{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.serverlessworkflow/sdk-python","documentNamespace":"https://spdx.org/spdxdocs/protobom/bb7fd4ab-7d51-473c-83db-949c2d7aa5d6","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251201163737-0a89483e840c+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-12-05T17:56:19Z"},"packages":[{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-2-75c946","versionInfo":"2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@2"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-2-75c946","versionInfo":"2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@2"}]},{"name":"pypa/gh-action-pypi-publish","SPDXID":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-master-75c946","versionInfo":"master","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pypa/gh-action-pypi-publish@master"}]},{"name":"certifi","SPDXID":"SPDXRef-pypi-certifi-2025.6.15-75c946","versionInfo":"2025.6.15","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MPL-2.0","copyrightText":"(c) 2006 Entrust, Inc., (c) 2006 Entrust, Inc. Label Entrust Root Certification, (c) 2009 Entrust, Inc. - for, (c) 2012 Entrust, Inc. - for","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/certifi@2025.6.15"}]},{"name":"py","SPDXID":"SPDXRef-pypi-py-1.11.0-75c946","versionInfo":"1.11.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) Holger Krekel and others, 2004-2014, (c) Ronny Pfannschmidt, Holger Krekel, copyright u'2010, holger krekel et. al","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/py@1.11.0"}]},{"name":"toml","SPDXID":"SPDXRef-pypi-toml-0.10.2-75c946","versionInfo":"0.10.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright 2013-2019 William Pearson, Copyright 2015-2016 Julien Enselme, Copyright 2016 Google Inc., Copyright 2017 Jack Evans, Copyright 2017 Nate Prewitt, Copyright 2017 Samuel Vasko, Copyright 2019 Filippo Broggini","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/toml@0.10.2"}]},{"name":"jsonschema","SPDXID":"SPDXRef-pypi-jsonschema-4.4.0-75c946","versionInfo":"4.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2012 Julian Berman, Copyright (c) 2013 Julian Berman, Copyright (c) Twisted Matrix Laboratories, Julian Berman copyright 2013","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/jsonschema@4.4.0"}]},{"name":"pygraphviz","SPDXID":"SPDXRef-pypi-pygraphviz-1.11-75c946","versionInfo":"1.11","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause AND BSD-3-Clause","copyrightText":"Copyright (c) 2004-2010 by Aric Hagberg \u003chagberg@lanl.gov\u003e Dan Schult \u003cdschult@colgate.edu\u003e, Copyright (c) 2004-2022 by Aric Hagberg \u003chagberg@lanl.gov\u003e Dan Schult \u003cdschult@colgate.edu\u003e, Copyright (c) 2006 by Aric Hagberg \u003chagberg@lanl.gov\u003e Dan Schult \u003cdschult@colgate.edu\u003e, Copyright (c) 2006-2022 PyGraphviz Developers Aric Hagberg \u003caric.hagberg@gmail.gov\u003e Dan Schult \u003cdschult@colgate.edu\u003e, Copyright (c) 2007 by Aric Hagberg \u003chagberg@lanl.gov\u003e Dan Schult \u003cdschult@colgate.edu\u003e, copyright f'2004- date.today .year, PyGraphviz Developers","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pygraphviz@1.11"}]},{"name":"iniconfig","SPDXID":"SPDXRef-pypi-iniconfig-2.1.0-75c946","versionInfo":"2.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) Ronny Pfannschmidt, Holger Krekel, Copyright (c) 2010 - 2023 Holger Krekel and others","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/iniconfig@2.1.0"}]},{"name":"pyrsistent","SPDXID":"SPDXRef-pypi-pyrsistent-0.20.0-75c946","versionInfo":"0.20.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2013 Matthew Rocklin, Copyright (c) 2023 Tobias Gustafsson","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pyrsistent@0.20.0"}]},{"name":"pytest-runner","SPDXID":"SPDXRef-pypi-pytest-runner-5.3.1-75c946","versionInfo":"5.3.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-runner@5.3.1"}]},{"name":"pyyaml","SPDXID":"SPDXRef-pypi-pyyaml-6.0-75c946","versionInfo":"6.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2006-2016 Kirill Simonov, Copyright (c) 2017-2021 Ingy, Copyright (c) 2017-2021 Ingy dot Net","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pyyaml@6.0"}]},{"name":"six","SPDXID":"SPDXRef-pypi-six-1.17.0-75c946","versionInfo":"1.17.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2010-2024 Benjamin Peterson","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/six@1.17.0"}]},{"name":"requests","SPDXID":"SPDXRef-pypi-requests-2.32.4-75c946","versionInfo":"2.32.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"copyright (c) 2012 by Kenneth Reitz, copyright (c) 2017 by Kenneth Reitz, Copyright 2019 Kenneth Reitz, Copyright Kenneth Reitz","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/requests@2.32.4"}]},{"name":"charset-normalizer","SPDXID":"SPDXRef-pypi-charset-normalizer-3.4.2-75c946","versionInfo":"3.4.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) 2012 Denny Vrandecic (http://simia.net/letters/), (c) https://stackoverflow.com/questions/3041986/apt-command-line-interface-like-yes-no-input, copyright (c) 2021 by Ahmed TAHRI, Copyright (c) 2025 Ahmed TAHRI, Copyright (c) 2025 TAHRI Ahmed R., Copyright (c) Ahmed TAHRI @Ousret (https://github.com/Ousret), COPYRIGHT (c) FOOBAR, copyright 2023, Ahmed TAHRI","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/charset-normalizer@3.4.2"}]},{"name":"pluggy","SPDXID":"SPDXRef-pypi-pluggy-1.6.0-75c946","versionInfo":"1.6.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2015 holger krekel (rather uses bitbucket/hpk42), copyright 2016, Holger Krekel","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pluggy@1.6.0"}]},{"name":"attrs","SPDXID":"SPDXRef-pypi-attrs-25.3.0-75c946","versionInfo":"25.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) N Revealed, Copyright (c) 2015 Hynek Schlawack","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/attrs@25.3.0"}]},{"name":"urllib3","SPDXID":"SPDXRef-pypi-urllib3-2.5.0-75c946","versionInfo":"2.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"2019-2022, Pyodide contributors and Mozilla, Copyright (c) 2008-2020 Andrey Petrov and contributors, Copyright (c) 2019-2022, Pyodide contributors, Copyright 2019-2022, Pyodide contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/urllib3@2.5.0"}]},{"name":"pytest","SPDXID":"SPDXRef-pypi-pytest-6.2.5-75c946","versionInfo":"6.2.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2004-2020 Holger Krekel and others, Copyright (c) 2014, Gregory Boissinot, copyright 2015-2020, holger krekel and pytest-dev team, Copyright Holger Krekel and others, Copyright Holger Krekel and others, 2004-2021. Distributed","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest@6.2.5"}]},{"name":"packaging","SPDXID":"SPDXRef-pypi-packaging-25.0-75c946","versionInfo":"25.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 AND BSD-2-Clause","copyrightText":"Copyright (c) 2017-present Ofek Lev \u003coss@ofek.dev\u003e, Copyright (c) Donald Stufft and individual contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/packaging@25.0"}]},{"name":"transitions","SPDXID":"SPDXRef-pypi-transitions-0.9.2-75c946","versionInfo":"0.9.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copr https://img.shields.io/badge/dynamic/json?color, Copyright (c) 2014 - 2020 Tal Yarkoni, Alexander Neumann, Copyright (c) 2024 Tal Yarkoni, Alexander Neumann","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/transitions@0.9.2"}]},{"name":"idna","SPDXID":"SPDXRef-pypi-idna-3.10-75c946","versionInfo":"3.10","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause AND BSD-3-Clause","copyrightText":"(c) 2019 Unicode(r), Inc., Copyright (c) 2013-2024, Kim Davies and contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/idna@3.10"}]},{"name":"requests","SPDXID":"SPDXRef-pypi-requests-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/requests"}]},{"name":"pytest","SPDXID":"SPDXRef-pypi-pytest-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-11bd71901bbe5b1630ceea73d27597364c9af683-75c946","versionInfo":"11bd71901bbe5b1630ceea73d27597364c9af683","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-a26af69be951a213d495a4c3e4e4022e16d87065-75c946","versionInfo":"a26af69be951a213d495a4c3e4e4022e16d87065","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065"}]},{"name":"com.github.serverlessworkflow/sdk-python","SPDXID":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","versionInfo":"main","downloadLocation":"git+https://github.com/serverlessworkflow/sdk-python","filesAnalyzed":false,"licenseDeclared":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/serverlessworkflow/sdk-python@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-pytest-runner-5.3.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-pluggy-1.6.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-urllib3-2.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-pytest-6.2.5-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-idna-3.10-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-attrs-25.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-packaging-25.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-transitions-0.9.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-requests-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-six-1.17.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-certifi-2025.6.15-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-toml-0.10.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-jsonschema-4.4.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-pygraphviz-1.11-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-pyrsistent-0.20.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-py-1.11.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-iniconfig-2.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-pyyaml-6.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-charset-normalizer-3.4.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-pytest-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-11bd71901bbe5b1630ceea73d27597364c9af683-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-a26af69be951a213d495a4c3e4e4022e16d87065-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-pypi-requests-2.32.4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relatedSpdxElement":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-master-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-serverlessworkflow-sdk-python-main-8aa985","relationshipType":"DESCRIBES"}]}