{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.nodejs/node-gyp","documentNamespace":"https://spdx.org/spdxdocs/protobom/f259785a-52bc-4561-b923-dfbeffb6d210","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260109172223-ec205671c075+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-01-13T20:47:16Z"},"packages":[{"name":"bindings","SPDXID":"SPDXRef-npm-bindings-1.5.0-3200db","versionInfo":"^1.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/bindings@%5E1.5.0"}]},{"name":"semver","SPDXID":"SPDXRef-npm-semver-7.3.5-95fa4f","versionInfo":"^7.3.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/semver@%5E7.3.5"}]},{"name":"tar","SPDXID":"SPDXRef-npm-tar-7.5.2-a91f08","versionInfo":"^7.5.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/tar@%5E7.5.2"}]},{"name":"nan","SPDXID":"SPDXRef-npm-nan-2.23.1-f99ccc","versionInfo":"^2.23.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/nan@%5E2.23.1"}]},{"name":"neostandard","SPDXID":"SPDXRef-npm-neostandard-0.12.2-0b5ee2","versionInfo":"^0.12.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/neostandard@%5E0.12.2"}]},{"name":"nopt","SPDXID":"SPDXRef-npm-nopt-9.0.0-d5992d","versionInfo":"^9.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/nopt@%5E9.0.0"}]},{"name":"which","SPDXID":"SPDXRef-npm-which-6.0.0-919c90","versionInfo":"^6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/which@%5E6.0.0"}]},{"name":"env-paths","SPDXID":"SPDXRef-npm-env-paths-2.2.0-7e0117","versionInfo":"^2.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/env-paths@%5E2.2.0"}]},{"name":"cross-env","SPDXID":"SPDXRef-npm-cross-env-10.1.0-cc1b33","versionInfo":"^10.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/cross-env@%5E10.1.0"}]},{"name":"proc-log","SPDXID":"SPDXRef-npm-proc-log-6.0.0-5acb32","versionInfo":"^6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/proc-log@%5E6.0.0"}]},{"name":"require-inject","SPDXID":"SPDXRef-npm-require-inject-1.4.4-81c053","versionInfo":"^1.4.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/require-inject@%5E1.4.4"}]},{"name":"tinyglobby","SPDXID":"SPDXRef-npm-tinyglobby-0.2.12-a8e1b8","versionInfo":"^0.2.12","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/tinyglobby@%5E0.2.12"}]},{"name":"make-fetch-happen","SPDXID":"SPDXRef-npm-make-fetch-happen-15.0.0-7204a6","versionInfo":"^15.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/make-fetch-happen@%5E15.0.0"}]},{"name":"eslint","SPDXID":"SPDXRef-npm-eslint-9.39.1-3c3bb0","versionInfo":"^9.39.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/eslint@%5E9.39.1"}]},{"name":"mocha","SPDXID":"SPDXRef-npm-mocha-11.7.5-ad78b1","versionInfo":"^11.7.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/mocha@%5E11.7.5"}]},{"name":"graceful-fs","SPDXID":"SPDXRef-npm-graceful-fs-4.2.6-c290cf","versionInfo":"^4.2.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/graceful-fs@%5E4.2.6"}]},{"name":"exponential-backoff","SPDXID":"SPDXRef-npm-exponential-backoff-3.1.1-aeae7b","versionInfo":"^3.1.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/exponential-backoff@%5E3.1.1"}]},{"name":"gr2m/create-or-update-pull-request-action","SPDXID":"SPDXRef-githubactions-gr2m-create-or-update-pull-request-action-1..-75c946","versionInfo":"1.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/gr2m/create-or-update-pull-request-action@1.%2A.%2A"}]},{"name":"actions/github-script","SPDXID":"SPDXRef-githubactions-actions-github-script-8..-75c946","versionInfo":"8.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/github-script@8.%2A.%2A"}]},{"name":"setuptools","SPDXID":"SPDXRef-pypi-setuptools-75c946","versionInfo":"\u003e= 69.5.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/setuptools"}]},{"name":"packaging","SPDXID":"SPDXRef-pypi-packaging-75c946","versionInfo":"\u003e= 24.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/packaging"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@6.%2A.%2A"}]},{"name":"actions/setup-node","SPDXID":"SPDXRef-githubactions-actions-setup-node-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-node@6.%2A.%2A"}]},{"name":"googleapis/release-please-action","SPDXID":"SPDXRef-githubactions-googleapis-release-please-action-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/googleapis/release-please-action@4.%2A.%2A"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@6.%2A.%2A"}]},{"name":"astral-sh/ruff-action","SPDXID":"SPDXRef-githubactions-astral-sh-ruff-action-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/astral-sh/ruff-action@3.%2A.%2A"}]},{"name":"seanmiddleditch/gha-setup-ninja","SPDXID":"SPDXRef-githubactions-seanmiddleditch-gha-setup-ninja-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/seanmiddleditch/gha-setup-ninja@6.%2A.%2A"}]},{"name":"com.github.nodejs/node-gyp","SPDXID":"SPDXRef-github-nodejs-node-gyp-main-86799b","versionInfo":"main","downloadLocation":"git+https://github.com/nodejs/node-gyp","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/nodejs/node-gyp@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-bindings-1.5.0-3200db","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-semver-7.3.5-95fa4f","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-tar-7.5.2-a91f08","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-nan-2.23.1-f99ccc","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-neostandard-0.12.2-0b5ee2","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-nopt-9.0.0-d5992d","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-which-6.0.0-919c90","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-env-paths-2.2.0-7e0117","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-cross-env-10.1.0-cc1b33","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-proc-log-6.0.0-5acb32","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-require-inject-1.4.4-81c053","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-tinyglobby-0.2.12-a8e1b8","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-make-fetch-happen-15.0.0-7204a6","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-eslint-9.39.1-3c3bb0","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-mocha-11.7.5-ad78b1","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-graceful-fs-4.2.6-c290cf","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-npm-exponential-backoff-3.1.1-aeae7b","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-githubactions-gr2m-create-or-update-pull-request-action-1..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-githubactions-actions-github-script-8..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-pypi-setuptools-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-pypi-packaging-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-node-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-githubactions-googleapis-release-please-action-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-githubactions-astral-sh-ruff-action-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-nodejs-node-gyp-main-86799b","relatedSpdxElement":"SPDXRef-githubactions-seanmiddleditch-gha-setup-ninja-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-nodejs-node-gyp-main-86799b","relationshipType":"DESCRIBES"}]}