purl": "pkg:pypi/annotated-types@0.7.0",
      "type": "library",
      "version": "0.7.0"
    },
    {
      "bom-ref": "anyio==4.13.0",
      "description": "High-level concurrency and networking framework on top of asyncio or Trio",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://anyio.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/agronholm/anyio/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source code",
          "type": "other",
          "url": "https://github.com/agronholm/anyio"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://anyio.readthedocs.io/en/stable/versionhistory.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "anyio",
      "purl": "pkg:pypi/anyio@4.13.0",
      "type": "library",
      "version": "4.13.0"
    },
    {
      "bom-ref": "arrow==1.4.0",
      "description": "Better dates & times for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://arrow.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/arrow-py/arrow/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/arrow-py/arrow"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "arrow",
      "purl": "pkg:pypi/arrow@1.4.0",
      "type": "library",
      "version": "1.4.0"
    },
    {
      "bom-ref": "attrs==26.1.0",
      "description": "Classes Without Boilerplate",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.attrs.org/"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/hynek"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-attrs?utm_source=pypi-attrs&utm_medium=pypi"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://www.attrs.org/en/stable/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub",
          "type": "vcs",
          "url": "https://github.com/python-attrs/attrs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "attrs",
      "purl": "pkg:pypi/attrs@26.1.0",
      "type": "library",
      "version": "26.1.0"
    },
    {
      "bom-ref": "bandit==1.9.4",
      "description": "Security oriented static analyser for python code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://bandit.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/PyCQA/bandit/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Discord",
          "type": "other",
          "url": "https://discord.gg/qYxpadCgkx"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/PyCQA/bandit"
        },
        {
          "comment": "from packaging metadata Project-URL: Release Notes",
          "type": "other",
          "url": "https://github.com/PyCQA/bandit/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Sponsor",
          "type": "other",
          "url": "https://psfmember.org/civicrm/contribute/transact/?reset=1&id=42"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://bandit.readthedocs.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "bandit",
      "purl": "pkg:pypi/bandit@1.9.4",
      "type": "library",
      "version": "1.9.4"
    },
    {
      "bom-ref": "bidict==0.23.1",
      "description": "The bidirectional mapping library for Python.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://bidict.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://bidict.readthedocs.io/#sponsoring"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://bidict.readthedocs.io/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/jab/bidict"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "bidict",
      "purl": "pkg:pypi/bidict@0.23.1",
      "type": "library",
      "version": "0.23.1"
    },
    {
      "bom-ref": "boolean.py==5.0",
      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/bastikr/boolean.py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "boolean.py",
      "purl": "pkg:pypi/boolean.py@5.0",
      "type": "library",
      "version": "5.0"
    },
    {
      "bom-ref": "certifi==2026.2.25",
      "description": "Python package for providing Mozilla's CA Bundle.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/certifi/python-certifi"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/certifi/python-certifi"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MPL-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "certifi",
      "purl": "pkg:pypi/certifi@2026.2.25",
      "type": "library",
      "version": "2026.2.25"
    },
    {
      "bom-ref": "cffi==2.0.0",
      "description": "Foreign Function Interface for Python calling C code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cffi.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python-cffi/cffi/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/python-cffi/cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Downloads",
          "type": "other",
          "url": "https://github.com/python-cffi/cffi/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Contact",
          "type": "other",
          "url": "https://groups.google.com/forum/#!forum/python-cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://cffi.readthedocs.io/en/latest/whatsnew.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "cffi",
      "purl": "pkg:pypi/cffi@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "chardet==5.2.0",
      "description": "Universal encoding detector for Python 3",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://chardet.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/chardet/chardet/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: GitHub Project",
          "type": "other",
          "url": "https://github.com/chardet/chardet"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/chardet/chardet"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: GNU Lesser General Public License v2 or later (LGPLv2+)"
          }
        }
      ],
      "name": "chardet",
      "purl": "pkg:pypi/chardet@5.2.0",
      "type": "library",
      "version": "5.2.0"
    },
    {
      "bom-ref": "charset-normalizer==3.4.7",
      "description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://charset-normalizer.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/jawah/charset_normalizer/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/jawah/charset_normalizer"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "charset-normalizer",
      "purl": "pkg:pypi/charset-normalizer@3.4.7",
      "type": "library",
      "version": "3.4.7"
    },
    {
      "bom-ref": "click==8.3.2",
      "description": "Composable command line interface toolkit",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Chat",
          "type": "chat",
          "url": "https://discord.gg/pallets"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://click.palletsprojects.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pallets/click/"
        },
        {
          "comment": "from packaging metadata Project-URL: Donate",
          "type": "other",
          "url": "https://palletsprojects.com/donate"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://click.palletsprojects.com/page/changes/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "click",
      "purl": "pkg:pypi/click@8.3.2",
      "type": "library",
      "version": "8.3.2"
    },
    {
      "bom-ref": "croniter==6.2.2",
      "description": "croniter provides iteration for datetime object with cron like format",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pallets-eco/croniter"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "croniter",
      "purl": "pkg:pypi/croniter@6.2.2",
      "type": "library",
      "version": "6.2.2"
    },
    {
      "bom-ref": "cryptography==46.0.6",
      "description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: documentation",
          "type": "documentation",
          "url": "https://cryptography.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: issues",
          "type": "issue-tracker",
          "url": "https://github.com/pyca/cryptography/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: source",
          "type": "other",
          "url": "https://github.com/pyca/cryptography/"
        },
        {
          "comment": "from packaging metadata Project-URL: changelog",
          "type": "release-notes",
          "url": "https://cryptography.io/en/latest/changelog/"
        },
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://github.com/pyca/cryptography"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 OR BSD-3-Clause"
        }
      ],
      "name": "cryptography",
      "purl": "pkg:pypi/cryptography@46.0.6",
      "type": "library",
      "version": "46.0.6"
    },
    {
      "bom-ref": "cyclonedx-bom==7.3.0",
      "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cyclonedx-bom-tool.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/CycloneDX/cyclonedx-python/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/CycloneDX/cyclonedx-python/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "cyclonedx-bom",
      "purl": "pkg:pypi/cyclonedx-bom@7.3.0",
      "type": "library",
      "version": "7.3.0"
    },
    {
      "bom-ref": "cyclonedx-py==1.0.1",
      "description": "Alias for package 'cyclonedx-bom'",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python/#package_aliases/cyclonedx-py"
        }
      ],
      "name": "cyclonedx-py",
      "purl": "pkg:pypi/cyclonedx-py@1.0.1",
      "type": "library",
      "version": "1.0.1"
    },
    {
      "bom-ref": "cyclonedx-python-lib==11.7.0",
      "description": "Python library for CycloneDX",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cyclonedx-python-library.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "cyclonedx-python-lib",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "validation"
        }
      ],
      "purl": "pkg:pypi/cyclonedx-python-lib@11.7.0",
      "type": "library",
      "version": "11.7.0"
    },
    {
      "bom-ref": "defusedxml==0.7.1",
      "description": "XML bomb protection for Python stdlib modules",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Download-URL",
          "type": "distribution",
          "url": "https://pypi.python.org/pypi/defusedxml"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/tiran/defusedxml"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Python-2.0"
          }
        }
      ],
      "name": "defusedxml",
      "purl": "pkg:pypi/defusedxml@0.7.1",
      "type": "library",
      "version": "0.7.1"
    },
    {
      "bom-ref": "fastapi==0.135.3",
      "description": "FastAPI framework, high performance, easy to learn, fast to code, ready for production",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://fastapi.tiangolo.com/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/fastapi/fastapi/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://fastapi.tiangolo.com/release-notes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/fastapi/fastapi"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/fastapi/fastapi"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "fastapi",
      "purl": "pkg:pypi/fastapi@0.135.3",
      "type": "library",
      "version": "0.135.3"
    },
    {
      "bom-ref": "filelock==3.25.2",
      "description": "A platform independent file lock.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://py-filelock.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/tox-dev/py-filelock/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/tox-dev/py-filelock"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tox-dev/py-filelock"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "filelock",
      "purl": "pkg:pypi/filelock@3.25.2",
      "type": "library",
      "version": "3.25.2"
    },
    {
      "bom-ref": "fqdn==1.5.1",
      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/ypcrts/fqdn"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)"
          }
        }
      ],
      "name": "fqdn",
      "purl": "pkg:pypi/fqdn@1.5.1",
      "type": "library",
      "version": "1.5.1"
    },
    {
      "bom-ref": "gunicorn==25.3.0",
      "description": "WSGI HTTP Server for UNIX",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://gunicorn.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/benoitc/gunicorn/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source code",
          "type": "other",
          "url": "https://github.com/benoitc/gunicorn"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://gunicorn.org/news/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://gunicorn.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "gunicorn",
      "purl": "pkg:pypi/gunicorn@25.3.0",
      "type": "library",
      "version": "25.3.0"
    },
    {
      "bom-ref": "h11==0.16.0",
      "description": "A pure-Python, bring-your-own-I/O implementation of HTTP/1.1",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/python-hyper/h11"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "h11",
      "purl": "pkg:pypi/h11@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "hiredis==3.3.1",
      "description": "Python wrapper for hiredis",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/redis/hiredis-py/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://github.com/redis/hiredis-py/releases"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/redis/hiredis-py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "hiredis",
      "purl": "pkg:pypi/hiredis@3.3.1",
      "type": "library",
      "version": "3.3.1"
    },
    {
      "bom-ref": "httpcore==1.0.9",
      "description": "A minimal low-level HTTP client.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.encode.io/httpcore"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/encode/httpcore"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://www.encode.io/httpcore/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "httpcore",
      "purl": "pkg:pypi/httpcore@1.0.9",
      "type": "library",
      "version": "1.0.9"
    },
    {
      "bom-ref": "httptools==0.7.1",
      "description": "A collection of framework independent HTTP protocol utils.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/MagicStack/httptools"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "httptools",
      "purl": "pkg:pypi/httptools@0.7.1",
      "type": "library",
      "version": "0.7.1"
    },
    {
      "bom-ref": "httpx==0.28.1",
      "description": "The next generation HTTP client.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://www.python-httpx.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/encode/httpx"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/encode/httpx/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/encode/httpx"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "httpx",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "http2"
        }
      ],
      "purl": "pkg:pypi/httpx@0.28.1",
      "type": "library",
      "version": "0.28.1"
    },
    {
      "bom-ref": "idna==3.11",
      "description": "Internationalized Domain Names in Applications (IDNA)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/kjd/idna/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/kjd/idna"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/kjd/idna/blob/master/HISTORY.rst"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "idna",
      "purl": "pkg:pypi/idna@3.11",
      "type": "library",
      "version": "3.11"
    },
    {
      "bom-ref": "isoduration==20.11.0",
      "description": "Operations with ISO 8601 durations",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Reports",
          "type": "issue-tracker",
          "url": "https://github.com/bolsote/isoduration/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/bolsote/isoduration/blob/master/CHANGELOG"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/bolsote/isoduration"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/bolsote/isoduration"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "ISC"
          }
        }
      ],
      "name": "isoduration",
      "purl": "pkg:pypi/isoduration@20.11.0",
      "type": "library",
      "version": "20.11.0"
    },
    {
      "bom-ref": "jinja2_fragments==1.11.0",
      "description": "Render Jinja2 template block as HTML page fragments on Python web frameworks.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/sponsfreixes/jinja2-fragments/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/sponsfreixes/jinja2-fragments"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://github.com/sponsfreixes/jinja2-fragments/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://jinja2-fragments.readthedocs.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jinja2_fragments",
      "purl": "pkg:pypi/jinja2-fragments@1.11.0",
      "type": "library",
      "version": "1.11.0"
    },
    {
      "bom-ref": "joserfc==1.6.3",
      "description": "The ultimate Python library for JOSE RFCs, including JWS, JWE, JWK, JWA, JWT",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://jose.authlib.org/"
        },
        {
          "comment": "from packaging metadata Project-URL: Blog",
          "type": "other",
          "url": "https://blog.authlib.org/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/authlib/joserfc"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/authlib"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "joserfc",
      "purl": "pkg:pypi/joserfc@1.6.3",
      "type": "library",
      "version": "1.6.3"
    },
    {
      "bom-ref": "jsonpointer==3.1.1",
      "description": "Identify specific nodes in a JSON document (RFC 6901) ",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/stefankoegl/python-json-pointer"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "jsonpointer",
      "purl": "pkg:pypi/jsonpointer@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "jsonschema==4.26.0",
      "description": "An implementation of JSON Schema validation for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-jsonschema.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/jsonschema/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/jsonschema"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema?utm_source=pypi-jsonschema&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/jsonschema"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jsonschema",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "format-nongpl"
        }
      ],
      "purl": "pkg:pypi/jsonschema@4.26.0",
      "type": "library",
      "version": "4.26.0"
    },
    {
      "bom-ref": "jsonschema-specifications==2025.9.1",
      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://jsonschema-specifications.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-jsonschema-specifications?utm_source=pypi-jsonschema-specifications&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/jsonschema-specifications"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "jsonschema-specifications",
      "purl": "pkg:pypi/jsonschema-specifications@2025.9.1",
      "type": "library",
      "version": "2025.9.1"
    },
    {
      "bom-ref": "lark==1.3.1",
      "description": "a modern parsing library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Download",
          "type": "distribution",
          "url": "https://github.com/lark-parser/lark/tarball/master"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/lark-parser/lark"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "lark",
      "purl": "pkg:pypi/lark@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "license-expression==30.4.4",
      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/aboutcode-org/license-expression"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "license-expression",
      "purl": "pkg:pypi/license-expression@30.4.4",
      "type": "library",
      "version": "30.4.4"
    },
    {
      "bom-ref": "lxml==6.0.2",
      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://bugs.launchpad.net/lxml"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/lxml/lxml"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://lxml.de/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "lxml",
      "purl": "pkg:pypi/lxml@6.0.2",
      "type": "library",
      "version": "6.0.2"
    },
    {
      "bom-ref": "markdown-it-py==4.0.0",
      "description": "Python port of markdown-it. Markdown parsing, done right!",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://markdown-it-py.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/executablebooks/markdown-it-py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "markdown-it-py",
      "purl": "pkg:pypi/markdown-it-py@4.0.0",
      "type": "library",
      "version": "4.0.0"
    },
    {
      "bom-ref": "mdurl==0.1.2",
      "description": "Markdown URL utilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/executablebooks/mdurl"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "mdurl",
      "purl": "pkg:pypi/mdurl@0.1.2",
      "type": "library",
      "version": "0.1.2"
    },
    {
      "bom-ref": "msgpack==1.1.2",
      "description": "MessagePack serializer",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://msgpack-python.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/msgpack/msgpack-python/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/msgpack/msgpack-python/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://msgpack.org/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "msgpack",
      "purl": "pkg:pypi/msgpack@1.1.2",
      "type": "library",
      "version": "1.1.2"
    },
    {
      "bom-ref": "packageurl-python==0.17.6",
      "description": "A purl aka. Package URL parser and builder",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/package-url/packageurl-python"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "packageurl-python",
      "purl": "pkg:pypi/packageurl-python@0.17.6",
      "type": "library",
      "version": "0.17.6"
    },
    {
      "bom-ref": "packaging==26.0",
      "description": "Core utilities for Python packages",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://packaging.pypa.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/packaging"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 OR BSD-2-Clause"
        }
      ],
      "name": "packaging",
      "purl": "pkg:pypi/packaging@26.0",
      "type": "library",
      "version": "26.0"
    },
    {
      "bom-ref": "pip==25.0.1",
      "description": "The PyPA recommended tool for installing Python packages.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pip.pypa.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/pip"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://pip.pypa.io/en/stable/news/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pip.pypa.io/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pip",
      "purl": "pkg:pypi/pip@25.0.1",
      "type": "library",
      "version": "25.0.1"
    },
    {
      "bom-ref": "pip-api==0.0.34",
      "description": "An unofficial, importable pip API",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://github.com/di/pip-api"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pip-api",
      "purl": "pkg:pypi/pip-api@0.0.34",
      "type": "library",
      "version": "0.0.34"
    },
    {
      "bom-ref": "pip-requirements-parser==32.0.1",
      "description": "pip requirements parser - a mostly correct pip requirements parsing library because it uses pip's own code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/nexB/pip-requirements-parser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pip-requirements-parser",
      "purl": "pkg:pypi/pip-requirements-parser@32.0.1",
      "type": "library",
      "version": "32.0.1"
    },
    {
      "bom-ref": "pip_audit==2.10.0",
      "description": "A tool for scanning Python environments for known vulnerabilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/pypa/pip-audit/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pypa/pip-audit"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://pypi.org/project/pip-audit/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "pip_audit",
      "purl": "pkg:pypi/pip-audit@2.10.0",
      "type": "library",
      "version": "2.10.0"
    },
    {
      "bom-ref": "platformdirs==4.9.4",
      "description": "A small Python package for determining appropriate platform-specific dirs, e.g. a `user data dir`.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://platformdirs.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/tox-dev/platformdirs/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/tox-dev/platformdirs"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://platformdirs.readthedocs.io/en/latest/changelog.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/tox-dev/platformdirs"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "platformdirs",
      "purl": "pkg:pypi/platformdirs@4.9.4",
      "type": "library",
      "version": "4.9.4"
    },
    {
      "bom-ref": "py-serializable==2.1.0",
      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://py-serializable.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/madpah/serializable/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/madpah/serializable"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/madpah/serializable#readme"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "py-serializable",
      "purl": "pkg:pypi/py-serializable@2.1.0",
      "type": "library",
      "version": "2.1.0"
    },
    {
      "bom-ref": "pycparser==3.0",
      "description": "C parser in Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/eliben/pycparser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "pycparser",
      "purl": "pkg:pypi/pycparser@3.0",
      "type": "library",
      "version": "3.0"
    },
    {
      "bom-ref": "pydantic==2.12.5",
      "description": "Data validation using Python type hints",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.pydantic.dev"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/pydantic"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://docs.pydantic.dev/latest/changelog/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pydantic",
      "purl": "pkg:pypi/pydantic@2.12.5",
      "type": "library",
      "version": "2.12.5"
    },
    {
      "bom-ref": "pydantic-settings==2.13.1",
      "description": "Settings management using Pydantic",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.pydantic.dev/dev-v2/concepts/pydantic_settings/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/pydantic-settings"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pydantic/pydantic-settings/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic-settings"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pydantic-settings",
      "purl": "pkg:pypi/pydantic-settings@2.13.1",
      "type": "library",
      "version": "2.13.1"
    },
    {
      "bom-ref": "pydantic_core==2.41.5",
      "description": "Core functionality for Pydantic validation and serialization",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/pydantic-core"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic-core"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/pydantic/pydantic-core"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pydantic_core",
      "purl": "pkg:pypi/pydantic-core@2.41.5",
      "type": "library",
      "version": "2.41.5"
    },
    {
      "bom-ref": "pyparsing==3.3.2",
      "description": "pyparsing - Classes and methods to define and execute parsing grammars",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pyparsing-docs.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pyparsing/pyparsing.git"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pyparsing/pyparsing/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "pyparsing",
      "purl": "pkg:pypi/pyparsing@3.3.2",
      "type": "library",
      "version": "3.3.2"
    },
    {
      "bom-ref": "python-dateutil==2.9.0.post0",
      "description": "Extensions to the standard Python datetime module",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://dateutil.readthedocs.io/en/stable/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/dateutil/dateutil"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/dateutil/dateutil"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "python-dateutil",
      "purl": "pkg:pypi/python-dateutil@2.9.0.post0",
      "type": "library",
      "version": "2.9.0.post0"
    },
    {
      "bom-ref": "python-dotenv==1.2.2",
      "description": "Read key-value pairs from a .env file and set them as environment variables",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/theskumar/python-dotenv"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "python-dotenv",
      "purl": "pkg:pypi/python-dotenv@1.2.2",
      "type": "library",
      "version": "1.2.2"
    },
    {
      "bom-ref": "python-engineio==4.13.1",
      "description": "Engine.IO server and client for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/miguelgrinberg/python-engineio/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/miguelgrinberg/python-engineio"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "python-engineio",
      "purl": "pkg:pypi/python-engineio@4.13.1",
      "type": "library",
      "version": "4.13.1"
    },
    {
      "bom-ref": "python-multipart==0.0.22",
      "description": "A streaming multipart parser for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://kludex.github.io/python-multipart/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/Kludex/python-multipart"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/Kludex/python-multipart"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "python-multipart",
      "purl": "pkg:pypi/python-multipart@0.0.22",
      "type": "library",
      "version": "0.0.22"
    },
    {
      "bom-ref": "python-socketio==5.16.1",
      "description": "Socket.IO server and client for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/miguelgrinberg/python-socketio/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/miguelgrinberg/python-socketio"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "python-socketio",
      "purl": "pkg:pypi/python-socketio@5.16.1",
      "type": "library",
      "version": "5.16.1"
    },
    {
      "bom-ref": "redis==7.4.0",
      "description": "Python client for Redis database and key-value store",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://redis.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/redis/redis-py/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/redis/redis-py"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://github.com/redis/redis-py/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/redis/redis-py"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "redis",
      "purl": "pkg:pypi/redis@7.4.0",
      "type": "library",
      "version": "7.4.0"
    },
    {
      "bom-ref": "referencing==0.37.0",
      "description": "JSON Referencing + Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://referencing.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/python-jsonschema/referencing/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-jsonschema/referencing"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-referencing?utm_source=pypi-referencing&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://referencing.readthedocs.io/en/stable/changes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-jsonschema/referencing"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "referencing",
      "purl": "pkg:pypi/referencing@0.37.0",
      "type": "library",
      "version": "0.37.0"
    },
    {
      "bom-ref": "requests==2.33.1",
      "description": "Python HTTP for Humans.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://requests.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/psf/requests"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "requests",
      "purl": "pkg:pypi/requests@2.33.1",
      "type": "library",
      "version": "2.33.1"
    },
    {
      "bom-ref": "rfc3339-validator==0.1.4",
      "description": "A pure python RFC3339 validator",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/naimetti/rfc3339-validator"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3339-validator",
      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
      "type": "library",
      "version": "0.1.4"
    },
    {
      "bom-ref": "rfc3986-validator==0.1.1",
      "description": "Pure python rfc3986 validator",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/naimetti/rfc3986-validator"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3986-validator",
      "purl": "pkg:pypi/rfc3986-validator@0.1.1",
      "type": "library",
      "version": "0.1.1"
    },
    {
      "bom-ref": "rfc3987-syntax==1.1.0",
      "description": "Helper functions to syntactically validate strings according to RFC 3987.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://github.com/willynilly/rfc3987-syntax#readme"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/willynilly/rfc3987-syntax/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/willynilly/rfc3987-syntax"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/willynilly/rfc3987-syntax"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rfc3987-syntax",
      "purl": "pkg:pypi/rfc3987-syntax@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "rich==14.3.3",
      "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://rich.readthedocs.io/en/latest/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/Textualize/rich"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rich",
      "purl": "pkg:pypi/rich@14.3.3",
      "type": "library",
      "version": "14.3.3"
    },
    {
      "bom-ref": "rpds-py==0.30.0",
      "description": "Python bindings to Rust's persistent data structures (rpds)",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://rpds.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/crate-py/rpds/issues/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/crate-py/rpds"
        },
        {
          "comment": "from packaging metadata Project-URL: Upstream",
          "type": "other",
          "url": "https://github.com/orium/rpds"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Julian"
        },
        {
          "comment": "from packaging metadata Project-URL: Tidelift",
          "type": "other",
          "url": "https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/crate-py/rpds"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "rpds-py",
      "purl": "pkg:pypi/rpds-py@0.30.0",
      "type": "library",
      "version": "0.30.0"
    },
    {
      "bom-ref": "simple-websocket==1.1.0",
      "description": "Simple WebSocket server and client for Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/miguelgrinberg/simple-websocket/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/miguelgrinberg/simple-websocket"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "simple-websocket",
      "purl": "pkg:pypi/simple-websocket@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "six==1.17.0",
      "description": "Python 2 and 3 compatibility utilities",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/benjaminp/six"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "six",
      "purl": "pkg:pypi/six@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "sortedcontainers==2.4.0",
      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "http://www.grantjenks.com/docs/sortedcontainers/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "sortedcontainers",
      "purl": "pkg:pypi/sortedcontainers@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "starlette==1.0.0",
      "description": "The little ASGI library that shines.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://starlette.dev/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/Kludex/starlette"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/Kludex"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://starlette.dev/release-notes/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/Kludex/starlette"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "starlette",
      "purl": "pkg:pypi/starlette@1.0.0",
      "type": "library",
      "version": "1.0.0"
    },
    {
      "bom-ref": "stevedore==5.7.0",
      "description": "Manage dynamic plugins for Python applications",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://opendev.org/openstack/stevedore"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://docs.openstack.org/stevedore"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "stevedore",
      "purl": "pkg:pypi/stevedore@5.7.0",
      "type": "library",
      "version": "5.7.0"
    },
    {
      "bom-ref": "tomli==2.4.1",
      "description": "A lil' TOML parser",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hukkin/tomli/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/hukkin/tomli"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomli",
      "purl": "pkg:pypi/tomli@2.4.1",
      "type": "library",
      "version": "2.4.1"
    },
    {
      "bom-ref": "tomli_w==1.2.0",
      "description": "A lil' TOML writer",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/hukkin/tomli-w/blob/master/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/hukkin/tomli-w"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomli_w",
      "purl": "pkg:pypi/tomli-w@1.2.0",
      "type": "library",
      "version": "1.2.0"
    },
    {
      "bom-ref": "tomlkit==0.14.0",
      "description": "Style preserving TOML library",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/sdispater/tomlkit"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/sdispater/tomlkit"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "tomlkit",
      "purl": "pkg:pypi/tomlkit@0.14.0",
      "type": "library",
      "version": "0.14.0"
    },
    {
      "bom-ref": "typing-inspection==0.4.2",
      "description": "Runtime typing introspection tools",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://pydantic.github.io/typing-inspection/dev/"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/pydantic/typing-inspection"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/pydantic/typing-inspection"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "typing-inspection",
      "purl": "pkg:pypi/typing-inspection@0.4.2",
      "type": "library",
      "version": "0.4.2"
    },
    {
      "bom-ref": "typing_extensions==4.15.0",
      "description": "Backported and Experimental Type Hints for Python 3.9+",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://typing-extensions.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python/typing_extensions/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Q & A",
          "type": "other",
          "url": "https://github.com/python/typing/discussions"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/python/typing_extensions"
        },
        {
          "comment": "from packaging metadata Project-URL: Home",
          "type": "website",
          "url": "https://github.com/python/typing_extensions"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "PSF-2.0"
          }
        }
      ],
      "name": "typing_extensions",
      "purl": "pkg:pypi/typing-extensions@4.15.0",
      "type": "library",
      "version": "4.15.0"
    },
    {
      "bom-ref": "tzdata==2026.1",
      "description": "Provider of IANA time zone data",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://tzdata.python.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Reports",
          "type": "issue-tracker",
          "url": "https://github.com/python/tzdata/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python/tzdata"
        },
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://github.com/python/tzdata"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "tzdata",
      "purl": "pkg:pypi/tzdata@2026.1",
      "type": "library",
      "version": "2026.1"
    },
    {
      "bom-ref": "uri-template==1.3.0",
      "description": "RFC 6570 URI Template Processor",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://gitlab.linss.com/open-source/python/uri-template"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "uri-template",
      "purl": "pkg:pypi/uri-template@1.3.0",
      "type": "library",
      "version": "1.3.0"
    },
    {
      "bom-ref": "urllib3==2.6.3",
      "description": "HTTP library with thread-safe connection pooling, file post, and more.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://urllib3.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue tracker",
          "type": "issue-tracker",
          "url": "https://github.com/urllib3/urllib3/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Code",
          "type": "other",
          "url": "https://github.com/urllib3/urllib3"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://github.com/urllib3/urllib3/blob/main/CHANGES.rst"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "urllib3",
      "purl": "pkg:pypi/urllib3@2.6.3",
      "type": "library",
      "version": "2.6.3"
    },
    {
      "bom-ref": "uvicorn==0.43.0",
      "description": "The lightning-fast ASGI server.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/Kludex/uvicorn"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://github.com/sponsors/encode"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://uvicorn.dev/release-notes"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://uvicorn.dev/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "uvicorn",
      "properties": [
        {
          "name": "cdx:python:package:required-extra",
          "value": "standard"
        }
      ],
      "purl": "pkg:pypi/uvicorn@0.43.0",
      "type": "library",
      "version": "0.43.0"
    },
    {
      "bom-ref": "uvloop==0.22.1",
      "description": "Fast implementation of asyncio event loop on top of libuv",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: github",
          "type": "vcs",
          "url": "https://github.com/MagicStack/uvloop"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: Apache Software License"
          }
        }
      ],
      "name": "uvloop",
      "purl": "pkg:pypi/uvloop@0.22.1",
      "type": "library",
      "version": "0.22.1"
    },
    {
      "bom-ref": "webcolors==25.10.0",
      "description": "A library for working with the color formats defined by HTML and CSS.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://webcolors.readthedocs.io"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/ubernostrum/webcolors"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "webcolors",
      "purl": "pkg:pypi/webcolors@25.10.0",
      "type": "library",
      "version": "25.10.0"
    },
    {
      "bom-ref": "wsproto==1.3.2",
      "description": "Pure-Python WebSocket protocol implementation",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://python-hyper.org/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Reports",
          "type": "issue-tracker",
          "url": "https://github.com/python-hyper/wsproto/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/python-hyper/wsproto/"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/python-hyper/wsproto/"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT"
          }
        }
      ],
      "name": "wsproto",
      "purl": "pkg:pypi/wsproto@1.3.2",
      "type": "library",
      "version": "1.3.2"
    },
    {
      "bom-ref": "xlwings==0.35.0",
      "description": "Make Excel fly: Interact with Excel from Python and vice versa.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://docs.xlwings.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Source",
          "type": "other",
          "url": "https://github.com/xlwings/xlwings"
        },
        {
          "comment": "from packaging metadata Project-URL: Funding",
          "type": "other",
          "url": "https://www.xlwings.org/pricing"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://docs.xlwings.org/en/stable/whatsnew.html"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://www.xlwings.org"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "name": "License :: OSI Approved :: BSD License"
          }
        }
      ],
      "name": "xlwings",
      "purl": "pkg:pypi/xlwings@0.35.0",
      "type": "library",
      "version": "0.35.0"
    },
    {
      "bom-ref": "xlwings-server==1.4.0",
      "description": "Modern Excel add-ins with Python, running on your self-hosted server.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://server.xlwings.org"
        },
        {
          "comment": "from packaging metadata Project-URL: Issues",
          "type": "issue-tracker",
          "url": "https://github.com/xlwings/xlwings-server/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/xlwings/xlwings-server"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://server.xlwings.org"
        }
      ],
      "name": "xlwings-server",
      "purl": "pkg:pypi/xlwings-server@1.4.0",
      "type": "library",
      "version": "1.4.0"
    }
  ],
  "dependencies": [
    {
      "dependsOn": [
        "filelock==3.25.2",
        "msgpack==1.1.2",
        "redis==7.4.0",
        "requests==2.33.1"
      ],
      "ref": "CacheControl==0.14.4"
    },
    {
      "dependsOn": [
        "MarkupSafe==3.0.3"
      ],
      "ref": "Jinja2==3.1.6"
    },
    {
      "ref": "MarkupSafe==3.0.3"
    },
    {
      "ref": "PyYAML==6.0.3"
    },
    {
      "ref": "Pygments==2.20.0"
    },
    {
      "dependsOn": [
        "msgpack==1.1.2",
        "redis==7.4.0"
      ],
      "ref": "aiocache==0.12.3"
    },
    {
      "ref": "annotated-doc==0.0.4"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "annotated-types==0.7.0"
    },
    {
      "dependsOn": [
        "idna==3.11",
        "typing_extensions==4.15.0"
      ],
      "ref": "anyio==4.13.0"
    },
    {
      "dependsOn": [
        "python-dateutil==2.9.0.post0",
        "tzdata==2026.1"
      ],
      "ref": "arrow==1.4.0"
    },
    {
      "ref": "attrs==26.1.0"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "rich==14.3.3",
        "stevedore==5.7.0",
        "tomli==2.4.1"
      ],
      "ref": "bandit==1.9.4"
    },
    {
      "ref": "bidict==0.23.1"
    },
    {
      "ref": "boolean.py==5.0"
    },
    {
      "ref": "certifi==2026.2.25"
    },
    {
      "dependsOn": [
        "pycparser==3.0"
      ],
      "ref": "cffi==2.0.0"
    },
    {
      "ref": "chardet==5.2.0"
    },
    {
      "ref": "charset-normalizer==3.4.7"
    },
    {
      "ref": "click==8.3.2"
    },
    {
      "dependsOn": [
        "python-dateutil==2.9.0.post0"
      ],
      "ref": "croniter==6.2.2"
    },
    {
      "dependsOn": [
        "certifi==2026.2.25",
        "cffi==2.0.0",
        "click==8.3.2",
        "typing_extensions==4.15.0"
      ],
      "ref": "cryptography==46.0.6"
    },
    {
      "dependsOn": [
        "chardet==5.2.0",
        "cyclonedx-python-lib==11.7.0",
        "packageurl-python==0.17.6",
        "packaging==26.0",
        "pip-requirements-parser==32.0.1",
        "tomli==2.4.1"
      ],
      "ref": "cyclonedx-bom==7.3.0"
    },
    {
      "dependsOn": [
        "cyclonedx-bom==7.3.0"
      ],
      "ref": "cyclonedx-py==1.0.1"
    },
    {
      "dependsOn": [
        "jsonschema==4.26.0",
        "license-expression==30.4.4",
        "lxml==6.0.2",
        "packageurl-python==0.17.6",
        "py-serializable==2.1.0",
        "referencing==0.37.0",
        "sortedcontainers==2.4.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "cyclonedx-python-lib==11.7.0"
    },
    {
      "ref": "defusedxml==0.7.1"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "PyYAML==6.0.3",
        "annotated-doc==0.0.4",
        "httpx==0.28.1",
        "pydantic-settings==2.13.1",
        "pydantic==2.12.5",
        "python-multipart==0.0.22",
        "starlette==1.0.0",
        "typing-inspection==0.4.2",
        "typing_extensions==4.15.0",
        "uvicorn==0.43.0"
      ],
      "ref": "fastapi==0.135.3"
    },
    {
      "ref": "filelock==3.25.2"
    },
    {
      "ref": "fqdn==1.5.1"
    },
    {
      "dependsOn": [
        "httpx==0.28.1",
        "packaging==26.0",
        "uvloop==0.22.1"
      ],
      "ref": "gunicorn==25.3.0"
    },
    {
      "ref": "h11==0.16.0"
    },
    {
      "ref": "hiredis==3.3.1"
    },
    {
      "dependsOn": [
        "anyio==4.13.0",
        "certifi==2026.2.25",
        "h11==0.16.0"
      ],
      "ref": "httpcore==1.0.9"
    },
    {
      "ref": "httptools==0.7.1"
    },
    {
      "dependsOn": [
        "Pygments==2.20.0",
        "anyio==4.13.0",
        "certifi==2026.2.25",
        "click==8.3.2",
        "httpcore==1.0.9",
        "idna==3.11",
        "rich==14.3.3"
      ],
      "ref": "httpx==0.28.1"
    },
    {
      "ref": "idna==3.11"
    },
    {
      "dependsOn": [
        "arrow==1.4.0"
      ],
      "ref": "isoduration==20.11.0"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6"
      ],
      "ref": "jinja2_fragments==1.11.0"
    },
    {
      "dependsOn": [
        "cryptography==46.0.6"
      ],
      "ref": "joserfc==1.6.3"
    },
    {
      "ref": "jsonpointer==3.1.1"
    },
    {
      "dependsOn": [
        "referencing==0.37.0"
      ],
      "ref": "jsonschema-specifications==2025.9.1"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "fqdn==1.5.1",
        "idna==3.11",
        "isoduration==20.11.0",
        "jsonpointer==3.1.1",
        "jsonschema-specifications==2025.9.1",
        "referencing==0.37.0",
        "rfc3339-validator==0.1.4",
        "rfc3986-validator==0.1.1",
        "rfc3987-syntax==1.1.0",
        "rpds-py==0.30.0",
        "uri-template==1.3.0",
        "webcolors==25.10.0"
      ],
      "ref": "jsonschema==4.26.0"
    },
    {
      "ref": "lark==1.3.1"
    },
    {
      "dependsOn": [
        "boolean.py==5.0"
      ],
      "ref": "license-expression==30.4.4"
    },
    {
      "ref": "lxml==6.0.2"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "mdurl==0.1.2",
        "requests==2.33.1"
      ],
      "ref": "markdown-it-py==4.0.0"
    },
    {
      "ref": "mdurl==0.1.2"
    },
    {
      "ref": "msgpack==1.1.2"
    },
    {
      "ref": "packageurl-python==0.17.6"
    },
    {
      "ref": "packaging==26.0"
    },
    {
      "dependsOn": [
        "pip==25.0.1"
      ],
      "ref": "pip-api==0.0.34"
    },
    {
      "dependsOn": [
        "packaging==26.0",
        "pyparsing==3.3.2"
      ],
      "ref": "pip-requirements-parser==32.0.1"
    },
    {
      "ref": "pip==25.0.1"
    },
    {
      "dependsOn": [
        "CacheControl==0.14.4",
        "cyclonedx-python-lib==11.7.0",
        "packaging==26.0",
        "pip-api==0.0.34",
        "pip-requirements-parser==32.0.1",
        "platformdirs==4.9.4",
        "requests==2.33.1",
        "rich==14.3.3",
        "tomli==2.4.1",
        "tomli_w==1.2.0"
      ],
      "ref": "pip_audit==2.10.0"
    },
    {
      "ref": "platformdirs==4.9.4"
    },
    {
      "dependsOn": [
        "defusedxml==0.7.1"
      ],
      "ref": "py-serializable==2.1.0"
    },
    {
      "ref": "pycparser==3.0"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "pydantic==2.12.5",
        "python-dotenv==1.2.2",
        "tomli==2.4.1",
        "typing-inspection==0.4.2"
      ],
      "ref": "pydantic-settings==2.13.1"
    },
    {
      "dependsOn": [
        "annotated-types==0.7.0",
        "pydantic_core==2.41.5",
        "typing-inspection==0.4.2",
        "typing_extensions==4.15.0",
        "tzdata==2026.1"
      ],
      "ref": "pydantic==2.12.5"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "pydantic_core==2.41.5"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6"
      ],
      "ref": "pyparsing==3.3.2"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "python-dateutil==2.9.0.post0"
    },
    {
      "dependsOn": [
        "click==8.3.2"
      ],
      "ref": "python-dotenv==1.2.2"
    },
    {
      "dependsOn": [
        "requests==2.33.1",
        "simple-websocket==1.1.0"
      ],
      "ref": "python-engineio==4.13.1"
    },
    {
      "ref": "python-multipart==0.0.22"
    },
    {
      "dependsOn": [
        "bidict==0.23.1",
        "python-engineio==4.13.1",
        "requests==2.33.1"
      ],
      "ref": "python-socketio==5.16.1"
    },
    {
      "dependsOn": [
        "cryptography==46.0.6",
        "hiredis==3.3.1",
        "requests==2.33.1"
      ],
      "ref": "redis==7.4.0"
    },
    {
      "dependsOn": [
        "attrs==26.1.0",
        "rpds-py==0.30.0",
        "typing_extensions==4.15.0"
      ],
      "ref": "referencing==0.37.0"
    },
    {
      "dependsOn": [
        "certifi==2026.2.25",
        "chardet==5.2.0",
        "charset-normalizer==3.4.7",
        "idna==3.11",
        "urllib3==2.6.3"
      ],
      "ref": "requests==2.33.1"
    },
    {
      "dependsOn": [
        "six==1.17.0"
      ],
      "ref": "rfc3339-validator==0.1.4"
    },
    {
      "ref": "rfc3986-validator==0.1.1"
    },
    {
      "dependsOn": [
        "lark==1.3.1"
      ],
      "ref": "rfc3987-syntax==1.1.0"
    },
    {
      "dependsOn": [
        "Pygments==2.20.0",
        "markdown-it-py==4.0.0"
      ],
      "ref": "rich==14.3.3"
    },
    {
      "ref": "rpds-py==0.30.0"
    },
    {
      "dependsOn": [
        "wsproto==1.3.2"
      ],
      "ref": "simple-websocket==1.1.0"
    },
    {
      "ref": "six==1.17.0"
    },
    {
      "ref": "sortedcontainers==2.4.0"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "PyYAML==6.0.3",
        "anyio==4.13.0",
        "httpx==0.28.1",
        "python-multipart==0.0.22",
        "typing_extensions==4.15.0"
      ],
      "ref": "starlette==1.0.0"
    },
    {
      "ref": "stevedore==5.7.0"
    },
    {
      "ref": "tomli==2.4.1"
    },
    {
      "ref": "tomli_w==1.2.0"
    },
    {
      "ref": "tomlkit==0.14.0"
    },
    {
      "dependsOn": [
        "typing_extensions==4.15.0"
      ],
      "ref": "typing-inspection==0.4.2"
    },
    {
      "ref": "typing_extensions==4.15.0"
    },
    {
      "ref": "tzdata==2026.1"
    },
    {
      "ref": "uri-template==1.3.0"
    },
    {
      "ref": "urllib3==2.6.3"
    },
    {
      "dependsOn": [
        "PyYAML==6.0.3",
        "click==8.3.2",
        "h11==0.16.0",
        "httptools==0.7.1",
        "python-dotenv==1.2.2",
        "typing_extensions==4.15.0",
        "uvloop==0.22.1"
      ],
      "ref": "uvicorn==0.43.0"
    },
    {
      "ref": "uvloop==0.22.1"
    },
    {
      "ref": "webcolors==25.10.0"
    },
    {
      "dependsOn": [
        "h11==0.16.0"
      ],
      "ref": "wsproto==1.3.2"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "aiocache==0.12.3",
        "croniter==6.2.2",
        "fastapi==0.135.3",
        "gunicorn==25.3.0",
        "hiredis==3.3.1",
        "httptools==0.7.1",
        "httpx==0.28.1",
        "jinja2_fragments==1.11.0",
        "joserfc==1.6.3",
        "pydantic-settings==2.13.1",
        "python-dotenv==1.2.2",
        "python-multipart==0.0.22",
        "python-socketio==5.16.1",
        "redis==7.4.0",
        "tomlkit==0.14.0",
        "typing_extensions==4.15.0",
        "uvicorn==0.43.0",
        "uvloop==0.22.1",
        "xlwings==0.35.0"
      ],
      "ref": "xlwings-server==1.4.0"
    },
    {
      "dependsOn": [
        "Jinja2==3.1.6",
        "requests==2.33.1"
      ],
      "ref": "xlwings==0.35.0"
    }
  ],
  "metadata": {
    "timestamp": "2026-04-05T08:09:11.113473+00:00",
    "tools": {
      "components": [
        {
          "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-bom/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-bom-tool.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python/"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-py",
          "type": "application",
          "version": "7.3.0"
        },
        {
          "description": "Python library for CycloneDX",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-python-lib/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-python-library.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-python-lib",
          "type": "library",
          "version": "11.7.0"
        }
      ]
    }
  },
  "serialNumber": "urn:uuid:f6f4ef06-84bd-492a-bd5e-b8ee739f546d",
  "version": 1,
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6"
}