{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.npm/git","documentNamespace":"https://spdx.org/spdxdocs/protobom/a8c1ceae-1104-41f4-840a-dd2e248a4646","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260109172223-ec205671c075+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-01-16T22:36:35Z"},"packages":[{"name":"@npmcli/promise-spawn","SPDXID":"SPDXRef-npm-npmcli-promise-spawn-9.0.0-f7fa7e","versionInfo":"^9.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/%40npmcli/promise-spawn@%5E9.0.0"}]},{"name":"ini","SPDXID":"SPDXRef-npm-ini-6.0.0-fad442","versionInfo":"^6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/ini@%5E6.0.0"}]},{"name":"promise-retry","SPDXID":"SPDXRef-npm-promise-retry-2.0.1-386a6a","versionInfo":"^2.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/promise-retry@%5E2.0.1"}]},{"name":"slash","SPDXID":"SPDXRef-npm-slash-3.0.0-47fc12","versionInfo":"^3.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/slash@%5E3.0.0"}]},{"name":"@npmcli/eslint-config","SPDXID":"SPDXRef-npm-npmcli-eslint-config-5.0.0-addd10","versionInfo":"^5.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/%40npmcli/eslint-config@%5E5.0.0"}]},{"name":"@npmcli/template-oss","SPDXID":"SPDXRef-npm-npmcli-template-oss-4.24.1-f2f230","versionInfo":"4.24.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"ISC","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/%40npmcli/template-oss@4.24.1"}]},{"name":"npm-package-arg","SPDXID":"SPDXRef-npm-npm-package-arg-13.0.0-4e747b","versionInfo":"^13.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/npm-package-arg@%5E13.0.0"}]},{"name":"lru-cache","SPDXID":"SPDXRef-npm-lru-cache-11.2.1-017dec","versionInfo":"^11.2.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/lru-cache@%5E11.2.1"}]},{"name":"which","SPDXID":"SPDXRef-npm-which-6.0.0-a2e10d","versionInfo":"^6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/which@%5E6.0.0"}]},{"name":"semver","SPDXID":"SPDXRef-npm-semver-7.3.5-93eac7","versionInfo":"^7.3.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/semver@%5E7.3.5"}]},{"name":"tap","SPDXID":"SPDXRef-npm-tap-16.0.1-07b8ab","versionInfo":"^16.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/tap@%5E16.0.1"}]},{"name":"npm-pick-manifest","SPDXID":"SPDXRef-npm-npm-pick-manifest-11.0.1-bb0e3a","versionInfo":"^11.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/npm-pick-manifest@%5E11.0.1"}]},{"name":"proc-log","SPDXID":"SPDXRef-npm-proc-log-6.0.0-dc2b2c","versionInfo":"^6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/proc-log@%5E6.0.0"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"actions/setup-node","SPDXID":"SPDXRef-githubactions-actions-setup-node-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-node@4.%2A.%2A"}]},{"name":"LouisBrunner/checks-action","SPDXID":"SPDXRef-githubactions-LouisBrunner-checks-action-1.6.0-75c946","versionInfo":"1.6.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/LouisBrunner/checks-action@1.6.0"}]},{"name":"github/codeql-action/analyze","SPDXID":"SPDXRef-githubactions-githubcodeql-action-analyze-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/analyze@3.%2A.%2A"}]},{"name":"github/codeql-action/init","SPDXID":"SPDXRef-githubactions-githubcodeql-action-init-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/init@3.%2A.%2A"}]},{"name":"dependabot/fetch-metadata","SPDXID":"SPDXRef-githubactions-dependabot-fetch-metadata-1..-75c946","versionInfo":"1.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/dependabot/fetch-metadata@1.%2A.%2A"}]},{"name":"actions/github-script","SPDXID":"SPDXRef-githubactions-actions-github-script-7..-75c946","versionInfo":"7.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/github-script@7.%2A.%2A"}]},{"name":"peter-evans/find-comment","SPDXID":"SPDXRef-githubactions-peter-evans-find-comment-2..-75c946","versionInfo":"2.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/peter-evans/find-comment@2.%2A.%2A"}]},{"name":"peter-evans/create-or-update-comment","SPDXID":"SPDXRef-githubactions-peter-evans-create-or-update-comment-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/peter-evans/create-or-update-comment@3.%2A.%2A"}]},{"name":"com.github.npm/git","SPDXID":"SPDXRef-github-npm-git-main-6e0927","versionInfo":"main","downloadLocation":"git+https://github.com/npm/git","filesAnalyzed":false,"licenseDeclared":"ISC","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/npm/git@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-npmcli-promise-spawn-9.0.0-f7fa7e","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-ini-6.0.0-fad442","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-promise-retry-2.0.1-386a6a","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-slash-3.0.0-47fc12","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-npmcli-eslint-config-5.0.0-addd10","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-npmcli-template-oss-4.24.1-f2f230","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-npm-package-arg-13.0.0-4e747b","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-lru-cache-11.2.1-017dec","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-which-6.0.0-a2e10d","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-semver-7.3.5-93eac7","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-tap-16.0.1-07b8ab","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-npm-pick-manifest-11.0.1-bb0e3a","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-npm-proc-log-6.0.0-dc2b2c","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-githubactions-peter-evans-create-or-update-comment-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-init-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-node-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-githubactions-LouisBrunner-checks-action-1.6.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-analyze-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-githubactions-dependabot-fetch-metadata-1..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-githubactions-actions-github-script-7..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-npm-git-main-6e0927","relatedSpdxElement":"SPDXRef-githubactions-peter-evans-find-comment-2..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-npm-git-main-6e0927","relationshipType":"DESCRIBES"}]}