{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.codeinthehole/purl","documentNamespace":"https://spdx.org/spdxdocs/protobom/1d0a10bd-c8bd-43ab-abfd-4d57bd464087","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251216165153-1f3f3060931e+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-12-31T10:14:07Z"},"packages":[{"name":"pytest","SPDXID":"SPDXRef-pypi-pytest-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest"}]},{"name":"setuptools","SPDXID":"SPDXRef-pypi-setuptools-40.8.0-75c946","versionInfo":"40.8.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/setuptools@40.8.0"}]},{"name":"pip","SPDXID":"SPDXRef-pypi-pip-19.0.3-75c946","versionInfo":"19.0.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) 1999 Entrust.net Limited, (c) 1999 Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial, (c) 1999 VeriSign, Inc., (c) 2006 Entrust, Inc., (c) 2006 Entrust, Inc. Label Entrust Root Certification, (c) 2006 thawte, Inc., (c) 2006 VeriSign, Inc., (c) 2007 GeoTrust Inc., (c) 2007 thawte, Inc., (c) 2007 VeriSign, Inc., (c) 2008 GeoTrust Inc., (c) 2008 thawte, Inc., (c) 2008 VeriSign, Inc., (c) 2009 Entrust, Inc. - for, (c) 2012 Entrust, Inc. - for, Copyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, Copyright (c) 1991-2014 Unicode, Inc., Copyright (c) 1991, 1999 Free Software Foundation, Inc., Copyright (c) 1995-2001 Corporation for National Research Initiatives, Copyright (c) 1998 the Initial Developer., Copyright (c) 2001 the Initial Developer., Copyright (c) 2001-2014 Python Software Foundation, Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Python Software Foundation, Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014 Python Software Foundation, Copyright (c) 2002 Lars Gustaebel \u003clars@gustaebel.de\u003e, Copyright (c) 2003-2019 Paul T. McGuire, Copyright (c) 2005 the Initial Developer., Copyright (c) 2005-2010 ActiveState Software Inc., Copyright (c) 2005/OISTE Foundation, Copyright (c) 2005/OISTE Foundation Endorsed Label OISTE WISeKey Global Root, Copyright (c) 2006-2013 James Graham and other contributors, Copyright (c) 2007 Skip Montanaro., Copyright (c) 2008-2009 Ben Finney \u003cben+python@benfinney.id.au\u003e, Copyright (c) 2008-2011 INADA Naoki \u003csongofacandy@gmail.com\u003e, Copyright (c) 2008-2016, Copyright (c) 2008-2019, Copyright (c) 2010 ActiveState Software Inc., Copyright (c) 2010 Jonathan Hartley, Copyright (c) 2010-2015 Benjamin Peterson, Copyright (c) 2010-2018 Benjamin Peterson, copyright (c) 2012 by Kenneth Reitz., Copyright (c) 2012 by Simon Sapin., Copyright (c) 2012 Giorgos Verigakis \u003cverigak@gmail.com\u003e, Copyright (c) 2012 The Python Software Foundation., Copyright (c) 2012-2013 Python Software Foundation., Copyright (c) 2012-2015 Vinay Sajip., Copyright (c) 2012-2017 The Python Software Foundation., Copyright (c) 2012-2017 Vinay Sajip., Copyright (c) 2013 Eddy Petrisor, Copyright (c) 2013 Vinay Sajip., Copyright (c) 2013-2015 Vinay Sajip., Copyright (c) 2013-2017 Vinay Sajip., Copyright (c) 2013-2018, Kim Davies., Copyright (c) 2015-2016 Will Bond \u003cwill@wbond.net\u003e, Copyright (c) 2016 Jason R Coombs \u003cjaraco@jaraco.com\u003e, copyright (c) 2017 by Kenneth Reitz., Copyright (c) 2017 Thomas Kluyver, Copyright (c) Donald Stufft and individual contributors., Copyright 2007 Google Inc., Copyright 2008-2016 Andrey Petrov and contributors, copyright 2008-2017, PyPA, Copyright 2012 by Simon Sapin, Copyright 2012 Facebook, Copyright 2013-2014 Ray, Copyright 2014-2019 s, Copyright 2015 Eric Larson, Copyright 2015,2016,2017 Nir Cohen, Copyright 2018 Kenneth Reitz, Copyright Jonathan Hartley 2013., copyrighted by the Free Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pip@19.0.3"}]},{"name":"tox","SPDXID":"SPDXRef-pypi-tox-3.7.0-75c946","versionInfo":"3.7.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2007-2011 by the Sphinx team, copyright u'2010","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/tox@3.7.0"}]},{"name":"wheel","SPDXID":"SPDXRef-pypi-wheel-0.33.1-75c946","versionInfo":"0.33.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"copyright (c) 2012-2014 Daniel Holth \u003cdholth@fastmail.fm\u003e and contributors.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/wheel@0.33.1"}]},{"name":"six","SPDXID":"SPDXRef-pypi-six-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/six"}]},{"name":"com.github.codeinthehole/purl","SPDXID":"SPDXRef-github-codeinthehole-purl-master-a34ab5","versionInfo":"master","downloadLocation":"git+https://github.com/codeinthehole/purl","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/codeinthehole/purl@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-codeinthehole-purl-master-a34ab5","relatedSpdxElement":"SPDXRef-pypi-pytest-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-codeinthehole-purl-master-a34ab5","relatedSpdxElement":"SPDXRef-pypi-setuptools-40.8.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-codeinthehole-purl-master-a34ab5","relatedSpdxElement":"SPDXRef-pypi-pip-19.0.3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-codeinthehole-purl-master-a34ab5","relatedSpdxElement":"SPDXRef-pypi-tox-3.7.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-codeinthehole-purl-master-a34ab5","relatedSpdxElement":"SPDXRef-pypi-wheel-0.33.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-codeinthehole-purl-master-a34ab5","relatedSpdxElement":"SPDXRef-pypi-six-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-codeinthehole-purl-master-a34ab5","relationshipType":"DESCRIBES"}]}