{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.OpenAssetIO/OpenAssetIO-TraitGen","documentNamespace":"https://spdx.org/spdxdocs/protobom/306474d8-dfb8-4ef7-b763-fea6da4c9614","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251216165153-1f3f3060931e+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-12-28T09:30:32Z"},"packages":[{"name":"pypa/gh-action-pypi-publish","SPDXID":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-releasev1-75c946","versionInfo":"release/v1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pypa/gh-action-pypi-publish@release%2Fv1"}]},{"name":"dawidd6/action-download-artifact","SPDXID":"SPDXRef-githubactions-dawidd6-action-download-artifact-11..-75c946","versionInfo":"11.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/dawidd6/action-download-artifact@11.%2A.%2A"}]},{"name":"actions/download-artifact","SPDXID":"SPDXRef-githubactions-actions-download-artifact-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/download-artifact@5.%2A.%2A"}]},{"name":"jsonschema","SPDXID":"SPDXRef-pypi-jsonschema-4.7.2-75c946","versionInfo":"4.7.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/jsonschema@4.7.2"}]},{"name":"pyyaml","SPDXID":"SPDXRef-pypi-pyyaml-6.0.0-75c946","versionInfo":"6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pyyaml@6.0.0"}]},{"name":"jinja2","SPDXID":"SPDXRef-pypi-jinja2-3.1.6-75c946","versionInfo":"3.1.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause AND BSD-3-Clause","copyrightText":"(c) Copyright 2008 by http://domain.invalid/\u003e, copyright 2007 Pallets, Copyright 2007 Pallets","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/jinja2@3.1.6"}]},{"name":"cpplint","SPDXID":"SPDXRef-pypi-cpplint-1.6.1-75c946","versionInfo":"1.6.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","copyrightText":"(c) Copyright Hubert Holin 2001, Copyright (c) 1989, 1991 Free Software Foundation, Inc., Copyright (c) 1998-2008 VLC authors and VideoLAN, Copyright (c) 1999, 2000, 2001, 2002 VLC authors and VideoLAN, Copyright (c) 2006-2007 Remi Denis-Courmont, Copyright (c) 2008-2011 Remi Denis-Courmont, Copyright (c) 2009 Google Inc., Copyright (c) 2009-2014 VLC authors and VideoLAN, Copyright (c) 2012 The Chromium Authors, Copyright 2006-2011, the V8 project authors, Copyright 2008 Google Inc., Copyright 2014 Google Inc., Copyright 2014 the V8 project authors, Copyright 2014 Your Company, Copyright 2014 Your Company.', for int i, Copyright 2014 Your Company.', pragma once, Copyright 2014 Your Company.', r'printf( d', value), Copyright 2014 Your Company.', static const char kData R, Copyright 2014 Your Company.', unidata, Copyright 2014 Your Company.', virtual void F(int a,', int b), Copyright 2020 foo, Copyright Gennaro Prota 2006, Copyright John Maddock 2008, copyrighted by the Free Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/cpplint@1.6.1"}]},{"name":"clang-format","SPDXID":"SPDXRef-pypi-clang-format-15.0.7-75c946","versionInfo":"15.0.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2021 Dominic Kempf, Heidelberg University and contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/clang-format@15.0.7"}]},{"name":"clang-tidy","SPDXID":"SPDXRef-pypi-clang-tidy-15.0.2.1-75c946","versionInfo":"15.0.2.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2021 Dominic Kempf, Heidelberg University and contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/clang-tidy@15.0.2.1"}]},{"name":"conan","SPDXID":"SPDXRef-pypi-conan-1.60.1-75c946","versionInfo":"1.60.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) 1998 VeriSign, Inc., (c) 1999 Entrust.net Limited, (c) 1999 Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial, (c) 1999 Entrust.net Limited Label Entrust.net Secure Server CA Serial, (c) 1999 VeriSign, Inc., (c) 2005 TURKTRUST Bilgi Iletisim ve Bilisim Guvenligi Hizmetleri A.S., (c) 2005 TURKTRUST Bilgi Iletisim ve Bilisim Guvenligi Hizmetleri A.S. Label TURKTRUST Certificate Services Provider Root, (c) 2006 Entrust, Inc., (c) 2006 Entrust, Inc. Label Entrust Root Certification, (c) 2006 thawte, Inc., (c) 2006 VeriSign, Inc., (c) 2007 GeoTrust Inc., (c) 2007 thawte, Inc., (c) 2007 VeriSign, Inc., (c) 2008 GeoTrust Inc., (c) 2008 thawte, Inc., (c) 2008 VeriSign, Inc., (c) 2009 Entrust, Inc. - for, (c) 2012 Entrust, Inc. - for, (c) Aralik 2007, (c) Aralik 2007 Label TURKTRUST Certificate Services Provider Root 2007, (c) Kasim 2005, (c) Kasim 2005 Label TURKTRUST Certificate Services Provider Root, Copyright (c) 2005/OISTE Foundation Endorsed, Copyright (c) 2005/OISTE Foundation Endorsed Label OISTE WISeKey Global Root, Copyright (c) 2019 JFrog LTD","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/conan@1.60.1"}]},{"name":"cmakelang","SPDXID":"SPDXRef-pypi-cmakelang-0.6.13-75c946","versionInfo":"0.6.13","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"GPL-3.0-or-later","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/cmakelang@0.6.13"}]},{"name":"pytest","SPDXID":"SPDXRef-pypi-pytest-6.2.4-75c946","versionInfo":"6.2.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2004-2020 Holger Krekel and others, Copyright (c) 2014, Gregory Boissinot, copyright 2015-2020, holger krekel and pytest-dev team, Copyright Holger Krekel and others, 2004-2020","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest@6.2.4"}]},{"name":"tree-sitter","SPDXID":"SPDXRef-pypi-tree-sitter-0.20.1-75c946","versionInfo":"0.20.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) 2016 and later Unicode, Inc. and others, Copyright (c) 1991-2019 Unicode, Inc., Copyright (c) 1995-2016 International Business Machines Corporation and others, Copyright (c) 1999 Computer Systems and Communication Lab, Institute of Information Science, Academia Sinica, Copyright (c) 1999 Pai-Hsiang Hsiao, Copyright (c) 1999 TaBE Project, Copyright (c) 1999-2012, International Business Machines Corporation and others, Copyright (c) 1999-2015, International Business Machines Corporation and others, Copyright (c) 2006-2008, Google Inc., Copyright (c) 2013 Brian Eugene Wilson, Robert Martin Campbell, Copyright (c) 2013 International Business Machines Corporation and others, Copyright (c) 2013, LeRoy Benjamin Sharon, Copyright (c) 2014 International Business Machines Corporation and others, Copyright (c) 2019 Max Brunsfeld, GitHub, Copyright 1996 Chih-Hao Tsai Beckman Institute, University of Illinois c-tsai4@uiuc.edu http://casper.beckman.uiuc.edu/~c-tsai4, Copyright 2000, 2001, 2002, 2003 Nara Institute of Science and Technology, Copyright 2006-2011, the V8 project authors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/tree-sitter@0.20.1"}]},{"name":"tree-sitter-languages","SPDXID":"SPDXRef-pypi-tree-sitter-languages-1.5.0-75c946","versionInfo":"1.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/tree-sitter-languages@1.5.0"}]},{"name":"openassetio","SPDXID":"SPDXRef-pypi-openassetio-75c946","versionInfo":"\u003e= 1.0.0b1.rev0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/openassetio"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@4.%2A.%2A"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@5.%2A.%2A"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@6.%2A.%2A"}]},{"name":"gaurav-nelson/github-action-markdown-link-check","SPDXID":"SPDXRef-githubactions-gaurav-nelson-github-action-markdown-link-check-1..-75c946","versionInfo":"1.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/gaurav-nelson/github-action-markdown-link-check@1.%2A.%2A"}]},{"name":"TheFoundryVisionmongers/fn-pylint-action","SPDXID":"SPDXRef-githubactions-TheFoundryVisionmongers-fn-pylint-action-2.0.-75c946","versionInfo":"2.0.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/TheFoundryVisionmongers/fn-pylint-action@2.0.%2A"}]},{"name":"com.github.OpenAssetIO/OpenAssetIO-TraitGen","SPDXID":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","versionInfo":"main","downloadLocation":"git+https://github.com/OpenAssetIO/OpenAssetIO-TraitGen","filesAnalyzed":false,"licenseDeclared":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/OpenAssetIO/OpenAssetIO-TraitGen@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-pytest-6.2.4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-openassetio-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-githubactions-TheFoundryVisionmongers-fn-pylint-action-2.0.-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-githubactions-actions-download-artifact-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-pyyaml-6.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-cpplint-1.6.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-conan-1.60.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-cmakelang-0.6.13-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-githubactions-dawidd6-action-download-artifact-11..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-jsonschema-4.7.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-jinja2-3.1.6-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-tree-sitter-languages-1.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-clang-format-15.0.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-tree-sitter-0.20.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-githubactions-gaurav-nelson-github-action-markdown-link-check-1..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-releasev1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relatedSpdxElement":"SPDXRef-pypi-clang-tidy-15.0.2.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-OpenAssetIO-OpenAssetIO-TraitGen-main-c02c04","relationshipType":"DESCRIBES"}]}