{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.meshy/django-conman","documentNamespace":"https://spdx.org/spdxdocs/protobom/8292e70a-251a-4125-b992-15c63b81c481","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251021181738-79ed14d77102+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-10-25T23:44:41Z"},"packages":[{"name":"django-polymorphic","SPDXID":"SPDXRef-pypi-django-polymorphic-75c946","versionInfo":"~\u003e 1.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/django-polymorphic"}]},{"name":"isort","SPDXID":"SPDXRef-pypi-isort-4.2.15-75c946","versionInfo":"4.2.15","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2009 Raymond Hettinger, Copyright (c) 2013 Timothy Edmund Crosley, Copyright (c) 2015 Helen Sherwood-Taylor","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/isort@4.2.15"}]},{"name":"dj-database-url","SPDXID":"SPDXRef-pypi-dj-database-url-0.4.1-75c946","versionInfo":"0.4.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/dj-database-url@0.4.1"}]},{"name":"coverage","SPDXID":"SPDXRef-pypi-coverage-4.4.2-75c946","versionInfo":"4.4.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"(c) 2005, 2014 jQuery Foundation, Inc., Copyright (c) 2010, Copyright (c) 2010 Cowboy Ben Alman, Copyright 2001 Gareth Rees., Copyright 2004-2017 Ned Batchelder., Copyright 2010, John Resig, Copyright Software Freedom Conservancy, Inc., copyright u'2009 N EN","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/coverage@4.4.2"}]},{"name":"psycopg2","SPDXID":"SPDXRef-pypi-psycopg2-2.7.3.2-75c946","versionInfo":"2.7.3.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"LGPL-3.0-or-later WITH openvpn-openssl-exception","copyrightText":"Copyright (c) 2001-2003 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2001-2006 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2001-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Python Software Foundation, Copyright (c) 2002 Tom Jenkins \u003ctjenkins@devis.com\u003e, Copyright (c) 2003-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2003-2015 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2004-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2005 Federico Di Gregorio \u003cfog@initd.org\u003e, Copyright (c) 2005-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2006-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2006-2010 Johan Dahlin \u003cjdahlin@async.com.br\u003e, Copyright (c) 2006-2011 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2007 Free Software Foundation, Inc. \u003chttp://fsf.org/\u003e, Copyright (c) 2007-2011 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2007-2011 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2008 Canonical Ltd., Copyright (c) 2008 James Henstridge \u003cjames@jamesh.id.au\u003e, Copyright (c) 2008-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2008-2011 James Henstridge \u003cjames@jamesh.id.au\u003e, Copyright (c) 2010 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2010-2011 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2010-2011 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2010-2011 Jan Urbanski \u003cwulczer@wulczer.org\u003e, Copyright (c) 2011 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2012 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2013 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2013 Matthew Woodcraft \u003cmatthew@woodcraft.me.uk\u003e, Copyright (c) 2015 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2016 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2017 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright 2009, Jannis Leidel., Copyright 2010 by Daniele Varrazzo., Copyright 2013 by Daniele Varrazzo., copyright u'2001-2016, Federico Di Gregorio, Daniele Varrazzo","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/psycopg2@2.7.3.2"}]},{"name":"factory-boy","SPDXID":"SPDXRef-pypi-factory-boy-2.9.2-75c946","versionInfo":"2.9.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2010 Mark Sandstrom, Copyright (c) 2011-2015 Raphael Barrois, Copyright (c) The FactoryBoy project","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/factory-boy@2.9.2"}]},{"name":"flake8-commas","SPDXID":"SPDXRef-pypi-flake8-commas-1.0.0-75c946","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/flake8-commas@1.0.0"}]},{"name":"mkdocs","SPDXID":"SPDXRef-pypi-mkdocs-0.17.2-75c946","versionInfo":"0.17.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause","copyrightText":"(c) 2005, 2013 jQuery Foundation, Inc., (c) 2005, 2014 jQuery Foundation, Inc., (c) Vasily Polovnyov \u003cvast@whiteants.net\u003e, Copyright (c) 2010-2014, The Dojo Foundation, Copyright (c) 2010-2015, The Dojo Foundation, Copyright (c) 2014, Tom Christie., Copyright (c) 2015, Waylan Limberg, Copyright (c) 2016 Oliver Nightingale, Copyright 2013 Twitter, Inc., Copyright 2013, Paul Davis \u003cpaul.joseph.davis@gmail.com\u003e, Copyright 2014 by Jan Kovarik., copyright copysource cor, Copyright Dave Gandy 2015.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/mkdocs@0.17.2"}]},{"name":"colour-runner","SPDXID":"SPDXRef-pypi-colour-runner-0.0.5-75c946","versionInfo":"0.0.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/colour-runner@0.0.5"}]},{"name":"flake8","SPDXID":"SPDXRef-pypi-flake8-3.5.0-75c946","versionInfo":"3.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2011-2013 Tarek Ziade \u003ctarek@ziade.org\u003e, Copyright (c) 2012-2016 Ian Cordasco \u003cgraffatcolmingov@gmail.com\u003e, copyright u'2016, Ian Stapleton Cordasco","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/flake8@3.5.0"}]},{"name":"twine","SPDXID":"SPDXRef-pypi-twine-1.9.1-75c946","versionInfo":"1.9.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2013 Donald Stufft, Copyright 2013 Tres Seaver, copyright 2013, Donald Stufft and individual contributors, Copyright 2014 Ian Cordasco, Copyright 2015 Ian Cordasco, Copyright 2016 Ian Cordasco","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/twine@1.9.1"}]},{"name":"django","SPDXID":"SPDXRef-pypi-django-75c946","versionInfo":"~\u003e 1.11.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/django"}]},{"name":"flake8-docstrings","SPDXID":"SPDXRef-pypi-flake8-docstrings-1.3.0-75c946","versionInfo":"1.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2013 Simon Andre, Ian Cordasco","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/flake8-docstrings@1.3.0"}]},{"name":"incuna-test-utils","SPDXID":"SPDXRef-pypi-incuna-test-utils-6.6.0-75c946","versionInfo":"6.6.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/incuna-test-utils@6.6.0"}]},{"name":"psycopg2","SPDXID":"SPDXRef-pypi-psycopg2-2.6.2-75c946","versionInfo":"2.6.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"LGPL-3.0-or-later WITH openvpn-openssl-exception","copyrightText":"Copyright (c) 2001-2003 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2001-2006 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2001-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Python Software Foundation, Copyright (c) 2002 Tom Jenkins \u003ctjenkins@devis.com\u003e, Copyright (c) 2003-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2004-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2005 Federico Di Gregorio \u003cfog@initd.org\u003e, Copyright (c) 2005-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2006-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2006-2010 Johan Dahlin \u003cjdahlin@async.com.br\u003e, Copyright (c) 2006-2011 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2007 Free Software Foundation, Inc. \u003chttp://fsf.org/\u003e, Copyright (c) 2007-2011 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2007-2011 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2008 Canonical Ltd., Copyright (c) 2008 James Henstridge \u003cjames@jamesh.id.au\u003e, Copyright (c) 2008-2010 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2008-2011 James Henstridge \u003cjames@jamesh.id.au\u003e, Copyright (c) 2010 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2010-2011 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2010-2011 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2010-2011 Jan Urbanski \u003cwulczer@wulczer.org\u003e, Copyright (c) 2011 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2012 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2013 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2013 Matthew Woodcraft \u003cmatthew@woodcraft.me.uk\u003e, Copyright (c) 2015 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright 2009, Jannis Leidel., Copyright 2010 by Daniele Varrazzo., Copyright 2013 by Daniele Varrazzo., copyright u'2001-2016, Federico Di Gregorio, Daniele Varrazzo","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/psycopg2@2.6.2"}]},{"name":"django","SPDXID":"SPDXRef-pypi-django-75c946","versionInfo":"~\u003e 1.11.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/django"}]},{"name":"com.github.meshy/django-conman","SPDXID":"SPDXRef-github-meshy-django-conman-master-ab0f55","versionInfo":"master","downloadLocation":"git+https://github.com/meshy/django-conman","filesAnalyzed":false,"licenseDeclared":"BSD-2-Clause","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/meshy/django-conman@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-isort-4.2.15-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-coverage-4.4.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-psycopg2-2.7.3.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-factory-boy-2.9.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-flake8-commas-1.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-flake8-3.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-twine-1.9.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-psycopg2-2.6.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-mkdocs-0.17.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-colour-runner-0.0.5-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-django-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-incuna-test-utils-6.6.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-dj-database-url-0.4.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-flake8-docstrings-1.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-meshy-django-conman-master-ab0f55","relatedSpdxElement":"SPDXRef-pypi-django-polymorphic-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-meshy-django-conman-master-ab0f55","relationshipType":"DESCRIBES"}]}