{ "SPDXID": "SPDXRef-DOCUMENT", "name": "sbom-sha256:61cef043250aed282f53e839b9f1792f873475296148fa9b11b8155853b57cb8", "spdxVersion": "SPDX-2.3", "creationInfo": { "created": "2026-11-09T18:30:47Z", "creators": [ "Tool: apko (v1.4.18)", "Organization: Chainguard, Inc" ], "licenseListVersion": "3.27" }, "dataLicense": "CC0-1.0", "documentNamespace": "https://spdx.org/spdxdocs/apko/", "documentDescribes": [ "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f" ], "packages": [ { "SPDXID": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "name": "sha256:27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "versionInfo": "sha256:27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "filesAnalyzed": false, "description": "apko container image", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "CONTAINER", "checksums": [ { "algorithm": "SHA256", "checksumValue": "27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:oci/node@sha256:27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-ImageLayer-sha256-61cef043250aed282f53e839b9f1792f873475296148fa9b11b8155853b57cb8", "name": "sha256:61cef043250aed282f53e839b9f1792f873475296148fa9b11b8155853b57cb8", "versionInfo": "20230201", "filesAnalyzed": false, "description": "apko operating system layer", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "CONTAINER", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:oci/node@sha256:61cef043250aed282f53e839b9f1792f873475296148fa9b11b8155853b57cb8?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.layer.v1.tar%2Bgzip\u0026os=linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-OperatingSystem-wolfi", "name": "wolfi", "versionInfo": "20230201", "filesAnalyzed": false, "description": "Operating System", "downloadLocation": "NOASSERTION", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "OPERATING_SYSTEM" }, { "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7", "name": "wolfi-baselayout.yaml", "versionInfo": "ed415005c84750f03c4a9252137813734a224ae7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@ed415005c84750f03c4a9252137813734a224ae7#wolfi-baselayout.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-wolfi-baselayout-10b2691c19a945ed", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "baselayout data for Wolfi", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/wolfi-baselayout@20230201-r31?arch=aarch64\u0026origin=wolfi-baselayout", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout", "name": "wolfi-baselayout", "versionInfo": "20230201-r31", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0", "name": "ca-certificates.yaml", "versionInfo": "8061afafa65af5a9026707a8880e14120dd6f4a0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@8061afafa65af5a9026707a8880e14120dd6f4a0#ca-certificates.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0", "name": "alpine/ca-certificates", "versionInfo": "20261020", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://tarballs.cgr.dev/a/f7f6555663adc30d4e3c43a90ddef6942dabe93d06f7a7201cf29d993222346a-2058424fda70ee478bcce872dcf141a0c5499ee0.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/alpine%2Fca-certificates@20261020?vcs_url=git%2Bhttps:%2F%2Fgitlab.alpinelinux.org%2Falpine%2Fca-certificates%402058424fda70ee478bcce872dcf141a0c5499ee0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ca-certificates-bundle-39152a1ba5759050", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ca-certificates-bundle@20261020-r0?arch=aarch64\u0026origin=ca-certificates", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle", "name": "ca-certificates-bundle", "versionInfo": "20261020-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9", "name": "glibc-2.44.yaml", "versionInfo": "86ee3612cb47379928ac34ad99dfbfd45d138ff9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@86ee3612cb47379928ac34ad99dfbfd45d138ff9#glibc-2.44.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0", "name": "gnutools/glibc", "versionInfo": "c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/9390037ac2ec26cf74ce7c6709d852e0ce67205355e04fbdb9b9549f47a5bb40-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fglibc@c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fglibc.git%40c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-locale-posix-e2c2b3125b2659a5", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "POSIX locale data for glibc", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-locale-posix@2.44-r14?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix", "name": "glibc-2.44-locale-posix", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb", "name": "gcc.yaml", "versionInfo": "4d188060cbd00821a95f1ef60605da4817e781bb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@4d188060cbd00821a95f1ef60605da4817e781bb#gcc.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0", "name": "gnutools/gcc", "versionInfo": "releases/gcc-16.2.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "https://tarballs.cgr.dev/g/dc3e72361e36d33e861a0662815d63a4f1b8578521cc6935343a4aa87327bdec-78d4ac73dd391005b895a6148cd9831e28e1208b.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fgcc@releases%2Fgcc-16.2.0?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fgcc.git%4078d4ac73dd391005b895a6148cd9831e28e1208b", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libgcc-6f0563db807ae406", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "GCC runtime library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgcc@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libgcc", "name": "libgcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-2.44-r14", "name": "glibc-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-94bbc3326135f6b7", "name": "glibc-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "the GNU C library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44@2.44-r14?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44", "name": "glibc-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14", "name": "ld-linux-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-ld-linux-2.44-7fd0b6ac1f498b59", "name": "ld-linux-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "the GLIBC ELF interpreter", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ld-linux-2.44@2.44-r14?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44", "name": "ld-linux-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443", "name": "ncurses.yaml", "versionInfo": "57b90c0084b0bc101663cdfcaa44f4ce83312443", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@57b90c0084b0bc101663cdfcaa44f4ce83312443#ncurses.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0", "name": "ncurses-snapshots", "versionInfo": "v6_6_20261107", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ThomasDickey/ncurses-snapshots/archive/7404b376832583182c52722dc09d86b8675db375.tar.gz", "originator": "Organization: Thomasdickey", "supplier": "Organization: Thomasdickey", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/thomasdickey/ncurses-snapshots@v6_6_20261107", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ncurses-terminfo-base-d4376d4149bf9b00", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "descriptions of common terminals", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses-terminfo-base@6.6.20261107-r0?arch=aarch64\u0026origin=ncurses", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base", "name": "ncurses-terminfo-base", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ncurses-fe6e9d338447068c", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "console display library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:ncurses:6.6.20261107:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ncurses@6.6.20261107-r0?arch=aarch64\u0026origin=ncurses", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ncurses", "name": "ncurses", "versionInfo": "6.6.20261107-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-bash-5.3-r14", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa", "name": "bash.yaml", "versionInfo": "ac7b15dc2695924986372a27cd7d6c4e029c5efa", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@ac7b15dc2695924986372a27cd7d6c4e029c5efa#bash.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0", "name": "git/bash", "versionInfo": "bash-5.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/0e7c34c3027d7f6da5723ac0c18a27c10a29ce56d560c36969b71020e9407623-b8c60bc9ca365f8261fa97900b6fa939f6ebc303.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fbash@bash-5.3?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fbash.git%40b8c60bc9ca365f8261fa97900b6fa939f6ebc303", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-bash-8fcfdb8c2df1d6c6", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU bourne again shell", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/bash@5.3-r14?arch=aarch64\u0026origin=bash", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-bash", "name": "bash", "versionInfo": "5.3-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "name": "libstdc++", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libstdc---d49b493ee2e3bbae", "name": "libstdc++", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libstdc--", "name": "libstdc++", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/zlib@1.3.2.1_rc20260921-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.2.1_rc20260921:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-zlib.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "zlib.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#zlib.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-madler-zlib-develop-767c4c947852e143f582c85f14cf573411df1b35-0", "name": "zlib", "versionInfo": "767c4c947852e143f582c85f14cf573411df1b35", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://github.com/madler/zlib/archive/767c4c947852e143f582c85f14cf573411df1b35.tar.gz", "originator": "Organization: Madler", "supplier": "Organization: Madler", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/madler/zlib@767c4c947852e143f582c85f14cf573411df1b35", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-zlib-1dd8dbeab0faefff", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "description": "a library implementing the zlib compression algorithms", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.2.1_rc20260921-r2:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/zlib@1.3.2.1_rc20260921-r2?arch=aarch64\u0026origin=zlib", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-zlib", "name": "zlib", "versionInfo": "1.3.2.1_rc20260921-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libzstd1-1.5.7-r13", "name": "libzstd1", "versionInfo": "1.5.7-r13", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libzstd1@1.5.7-r13?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-zstd.yaml-0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7", "name": "zstd.yaml", "versionInfo": "0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7#zstd.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-facebook-zstd-v1.5.7-f8745da6ff1ad1e7bab384bd1f9d742439278e99-0", "name": "zstd", "versionInfo": "v1.5.7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause AND GPL-2.0-only", "downloadLocation": "https://github.com/facebook/zstd/archive/f8745da6ff1ad1e7bab384bd1f9d742439278e99.tar.gz", "originator": "Organization: Facebook", "supplier": "Organization: Facebook", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/facebook/zstd@v1.5.7", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libzstd1-cecd9c4f8a1f1ddf", "name": "libzstd1", "versionInfo": "1.5.7-r13", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(BSD-2-Clause AND GPL-2.0-only)", "description": "libzstd runtime libraries", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libzstd1@1.5.7-r13?arch=aarch64\u0026origin=zstd", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libzstd1", "name": "libzstd1", "versionInfo": "1.5.7-r13", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-binutils-2.47-r3", "name": "binutils", "versionInfo": "2.47-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/binutils@2.47-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-binutils.yaml-4d188060cbd00821a95f1ef60605da4817e781bb", "name": "binutils.yaml", "versionInfo": "4d188060cbd00821a95f1ef60605da4817e781bb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@4d188060cbd00821a95f1ef60605da4817e781bb#binutils.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-gnutools-binutils-gdb.git-binutils-2C9547-6ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32-0", "name": "gnutools/binutils-gdb", "versionInfo": "binutils-2_47", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0", "downloadLocation": "https://tarballs.cgr.dev/g/17778ed923e473efcee78a06924800d851c2acb832e469ef63e7301bb6eb43c1-6ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gnutools%2Fbinutils-gdb@binutils-2_47?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Fgnutools%2Fbinutils-gdb.git%406ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-binutils-1e8a1ecfca898ef1", "name": "binutils", "versionInfo": "2.47-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "description": "GNU binutils", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:binutils:2.47-r3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/binutils@2.47-r3?arch=aarch64\u0026origin=binutils", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-binutils", "name": "binutils", "versionInfo": "2.47-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518", "name": "libxcrypt.yaml", "versionInfo": "b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518#libxcrypt.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0", "name": "libxcrypt", "versionInfo": "v4.5.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "https://github.com/besser82/libxcrypt/archive/db70b42bd7b2a5b00a8580c8dec0aa66791c950a.tar.gz", "originator": "Organization: Besser82", "supplier": "Organization: Besser82", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/besser82/libxcrypt@v4.5.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-673cf320fa080268", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.1-or-later)", "description": "Modern library for one-way hashing of passwords", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt@4.5.2-r8?arch=aarch64\u0026origin=libxcrypt", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libxcrypt", "name": "libxcrypt", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8", "name": "libxcrypt-dev", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt-dev@4.5.2-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libxcrypt-dev-8c2338cb2aa23912", "name": "libxcrypt-dev", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.1-or-later)", "description": "libxcrypt dev", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libxcrypt-dev@4.5.2-r8?arch=aarch64\u0026origin=libxcrypt", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libxcrypt-dev", "name": "libxcrypt-dev", "versionInfo": "4.5.2-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-linux-headers-7.3.3-r0", "name": "linux-headers", "versionInfo": "7.3.3-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only WITH Linux-syscall-note", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/linux-headers@7.3.3-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-linux-headers.yaml-eeddf20cbd03c0444c2f0ff756eaf232fd6e6954", "name": "linux-headers.yaml", "versionInfo": "eeddf20cbd03c0444c2f0ff756eaf232fd6e6954", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@eeddf20cbd03c0444c2f0ff756eaf232fd6e6954#linux-headers.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-gregkh-linux-v7.3.3-d50d994bffa3c7c6db2d8bc4c5f0c55e3f46b0cd-0", "name": "linux", "versionInfo": "v7.3.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only WITH Linux-syscall-note", "downloadLocation": "https://github.com/gregkh/linux/archive/d50d994bffa3c7c6db2d8bc4c5f0c55e3f46b0cd.tar.gz", "originator": "Organization: Gregkh", "supplier": "Organization: Gregkh", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/gregkh/linux@v7.3.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-linux-headers-fff820186b196074", "name": "linux-headers", "versionInfo": "7.3.3-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-only WITH Linux-syscall-note)", "description": "the Linux kernel headers (cross compilation)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/linux-headers@7.3.3-r0?arch=aarch64\u0026origin=linux-headers", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-linux-headers", "name": "linux-headers", "versionInfo": "7.3.3-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r14", "name": "glibc-2.44-dev", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-dev@2.44-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-glibc-2.44-dev-76ca689b69148c48", "name": "glibc-2.44-dev", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "GLIBC development headers", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/glibc-2.44-dev@2.44-r14?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-glibc-2.44-dev", "name": "glibc-2.44-dev", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libquadmath-16.2.0-r3", "name": "libquadmath", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libquadmath@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libquadmath-eced2a8c338f6266", "name": "libquadmath", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "128-bit math library provided by GCC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libquadmath@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libquadmath", "name": "libquadmath", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3", "name": "libstdc++-dev", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B-dev@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libstdc---dev-9471f042b8187882", "name": "libstdc++-dev", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libstdc%2B%2B-dev@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libstdc---dev", "name": "libstdc++-dev", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssf-compiler-options-20250904-r12", "name": "openssf-compiler-options", "versionInfo": "20250904-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-BY-4.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssf-compiler-options@20250904-r12?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssf-compiler-options.yaml-4d188060cbd00821a95f1ef60605da4817e781bb", "name": "openssf-compiler-options.yaml", "versionInfo": "4d188060cbd00821a95f1ef60605da4817e781bb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@4d188060cbd00821a95f1ef60605da4817e781bb#openssf-compiler-options.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssf-compiler-options-210ef94615c3fa51", "name": "openssf-compiler-options", "versionInfo": "20250904-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-BY-4.0", "description": "Compiler Options Hardening Guide for C and C++", "downloadLocation": "https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssf-compiler-options@20250904-r12?arch=aarch64\u0026origin=openssf-compiler-options", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssf-compiler-options", "name": "openssf-compiler-options", "versionInfo": "20250904-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-posix-cc-wrappers-2-r10", "name": "posix-cc-wrappers", "versionInfo": "2-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/posix-cc-wrappers@2-r10?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-posix-cc-wrappers.yaml-2337ebe7af4495f2fe254da240c747c753c2f87c", "name": "posix-cc-wrappers.yaml", "versionInfo": "2337ebe7af4495f2fe254da240c747c753c2f87c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@2337ebe7af4495f2fe254da240c747c753c2f87c#posix-cc-wrappers.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-posix-cc-wrappers-632bd7516159d11f", "name": "posix-cc-wrappers", "versionInfo": "2-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Wrappers around GCC and Clang for POSIX conformance", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/posix-cc-wrappers@2-r10?arch=aarch64\u0026origin=posix-cc-wrappers", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-posix-cc-wrappers", "name": "posix-cc-wrappers", "versionInfo": "2-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libatomic-16.2.0-r3", "name": "libatomic", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libatomic@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libatomic-e813bd19ce98ec2c", "name": "libatomic", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "GCC atomic library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libatomic@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libatomic", "name": "libatomic", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-gmp-6.3.0-r12", "name": "gmp", "versionInfo": "6.3.0-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gmp@6.3.0-r12?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-gmp.yaml-443eb31899638f2f252b0e587db298058036ba64", "name": "gmp.yaml", "versionInfo": "443eb31899638f2f252b0e587db298058036ba64", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@443eb31899638f2f252b0e587db298058036ba64#gmp.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gmp-6.3.0-0", "name": "gmp", "versionInfo": "6.3.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "https://ftp.gnu.org/gnu/gmp/gmp-6.3.0.tar.xz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "checksums": [ { "algorithm": "SHA256", "checksumValue": "a3c2b80201b89e68616f4ad30bc66aee4927c3ce50e33929ca819d5c43538898" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/gmp@6.3.0?checksum=sha256:a3c2b80201b89e68616f4ad30bc66aee4927c3ce50e33929ca819d5c43538898\u0026download_url=https:%2F%2Fftp.gnu.org%2Fgnu%2Fgmp%2Fgmp-6.3.0.tar.xz", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-gmp-d6ad0f29a7de0f81", "name": "gmp", "versionInfo": "6.3.0-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later)", "description": "a library for arbitrary precision arithmetic", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gmp@6.3.0-r12?arch=aarch64\u0026origin=gmp", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-gmp", "name": "gmp", "versionInfo": "6.3.0-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libgomp-16.2.0-r3", "name": "libgomp", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgomp@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libgomp-125fda46fec4bf7c", "name": "libgomp", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "GNU parallel programming library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libgomp@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libgomp", "name": "libgomp", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-isl-0.28-r6", "name": "isl", "versionInfo": "0.28-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/isl@0.28-r6?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-isl.yaml-443eb31899638f2f252b0e587db298058036ba64", "name": "isl.yaml", "versionInfo": "443eb31899638f2f252b0e587db298058036ba64", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@443eb31899638f2f252b0e587db298058036ba64#isl.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-repo.or.cz-isl.git-isl-0.28-6c2b19a0405759f4d31bf48b73492be4a2b1d813-0", "name": "isl", "versionInfo": "isl-0.28", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://tarballs.cgr.dev/i/8732b02bd9fa0d40b2a4149d543eee9ceb5b0634050f6313b8a5b953dcdc54c9-6c2b19a0405759f4d31bf48b73492be4a2b1d813.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/isl@isl-0.28?vcs_url=git%2Bhttps:%2F%2Frepo.or.cz%2Fisl.git%406c2b19a0405759f4d31bf48b73492be4a2b1d813", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-isl-8d545a41d55d54ef", "name": "isl", "versionInfo": "0.28-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "an integer set library for the polyhedral model", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/isl@0.28-r6?arch=aarch64\u0026origin=isl", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-isl", "name": "isl", "versionInfo": "0.28-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-mpfr-4.2.2-r5", "name": "mpfr", "versionInfo": "4.2.2-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpfr@4.2.2-r5?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-mpfr.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "mpfr.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#mpfr.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.inria.fr-mpfr-mpfr.git-4.2.2-eaa57b856d814af32f97d5e5eb129fb986235323-0", "name": "mpfr/mpfr", "versionInfo": "4.2.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/m/72f92a77f14c1d6bab90d8ccf97b5b4f95edc8da48ac5db7fcef83176097d756-eaa57b856d814af32f97d5e5eb129fb986235323.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/mpfr%2Fmpfr@4.2.2?vcs_url=git%2Bhttps:%2F%2Fgitlab.inria.fr%2Fmpfr%2Fmpfr.git%40eaa57b856d814af32f97d5e5eb129fb986235323", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-mpfr-c34be4c04688944b", "name": "mpfr", "versionInfo": "4.2.2-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "description": "multiple-precision floating-point library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpfr@4.2.2-r5?arch=aarch64\u0026origin=mpfr", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-mpfr", "name": "mpfr", "versionInfo": "4.2.2-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-mpc-1.4.1-r3", "name": "mpc", "versionInfo": "1.4.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpc@1.4.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-mpc.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "mpc.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#mpc.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.inria.fr-mpc-mpc.git-1.4.1-532a18ae8222f928c58f7ffd1b4f0122062172bd-0", "name": "mpc/mpc", "versionInfo": "1.4.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/m/c0ad7a07c1e591222c3671fc81ecf35e2d040219fdd07e0f939196a38dc98d5e-532a18ae8222f928c58f7ffd1b4f0122062172bd.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/mpc%2Fmpc@1.4.1?vcs_url=git%2Bhttps:%2F%2Fgitlab.inria.fr%2Fmpc%2Fmpc.git%40532a18ae8222f928c58f7ffd1b4f0122062172bd", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-mpc-930fd1d45bf5075e", "name": "mpc", "versionInfo": "1.4.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-3.0-or-later", "description": "multiple-precision C library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpc@1.4.1-r3?arch=aarch64\u0026origin=mpc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-mpc", "name": "mpc", "versionInfo": "1.4.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-gcc-16.2.0-r3", "name": "gcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later WITH GCC-exception-3.1", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gcc@16.2.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-gcc-0e6e3694b0231f23", "name": "gcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later WITH GCC-exception-3.1)", "description": "the GNU compiler collection", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:gcc:16.2.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gcc@16.2.0-r3?arch=aarch64\u0026origin=gcc", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-gcc", "name": "gcc", "versionInfo": "16.2.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-make-4.4.1-r15", "name": "make", "versionInfo": "4.4.1-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/make@4.4.1-r15?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-make.yaml-a54c6ffd90cbe4bb3ea62488789234b189e71bd5", "name": "make.yaml", "versionInfo": "a54c6ffd90cbe4bb3ea62488789234b189e71bd5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a54c6ffd90cbe4bb3ea62488789234b189e71bd5#make.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-make.git-4.4.1-d66a65ad5a0e31b287f53930b0f09e31801f1613-0", "name": "git/make", "versionInfo": "4.4.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/8614f9e29422f1dfe08dfec0a56b1ac7f4cdce15fd17f169e95128edd68e6ba6-d66a65ad5a0e31b287f53930b0f09e31801f1613.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fmake@4.4.1?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fmake.git%40d66a65ad5a0e31b287f53930b0f09e31801f1613", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-make-5690278a28233d1e", "name": "make", "versionInfo": "4.4.1-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU make", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/make@4.4.1-r15?arch=aarch64\u0026origin=make", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-make", "name": "make", "versionInfo": "4.4.1-r15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-pkgconf-3.0.10-r2", "name": "pkgconf", "versionInfo": "3.0.10-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/pkgconf@3.0.10-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-pkgconf.yaml-40e94215f5dcd578d6e737bd1b126cdbb5acf9cb", "name": "pkgconf.yaml", "versionInfo": "40e94215f5dcd578d6e737bd1b126cdbb5acf9cb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@40e94215f5dcd578d6e737bd1b126cdbb5acf9cb#pkgconf.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-pkgconf-pkgconf-pkgconf-3.0.10-511e6e6b8c82367e75d02edb56ad98da766e06b6-0", "name": "pkgconf", "versionInfo": "pkgconf-3.0.10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "downloadLocation": "https://github.com/pkgconf/pkgconf/archive/511e6e6b8c82367e75d02edb56ad98da766e06b6.tar.gz", "originator": "Organization: Pkgconf", "supplier": "Organization: Pkgconf", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/pkgconf/pkgconf@pkgconf-3.0.10", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-pkgconf-6f387a3bcd6a4956", "name": "pkgconf", "versionInfo": "3.0.10-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "An implementation of pkg-config", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/pkgconf@3.0.10-r2?arch=aarch64\u0026origin=pkgconf", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-pkgconf", "name": "pkgconf", "versionInfo": "3.0.10-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-build-base-1-r10", "name": "build-base", "versionInfo": "1-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/build-base@1-r10?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-build-base.yaml-fc2e1e90888cd6bc7249d14081f49118edd5dab7", "name": "build-base.yaml", "versionInfo": "fc2e1e90888cd6bc7249d14081f49118edd5dab7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@fc2e1e90888cd6bc7249d14081f49118edd5dab7#build-base.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-build-base-156943bbea3d824c", "name": "build-base", "versionInfo": "1-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "virtual package for builds", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/build-base@1-r10?arch=aarch64\u0026origin=build-base", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-build-base", "name": "build-base", "versionInfo": "1-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14", "name": "libcrypt1-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r14?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcrypt1-2.44-07e91cda91134f6e", "name": "libcrypt1-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LGPL-2.1-or-later", "description": "Password hashing library included with glibc", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:gnu:glibc:2.44-r14:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcrypt1-2.44@2.44-r14?arch=aarch64\u0026origin=glibc-2.44", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44", "name": "libcrypt1-2.44", "versionInfo": "2.44-r14", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-busybox-1.38.0-r3", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b", "name": "busybox.yaml", "versionInfo": "59d45eb49286129d8d21b2469befa3b55be4719b", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@59d45eb49286129d8d21b2469befa3b55be4719b#busybox.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0", "name": "busybox_mirror", "versionInfo": "1_38_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "downloadLocation": "https://github.com/vda-linux/busybox_mirror/archive/fc71374dfccd46448c62947269a35f1420d7ee28.tar.gz", "originator": "Organization: Vda-Linux", "supplier": "Organization: Vda-Linux", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/vda-linux/busybox_mirror@1_38_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-busybox-3debcaeac335b503", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-only", "description": "swiss-army knife for embedded systems", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/busybox@1.38.0-r3?arch=aarch64\u0026origin=busybox", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-busybox", "name": "busybox", "versionInfo": "1.38.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-c-ares-1.34.9-r0", "name": "c-ares", "versionInfo": "1.34.9-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/c-ares@1.34.9-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-c-ares.yaml-af6b55f0eea2dce5a488569d02ea2c396f46effd", "name": "c-ares.yaml", "versionInfo": "af6b55f0eea2dce5a488569d02ea2c396f46effd", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@af6b55f0eea2dce5a488569d02ea2c396f46effd#c-ares.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-c-ares-c-ares-v1.34.9-bc91829cce983a35ec01f5dbc05465858a3df469-0", "name": "c-ares", "versionInfo": "v1.34.9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/c-ares/c-ares/archive/bc91829cce983a35ec01f5dbc05465858a3df469.tar.gz", "originator": "Organization: C-Ares", "supplier": "Organization: C-Ares", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/c-ares/c-ares@v1.34.9", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-c-ares-e97328716bcafcaa", "name": "c-ares", "versionInfo": "1.34.9-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "an asynchronous DNS resolution library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/c-ares@1.34.9-r0?arch=aarch64\u0026origin=c-ares", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-c-ares", "name": "c-ares", "versionInfo": "1.34.9-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-provider-legacy-allowed@4.1.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssl-provider-legacy-allowed.yaml-aeae4801330be6fd269d5ed5640dc37b58ccab09", "name": "openssl-provider-legacy-allowed.yaml", "versionInfo": "aeae4801330be6fd269d5ed5640dc37b58ccab09", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@aeae4801330be6fd269d5ed5640dc37b58ccab09#openssl-provider-legacy-allowed.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.1.0-2f4e3a5fec05394068cfa7379890ab552483a8a6-0", "name": "openssl", "versionInfo": "openssl-4.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "https://github.com/openssl/openssl/archive/2f4e3a5fec05394068cfa7379890ab552483a8a6.tar.gz", "originator": "Organization: Openssl", "supplier": "Organization: Openssl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openssl/openssl@openssl-4.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-db13521aee4e9c16", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "Chainguard Legacy Allowed FIPS 140-3 I.G. 2.4.A Provider", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-provider-legacy-allowed@4.1.0-r0?arch=aarch64\u0026origin=openssl-provider-legacy-allowed", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed", "name": "openssl-provider-legacy-allowed", "versionInfo": "4.1.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlicommon1@1.2.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "name": "brotli.yaml", "versionInfo": "f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3#brotli.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0", "name": "brotli", "versionInfo": "v1.2.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/google/brotli/archive/db24a98aed38a16de78cc05ca15cdd8dc2a0d92d.tar.gz", "originator": "Organization: Google", "supplier": "Organization: Google", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/google/brotli@v1.2.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlicommon1-4cfba742c9bc8e0d", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlicommon1@1.2.1-r3?arch=aarch64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1", "name": "libbrotlicommon1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlidec1@1.2.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlidec1-7682b7a41fbe0c53", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlidec1@1.2.1-r3?arch=aarch64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlidec1", "name": "libbrotlidec1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlienc1@1.2.1-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbrotlienc1-9032cd875fed45d9", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbrotlienc1@1.2.1-r3?arch=aarch64\u0026origin=brotli", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbrotlienc1", "name": "libbrotlienc1", "versionInfo": "1.2.1-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libcrypto@4.0.3-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f", "name": "openssl-4.0.yaml", "versionInfo": "53fb2f6751f832fa61ddba06cb8a40dbba5f409f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@53fb2f6751f832fa61ddba06cb8a40dbba5f409f#openssl-4.0.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0", "name": "openssl", "versionInfo": "openssl-4.0.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "https://github.com/openssl/openssl/archive/af1775b60dfa141a4ad762585052cabeb9f37e9e.tar.gz", "originator": "Organization: Openssl", "supplier": "Organization: Openssl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openssl/openssl@openssl-4.0.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libcrypto-12ff2dbbb7bfc81c", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "OpenSSL libcrypto library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3-r8:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libcrypto@4.0.3-r8?arch=aarch64\u0026origin=openssl-4.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto", "name": "openssl-4.0-libcrypto", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-gdbm-1.26-r9", "name": "gdbm", "versionInfo": "1.26-r9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gdbm@1.26-r9?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-gdbm.yaml-443eb31899638f2f252b0e587db298058036ba64", "name": "gdbm.yaml", "versionInfo": "443eb31899638f2f252b0e587db298058036ba64", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@443eb31899638f2f252b0e587db298058036ba64#gdbm.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-gdbm.git-v1.26-8ca8f03ab6cc125139a395ec2d522aebb15f8060-0", "name": "git/gdbm", "versionInfo": "v1.26", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/42740bd9e1a78209c3c68f439ab4397c34f0ed77c165a024d710bdd48e76d1df-8ca8f03ab6cc125139a395ec2d522aebb15f8060.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fgdbm@v1.26?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Fgdbm.git%408ca8f03ab6cc125139a395ec2d522aebb15f8060", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-gdbm-7c71982fcefc1584", "name": "gdbm", "versionInfo": "1.26-r9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU dbm is a set of database routines which use extensible hashing", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/gdbm@1.26-r9?arch=aarch64\u0026origin=gdbm", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-gdbm", "name": "gdbm", "versionInfo": "1.26-r9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "name": "lmdb", "versionInfo": "0.9.35-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/lmdb@0.9.35-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-lmdb.yaml-a4a523651db588c0ec27f7880438828e0eefec5a", "name": "lmdb.yaml", "versionInfo": "a4a523651db588c0ec27f7880438828e0eefec5a", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a4a523651db588c0ec27f7880438828e0eefec5a#lmdb.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-LMDB-lmdb.git-LMDBC950.9.35-69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c-0", "name": "lmdb", "versionInfo": "LMDB_0.9.35", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "https://github.com/LMDB/lmdb/archive/69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c.tar.gz", "originator": "Organization: Lmdb", "supplier": "Organization: Lmdb", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/lmdb/lmdb@LMDB_0.9.35", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-lmdb-6e9b5be743f2a982", "name": "lmdb", "versionInfo": "0.9.35-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "description": "Lightning Memory-Mapped Database", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/lmdb@0.9.35-r3?arch=aarch64\u0026origin=lmdb", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-lmdb", "name": "lmdb", "versionInfo": "0.9.35-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-readline-8.3-r3", "name": "readline", "versionInfo": "8.3-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/readline@8.3-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-readline.yaml-20a5359ac0a7a6aca23efa343f0f29c8d3ea1453", "name": "readline.yaml", "versionInfo": "20a5359ac0a7a6aca23efa343f0f29c8d3ea1453", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@20a5359ac0a7a6aca23efa343f0f29c8d3ea1453#readline.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-git.savannah.gnu.org-git-readline.git-readline-8.3-447b8290b3e2e2d117dc8e9cdb83b0dc6448a638-0", "name": "git/readline", "versionInfo": "readline-8.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/ca1544b7a4361c29393002e6b6d7b40cf760179801b69a5c375d2d2ed53e109a-447b8290b3e2e2d117dc8e9cdb83b0dc6448a638.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Freadline@readline-8.3?vcs_url=git%2Bhttps:%2F%2Fgit.savannah.gnu.org%2Fgit%2Freadline.git%40447b8290b3e2e2d117dc8e9cdb83b0dc6448a638", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-readline-ce2ac74b9aec712c", "name": "readline", "versionInfo": "8.3-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "GNU readline library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/readline@8.3-r3?arch=aarch64\u0026origin=readline", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-readline", "name": "readline", "versionInfo": "8.3-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "name": "sqlite-libs", "versionInfo": "3.54.1-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "blessing", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/sqlite-libs@3.54.1-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-sqlite.yaml-b0ca8c95606371be2557980059c10b34df30fa9f", "name": "sqlite.yaml", "versionInfo": "b0ca8c95606371be2557980059c10b34df30fa9f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b0ca8c95606371be2557980059c10b34df30fa9f#sqlite.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-sqlite-3.54.1-0", "name": "sqlite", "versionInfo": "3.54.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "https://www.sqlite.org/2026/sqlite-src-3540100.zip", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "checksums": [ { "algorithm": "SHA256", "checksumValue": "387e7f6cad4797b17848c07d453dc6606917bb356a6cfe5a3abafd38c240c71b" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/sqlite@3.54.1?checksum=sha256:387e7f6cad4797b17848c07d453dc6606917bb356a6cfe5a3abafd38c240c71b\u0026download_url=https:%2F%2Fwww.sqlite.org%2F2026%2Fsqlite-src-3540100.zip", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-sqlite-libs-5fc3c1d467f94c6d", "name": "sqlite-libs", "versionInfo": "3.54.1-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "blessing", "description": "sqlite library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/sqlite-libs@3.54.1-r0?arch=aarch64\u0026origin=sqlite", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-sqlite-libs", "name": "sqlite-libs", "versionInfo": "3.54.1-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "name": "heimdal-libs", "versionInfo": "7.8.0-r55", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/heimdal-libs@7.8.0-r55?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-heimdal.yaml-98d0e0fa47c531020de219448a43d120a8c0360a", "name": "heimdal.yaml", "versionInfo": "98d0e0fa47c531020de219448a43d120a8c0360a", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@98d0e0fa47c531020de219448a43d120a8c0360a#heimdal.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-heimdal-heimdal-heimdal-7.8.0-a6cf94577c0d1e5bca5304342e4ddffb18255afe-0", "name": "heimdal", "versionInfo": "heimdal-7.8.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "https://github.com/heimdal/heimdal/archive/a6cf94577c0d1e5bca5304342e4ddffb18255afe.tar.gz", "originator": "Organization: Heimdal", "supplier": "Organization: Heimdal", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/heimdal/heimdal@heimdal-7.8.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-heimdal-libs-6466eb5bb4aa80c4", "name": "heimdal-libs", "versionInfo": "7.8.0-r55", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "libraries shipped by heimdal", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/heimdal-libs@7.8.0-r55?arch=aarch64\u0026origin=heimdal", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-heimdal-libs", "name": "heimdal-libs", "versionInfo": "7.8.0-r55", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "name": "cyrus-sasl-heimdal-libs", "versionInfo": "2.1.28-r58", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/cyrus-sasl-heimdal-libs@2.1.28-r58?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-cyrus-sasl-heimdal.yaml-6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78", "name": "cyrus-sasl-heimdal.yaml", "versionInfo": "6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78#cyrus-sasl-heimdal.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-cyrusimap-cyrus-sasl.git-cyrus-sasl-2.1.28-7a6b45b177070198fed0682bea5fa87c18abb084-0", "name": "cyrus-sasl", "versionInfo": "cyrus-sasl-2.1.28", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "https://github.com/cyrusimap/cyrus-sasl/archive/7a6b45b177070198fed0682bea5fa87c18abb084.tar.gz", "originator": "Organization: Cyrusimap", "supplier": "Organization: Cyrusimap", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/cyrusimap/cyrus-sasl@cyrus-sasl-2.1.28", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-fb4ec8f36333762d", "name": "cyrus-sasl-heimdal-libs", "versionInfo": "2.1.28-r58", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "Shared libraries for cyrus-sasl-heimdal", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/cyrus-sasl-heimdal-libs@2.1.28-r58?arch=aarch64\u0026origin=cyrus-sasl-heimdal", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-cyrus-sasl-heimdal-libs", "name": "cyrus-sasl-heimdal-libs", "versionInfo": "2.1.28-r58", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-krb5-conf-1.0-r10", "name": "krb5-conf", "versionInfo": "1.0-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-conf@1.0-r10?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-krb5-conf.yaml-f0f4cc5b0d900deaf94dfdcd841e289db97111e1", "name": "krb5-conf.yaml", "versionInfo": "f0f4cc5b0d900deaf94dfdcd841e289db97111e1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f0f4cc5b0d900deaf94dfdcd841e289db97111e1#krb5-conf.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-krb5-conf-b4e1ca5d34e15b9e", "name": "krb5-conf", "versionInfo": "1.0-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Shared krb5.conf for both MIT krb5 and heimdal", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-conf@1.0-r10?arch=aarch64\u0026origin=krb5-conf", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-krb5-conf", "name": "krb5-conf", "versionInfo": "1.0-r10", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "name": "libcom_err", "versionInfo": "1.47.4-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcom_err@1.47.4-r5?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-e2fsprogs.yaml-b89fefe984e6541788116bd15d4f8dce3dc021a9", "name": "e2fsprogs.yaml", "versionInfo": "b89fefe984e6541788116bd15d4f8dce3dc021a9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b89fefe984e6541788116bd15d4f8dce3dc021a9#e2fsprogs.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-tytso-e2fsprogs-v1.47.4-7ee1d505ef3b37831215f490411f346fe57e9053-0", "name": "e2fsprogs", "versionInfo": "v1.47.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT", "downloadLocation": "https://github.com/tytso/e2fsprogs/archive/7ee1d505ef3b37831215f490411f346fe57e9053.tar.gz", "originator": "Organization: Tytso", "supplier": "Organization: Tytso", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/tytso/e2fsprogs@v1.47.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcom-err-1abd12a37cdb1a36", "name": "libcom_err", "versionInfo": "1.47.4-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)", "description": "Common error description library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcom_err@1.47.4-r5?arch=aarch64\u0026origin=e2fsprogs", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcom-err", "name": "libcom_err", "versionInfo": "1.47.4-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "name": "keyutils-libs", "versionInfo": "1.6.3-r41", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/keyutils-libs@1.6.3-r41?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-keyutils.yaml-014624f79627768df6f5ff49f4265a7057c2e206", "name": "keyutils.yaml", "versionInfo": "014624f79627768df6f5ff49f4265a7057c2e206", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@014624f79627768df6f5ff49f4265a7057c2e206#keyutils.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-linux-kernel-git-dhowells-keyutils.git-v1.6.3-cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3-0", "name": "pub/scm/linux/kernel/git/dhowells/keyutils", "versionInfo": "v1.6.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/p/c4263df0120f9cbea0297c9b6574d5bafd566f98b9cec2e39be1c0e378836781-cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/pub%2Fscm%2Flinux%2Fkernel%2Fgit%2Fdhowells%2Fkeyutils@v1.6.3?vcs_url=git%2Bhttps:%2F%2Fkernel.googlesource.com%2Fpub%2Fscm%2Flinux%2Fkernel%2Fgit%2Fdhowells%2Fkeyutils.git%40cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-keyutils-libs-3f2a0f44e7289356", "name": "keyutils-libs", "versionInfo": "1.6.3-r41", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-2.0-or-later)", "description": "keyutils library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/keyutils-libs@1.6.3-r41?arch=aarch64\u0026origin=keyutils", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-keyutils-libs", "name": "keyutils-libs", "versionInfo": "1.6.3-r41", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libssl@4.0.3-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-apk-openssl-4.0-libssl-120767333b011958", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "OpenSSL libssl library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:openssl:openssl:4.0.3-r8:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/openssl-4.0-libssl@4.0.3-r8?arch=aarch64\u0026origin=openssl-4.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl", "name": "openssl-4.0-libssl", "versionInfo": "4.0.3-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libverto-0.3.2-r11", "name": "libverto", "versionInfo": "0.3.2-r11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libverto@0.3.2-r11?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libverto.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "libverto.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#libverto.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-latchset-libverto-0.3.2-1e8f574f702f270d96e42348e7cc088da5acc9ae-0", "name": "libverto", "versionInfo": "0.3.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/latchset/libverto/archive/1e8f574f702f270d96e42348e7cc088da5acc9ae.tar.gz", "originator": "Organization: Latchset", "supplier": "Organization: Latchset", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/latchset/libverto@0.3.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libverto-5541cdf6b32b3e46", "name": "libverto", "versionInfo": "0.3.2-r11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Main loop abstraction library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libverto@0.3.2-r11?arch=aarch64\u0026origin=libverto", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libverto", "name": "libverto", "versionInfo": "0.3.2-r11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "name": "krb5-libs", "versionInfo": "1.22.2-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-libs@1.22.2-r6?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-krb5.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2", "name": "krb5.yaml", "versionInfo": "d8c1739b8ac0376433f810660cfe5c19987e66d2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@d8c1739b8ac0376433f810660cfe5c19987e66d2#krb5.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-krb5-krb5.git-krb5-1.22.2-final-8570e77819563e036027e1da789d08ec9333ed4d-0", "name": "krb5", "versionInfo": "krb5-1.22.2-final", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/krb5/krb5/archive/8570e77819563e036027e1da789d08ec9333ed4d.tar.gz", "originator": "Organization: Krb5", "supplier": "Organization: Krb5", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/krb5/krb5@krb5-1.22.2-final", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-krb5-libs-55983142037434b6", "name": "krb5-libs", "versionInfo": "1.22.2-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "The shared libraries used by Kerberos 5", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/krb5-libs@1.22.2-r6?arch=aarch64\u0026origin=krb5", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-krb5-libs", "name": "krb5-libs", "versionInfo": "1.22.2-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libunistring-1.5-r1", "name": "libunistring", "versionInfo": "1.5-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libunistring@1.5-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libunistring.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2", "name": "libunistring.yaml", "versionInfo": "d8c1739b8ac0376433f810660cfe5c19987e66d2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@d8c1739b8ac0376433f810660cfe5c19987e66d2#libunistring.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-https.git.savannah.gnu.org-git-libunistring.git-v1.5-9a0b11a515258048ba17f05009cbd317298de92d-0", "name": "git/libunistring", "versionInfo": "v1.5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/g/8647b56477282eff9978402011260dd5cf99ea235db78088a35a84c76d6356c8-9a0b11a515258048ba17f05009cbd317298de92d.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Flibunistring@v1.5?vcs_url=git%2Bhttps:%2F%2Fhttps.git.savannah.gnu.org%2Fgit%2Flibunistring.git%409a0b11a515258048ba17f05009cbd317298de92d", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libunistring-c217a539699bc978", "name": "libunistring", "versionInfo": "1.5-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later)", "description": "Library for manipulating Unicode strings and C strings", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libunistring@1.5-r1?arch=aarch64\u0026origin=libunistring", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libunistring", "name": "libunistring", "versionInfo": "1.5-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "name": "libidn2", "versionInfo": "2.3.8-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libidn2@2.3.8-r12?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libidn2.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "libidn2.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#libidn2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-gitlab.com-libidn-libidn2-v2.3.8-9bc3ac79e2ae81ade245a0e308bf13c981efaa83-0", "name": "libidn/libidn2", "versionInfo": "v2.3.8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND LGPL-3.0-or-later", "downloadLocation": "https://tarballs.cgr.dev/l/647ec517d7d5a099d6182bc708cd871327e049f96c961ab62ae2acea4398bf29-9bc3ac79e2ae81ade245a0e308bf13c981efaa83.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/libidn%2Flibidn2@v2.3.8?vcs_url=git%2Bhttps:%2F%2Fgitlab.com%2Flibidn%2Flibidn2%409bc3ac79e2ae81ade245a0e308bf13c981efaa83", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libidn2-9d8572c340a94c5b", "name": "libidn2", "versionInfo": "2.3.8-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-2.0-or-later AND LGPL-3.0-or-later)", "description": "Encode/Decode library for internationalized domain names", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libidn2@2.3.8-r12?arch=aarch64\u0026origin=libidn2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libidn2", "name": "libidn2", "versionInfo": "2.3.8-r12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "name": "libldap-2.7", "versionInfo": "2.7.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libldap-2.7@2.7.2-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-openldap-2.7.yaml-0906e934a58fa878f8d3cfa650c6aab092cc7f26", "name": "openldap-2.7.yaml", "versionInfo": "0906e934a58fa878f8d3cfa650c6aab092cc7f26", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@0906e934a58fa878f8d3cfa650c6aab092cc7f26#openldap-2.7.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-openldap-openldap.git-OPENLDAPC95RELC95ENGC952C957C952-5030280ed039f03fe7725a21f892d7f4e0b98076-0", "name": "openldap", "versionInfo": "OPENLDAP_REL_ENG_2_7_2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "downloadLocation": "https://github.com/openldap/openldap/archive/5030280ed039f03fe7725a21f892d7f4e0b98076.tar.gz", "originator": "Organization: Openldap", "supplier": "Organization: Openldap", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/openldap/openldap@OPENLDAP_REL_ENG_2_7_2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libldap-2.7-fda93f6e5cb8b10f", "name": "libldap-2.7", "versionInfo": "2.7.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "OLDAP-2.8", "description": "OpenLDAP libraries", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libldap-2.7@2.7.2-r0?arch=aarch64\u0026origin=openldap-2.7", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libldap-2.7", "name": "libldap-2.7", "versionInfo": "2.7.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libnghttp2-14@1.71.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-nghttp2.yaml-153ee2bd742f744ddedf5c4a97110fa46307574b", "name": "nghttp2.yaml", "versionInfo": "153ee2bd742f744ddedf5c4a97110fa46307574b", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@153ee2bd742f744ddedf5c4a97110fa46307574b#nghttp2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-nghttp2-nghttp2.git-v1.71.0-80dcb8140af050fac91a7e6af4fc6dd013404bd1-0", "name": "nghttp2", "versionInfo": "v1.71.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/nghttp2/nghttp2/archive/80dcb8140af050fac91a7e6af4fc6dd013404bd1.tar.gz", "originator": "Organization: Nghttp2", "supplier": "Organization: Nghttp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/nghttp2/nghttp2@v1.71.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libnghttp2-14-f0405241798ad783", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "nghttp2 client library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libnghttp2-14@1.71.0-r0?arch=aarch64\u0026origin=nghttp2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libnghttp2-14", "name": "libnghttp2-14", "versionInfo": "1.71.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "name": "nghttp3", "versionInfo": "1.19.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nghttp3@1.19.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-nghttp3.yaml-10e9291816e1a18eee8044d5c02177de477e1f29", "name": "nghttp3.yaml", "versionInfo": "10e9291816e1a18eee8044d5c02177de477e1f29", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@10e9291816e1a18eee8044d5c02177de477e1f29#nghttp3.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ngtcp2-nghttp3.git-v1.19.0-dc83309ca5fd2beb91cc5c030a2d30525e9f2a00-0", "name": "nghttp3", "versionInfo": "v1.19.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ngtcp2/nghttp3/archive/dc83309ca5fd2beb91cc5c030a2d30525e9f2a00.tar.gz", "originator": "Organization: Ngtcp2", "supplier": "Organization: Ngtcp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/ngtcp2/nghttp3@v1.19.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-nghttp3-55243b5027774927", "name": "nghttp3", "versionInfo": "1.19.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "HTTP/3 library written in C", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nghttp3@1.19.0-r0?arch=aarch64\u0026origin=nghttp3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-nghttp3", "name": "nghttp3", "versionInfo": "1.19.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "name": "ngtcp2", "versionInfo": "1.26.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ngtcp2@1.26.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-ngtcp2.yaml-a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78", "name": "ngtcp2.yaml", "versionInfo": "a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78#ngtcp2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-ngtcp2-ngtcp2.git-v1.26.0-6a22a4d7a111f6b52391910e40ad3681a09cfb9c-0", "name": "ngtcp2", "versionInfo": "v1.26.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/ngtcp2/ngtcp2/archive/6a22a4d7a111f6b52391910e40ad3681a09cfb9c.tar.gz", "originator": "Organization: Ngtcp2", "supplier": "Organization: Ngtcp2", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/ngtcp2/ngtcp2@v1.26.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-ngtcp2-21585986ccd703d4", "name": "ngtcp2", "versionInfo": "1.26.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "ngtcp2 project is an effort to implement IETF QUIC protocol", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/ngtcp2@1.26.0-r0?arch=aarch64\u0026origin=ngtcp2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-ngtcp2", "name": "ngtcp2", "versionInfo": "1.26.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "name": "libpsl", "versionInfo": "0.23.3-r4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpsl@0.23.3-r4?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libpsl.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "libpsl.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#libpsl.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-rockdaboot-libpsl.git-0.23.3-c486db8d221cbac55f87508d4da4db4497760997-0", "name": "libpsl", "versionInfo": "0.23.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/rockdaboot/libpsl/archive/c486db8d221cbac55f87508d4da4db4497760997.tar.gz", "originator": "Organization: Rockdaboot", "supplier": "Organization: Rockdaboot", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/rockdaboot/libpsl@0.23.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libpsl-00717f3e46847b47", "name": "libpsl", "versionInfo": "0.23.3-r4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "C library for the Publix Suffix List", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpsl@0.23.3-r4?arch=aarch64\u0026origin=libpsl", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libpsl", "name": "libpsl", "versionInfo": "0.23.3-r4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "name": "libcurl-openssl4", "versionInfo": "8.23.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcurl-openssl4@8.23.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:haxx:curl:8.23.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-curl.yaml-010cb3d3ce5812142c1ff59d0b260650190c6241", "name": "curl.yaml", "versionInfo": "010cb3d3ce5812142c1ff59d0b260650190c6241", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@010cb3d3ce5812142c1ff59d0b260650190c6241#curl.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-curl-curl.git-curl-8C9523C950-3163ec065643ba20709f190111f42c3e1fe95273-0", "name": "curl", "versionInfo": "curl-8_23_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/curl/curl/archive/3163ec065643ba20709f190111f42c3e1fe95273.tar.gz", "originator": "Organization: Curl", "supplier": "Organization: Curl", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/curl/curl@curl-8_23_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libcurl-openssl4-dbf9448ef8140af5", "name": "libcurl-openssl4", "versionInfo": "8.23.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "curl library (openssl backend)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:haxx:curl:8.23.0-r3:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libcurl-openssl4@8.23.0-r3?arch=aarch64\u0026origin=curl", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libcurl-openssl4", "name": "libcurl-openssl4", "versionInfo": "8.23.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "name": "libexpat1", "versionInfo": "2.10.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libexpat1@2.10.0-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.10.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-expat.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "expat.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#expat.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-libexpat-libexpat-RC952C9510C950-a70841d9ffa64ddde29ab824ed6305035ebe4c47-0", "name": "libexpat", "versionInfo": "R_2_10_0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/libexpat/libexpat/archive/a70841d9ffa64ddde29ab824ed6305035ebe4c47.tar.gz", "originator": "Organization: Libexpat", "supplier": "Organization: Libexpat", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/libexpat/libexpat@R_2_10_0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libexpat1-95b2883a4585c888", "name": "libexpat1", "versionInfo": "2.10.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "libexpat shared library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.10.0-r1:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libexpat1@2.10.0-r1?arch=aarch64\u0026origin=expat", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libexpat1", "name": "libexpat1", "versionInfo": "2.10.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "name": "libpcre2-8-0", "versionInfo": "10.49-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpcre2-8-0@10.49-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-pcre2.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "pcre2.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#pcre2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-PCRE2Project-pcre2.git-pcre2-10.49-6f9d7c1373262c541324a16a358785b33ef116cf-0", "name": "pcre2", "versionInfo": "pcre2-10.49", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "downloadLocation": "https://github.com/PCRE2Project/pcre2/archive/6f9d7c1373262c541324a16a358785b33ef116cf.tar.gz", "originator": "Organization: Pcre2project", "supplier": "Organization: Pcre2project", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/pcre2project/pcre2@pcre2-10.49", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libpcre2-8-0-d0d4429c86d2814c", "name": "libpcre2-8-0", "versionInfo": "10.49-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "pcre2 runtime library 8-bit", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libpcre2-8-0@10.49-r3?arch=aarch64\u0026origin=pcre2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libpcre2-8-0", "name": "libpcre2-8-0", "versionInfo": "10.49-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-git-2.56.0-r3", "name": "git", "versionInfo": "2.56.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND ( Artistic-1.0-Perl OR GPL-1.0-or-later )", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/git@2.56.0-r3?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-git.yaml-a3655395a06e663e8406d260a966b9e022e11f7e", "name": "git.yaml", "versionInfo": "a3655395a06e663e8406d260a966b9e022e11f7e", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@a3655395a06e663e8406d260a966b9e022e11f7e#git.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-git-git.git-v2.56.0-a018953688f1b10bddf91bff8747068f5f4746a4-0", "name": "pub/scm/git/git", "versionInfo": "v2.56.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND ( Artistic-1.0-Perl OR GPL-1.0-or-later )", "downloadLocation": "https://tarballs.cgr.dev/p/13d95d86c3cf193d4f0417e059a08cc793fc772f803086b07d168643a0b50f40-a018953688f1b10bddf91bff8747068f5f4746a4.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/pub%2Fscm%2Fgit%2Fgit@v2.56.0?vcs_url=git%2Bhttps:%2F%2Fkernel.googlesource.com%2Fpub%2Fscm%2Fgit%2Fgit.git%40a018953688f1b10bddf91bff8747068f5f4746a4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-git-19db310f7dfcfb46", "name": "git", "versionInfo": "2.56.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later AND ( Artistic-1.0-Perl OR GPL-1.0-or-later )", "description": "distributed version control system", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:git-scm:git:2.56.0:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/git@2.56.0-r3?arch=aarch64\u0026origin=git", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-git", "name": "git", "versionInfo": "2.56.0-r3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "name": "icu79-data-full", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/icu79-data-full@79.1-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-icu.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "name": "icu.yaml", "versionInfo": "f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3#icu.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-unicode-org-icu-release-79.1-ddc6b66926bfac6036144ca9902992a0d6d50af9-0", "name": "icu", "versionInfo": "release-79.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/unicode-org/icu/archive/ddc6b66926bfac6036144ca9902992a0d6d50af9.tar.gz", "originator": "Organization: Unicode-Org", "supplier": "Organization: Unicode-Org", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/unicode-org/icu@release-79.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-unicode-org-icu-data-main-c5aeb38e05607d094b783f0665bd66219b038ca9-1", "name": "icu-data", "versionInfo": "c5aeb38e05607d094b783f0665bd66219b038ca9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/unicode-org/icu-data/archive/c5aeb38e05607d094b783f0665bd66219b038ca9.tar.gz", "originator": "Organization: Unicode-Org", "supplier": "Organization: Unicode-Org", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/unicode-org/icu-data@c5aeb38e05607d094b783f0665bd66219b038ca9", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-icu79-data-full-dfda4c12dccf0f20", "name": "icu79-data-full", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Full ICU data", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/icu79-data-full@79.1-r1?arch=aarch64\u0026origin=icu", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-icu79-data-full", "name": "icu79-data-full", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30", "name": "libbz2-1", "versionInfo": "1.0.8-r30", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbz2-1@1.0.8-r30?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-bzip2.yaml-f353805867a3059d7018cceac9746da7c23634fe", "name": "bzip2.yaml", "versionInfo": "f353805867a3059d7018cceac9746da7c23634fe", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@f353805867a3059d7018cceac9746da7c23634fe#bzip2.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-sourceware.org-git-bzip2.git-bzip2-1.0.8-6a8690fc8d26c815e798c588f796eabe9d684cf0-0", "name": "git/bzip2", "versionInfo": "bzip2-1.0.8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MPL-2.0 AND MIT", "downloadLocation": "https://tarballs.cgr.dev/g/bd9e4cde2b52db644da8ff7b19a2e89df1ff408230201c86e08456c98ef2fc12-6a8690fc8d26c815e798c588f796eabe9d684cf0.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/git%2Fbzip2@bzip2-1.0.8?vcs_url=git%2Bhttps:%2F%2Fsourceware.org%2Fgit%2Fbzip2.git%406a8690fc8d26c815e798c588f796eabe9d684cf0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libbz2-1-161b9abb2535e851", "name": "libbz2-1", "versionInfo": "1.0.8-r30", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MPL-2.0 AND MIT)", "description": "bzip2 shared library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libbz2-1@1.0.8-r30?arch=aarch64\u0026origin=bzip2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libbz2-1", "name": "libbz2-1", "versionInfo": "1.0.8-r30", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libffi-3.8.0-r2", "name": "libffi", "versionInfo": "3.8.0-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libffi@3.8.0-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libffi.yaml-aaa2344b75ef8b19889f087c91e10b11f191e15c", "name": "libffi.yaml", "versionInfo": "aaa2344b75ef8b19889f087c91e10b11f191e15c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@aaa2344b75ef8b19889f087c91e10b11f191e15c#libffi.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-libffi-libffi.git-v3.8.0-12ffd1f9dc56fcea79d2f742f424301ae668d663-0", "name": "libffi", "versionInfo": "v3.8.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/libffi/libffi/archive/12ffd1f9dc56fcea79d2f742f424301ae668d663.tar.gz", "originator": "Organization: Libffi", "supplier": "Organization: Libffi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/libffi/libffi@v3.8.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libffi-e8a6a080506d2ad6", "name": "libffi", "versionInfo": "3.8.0-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "portable foreign function interface library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libffi@3.8.0-r2?arch=aarch64\u0026origin=libffi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libffi", "name": "libffi", "versionInfo": "3.8.0-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libicu79-79.1-r1", "name": "libicu79", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libicu79@79.1-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libicu79-ccbe9a514ca528c5", "name": "libicu79", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "International Components for Unicode library (libs)", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libicu79@79.1-r1?arch=aarch64\u0026origin=icu", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libicu79", "name": "libicu79", "versionInfo": "79.1-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libuuid-2.42.4-r2", "name": "libuuid", "versionInfo": "2.42.4-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libuuid@2.42.4-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-util-linux.yaml-8298ba7be686605b03c1943f22ccf5a0640e0042", "name": "util-linux.yaml", "versionInfo": "8298ba7be686605b03c1943f22ccf5a0640e0042", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@8298ba7be686605b03c1943f22ccf5a0640e0042#util-linux.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-util-linux-util-linux-v2.42.4-d76cbf8f13e65ff657344f7f6a90042cf755ba59-0", "name": "util-linux", "versionInfo": "v2.42.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC", "downloadLocation": "https://github.com/util-linux/util-linux/archive/d76cbf8f13e65ff657344f7f6a90042cf755ba59.tar.gz", "originator": "Organization: Util-Linux", "supplier": "Organization: Util-Linux", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/util-linux/util-linux@v2.42.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libuuid-060f7e4f1502928d", "name": "libuuid", "versionInfo": "2.42.4-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC)", "description": "DCE compatible Universally Unique Identifier library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libuuid@2.42.4-r2?arch=aarch64\u0026origin=util-linux", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libuuid", "name": "libuuid", "versionInfo": "2.42.4-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-libuv-1.53.0-r0", "name": "libuv", "versionInfo": "1.53.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT AND ISC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libuv@1.53.0-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-libuv.yaml-6ee5086b767a2f31854a43ce96bd3b6a275cc36c", "name": "libuv.yaml", "versionInfo": "6ee5086b767a2f31854a43ce96bd3b6a275cc36c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@6ee5086b767a2f31854a43ce96bd3b6a275cc36c#libuv.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-libuv-libuv.git-v1.53.0-840404ce8ba7cc0204be52389a6cfff9f2c90fb6-0", "name": "libuv", "versionInfo": "v1.53.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT AND ISC", "downloadLocation": "https://github.com/libuv/libuv/archive/840404ce8ba7cc0204be52389a6cfff9f2c90fb6.tar.gz", "originator": "Organization: Libuv", "supplier": "Organization: Libuv", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/libuv/libuv@v1.53.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-libuv-1ca688a614853a23", "name": "libuv", "versionInfo": "1.53.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "(MIT AND ISC)", "description": "cross-platform asynchronous I/O library", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/libuv@1.53.0-r0?arch=aarch64\u0026origin=libuv", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-libuv", "name": "libuv", "versionInfo": "1.53.0-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6", "name": "mpdecimal", "versionInfo": "4.0.1-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpdecimal@4.0.1-r6?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-mpdecimal.yaml-491b184c82ef2868d73a46a98997db789342ff15", "name": "mpdecimal.yaml", "versionInfo": "491b184c82ef2868d73a46a98997db789342ff15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@491b184c82ef2868d73a46a98997db789342ff15#mpdecimal.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-mpdecimal-4.0.1-0", "name": "mpdecimal", "versionInfo": "4.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "https://www.bytereef.org/software/mpdecimal/releases/mpdecimal-4.0.1.tar.gz", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "SOURCE", "checksums": [ { "algorithm": "SHA256", "checksumValue": "96d33abb4bb0070c7be0fed4246cd38416188325f820468214471938545b1ac8" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:generic/mpdecimal@4.0.1?checksum=sha256:96d33abb4bb0070c7be0fed4246cd38416188325f820468214471938545b1ac8\u0026download_url=https:%2F%2Fwww.bytereef.org%2Fsoftware%2Fmpdecimal%2Freleases%2Fmpdecimal-4.0.1.tar.gz", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-mpdecimal-a88311b96b77a716", "name": "mpdecimal", "versionInfo": "4.0.1-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "description": "complete implementation of the general decimal arithmetic specification", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/mpdecimal@4.0.1-r6?arch=aarch64\u0026origin=mpdecimal", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-mpdecimal", "name": "mpdecimal", "versionInfo": "4.0.1-r6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-nodejs-24-24.22.2-r2", "name": "nodejs-24", "versionInfo": "24.22.2-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nodejs-24@24.22.2-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-nodejs-24.yaml-76a7da28bfe0554c26b2edaed70fceb60db3fa15", "name": "nodejs-24.yaml", "versionInfo": "76a7da28bfe0554c26b2edaed70fceb60db3fa15", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@76a7da28bfe0554c26b2edaed70fceb60db3fa15#nodejs-24.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-nodejs-node.git-v24.22.2-f7f273a9bb6445f6f7fb6349105e7532972045fb-0", "name": "node", "versionInfo": "v24.22.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/nodejs/node/archive/f7f273a9bb6445f6f7fb6349105e7532972045fb.tar.gz", "originator": "Organization: Nodejs", "supplier": "Organization: Nodejs", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/nodejs/node@v24.22.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-nodejs-24-79b76d5f10e6c3d7", "name": "nodejs-24", "versionInfo": "24.22.2-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "JavaScript runtime built on V8 engine", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/nodejs-24@24.22.2-r2?arch=aarch64\u0026origin=nodejs-24", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-nodejs-24", "name": "nodejs-24", "versionInfo": "24.22.2-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-node-gyp-13.1.0-r1", "name": "node-gyp", "versionInfo": "13.1.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Artistic-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/node-gyp@13.1.0-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-node-gyp.yaml-cc172a7c7af38af8145f690046e25a7069c96f21", "name": "node-gyp.yaml", "versionInfo": "cc172a7c7af38af8145f690046e25a7069c96f21", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@cc172a7c7af38af8145f690046e25a7069c96f21#node-gyp.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--isaacs-fs-minipass-1be8bd741034d732", "name": "@isaacs/fs-minipass", "versionInfo": "4.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "fs read and write streams based on minipass", "downloadLocation": "https://github.com/npm/fs-minipass.git", "originator": "Person: Isaac Z. Schlueter", "supplier": "Person: Isaac Z. Schlueter", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/@isaacs/fs-minipass/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-abbrev-4cac821073793d7f", "name": "abbrev", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Like ruby's abbrev module, but in js", "downloadLocation": "git+https://github.com/npm/abbrev-js.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/abbrev/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/abbrev@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-chownr-70a6bf17ba99f73d", "name": "chownr", "versionInfo": "3.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "like `chown -R`", "downloadLocation": "git://github.com/isaacs/chownr.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/chownr/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/chownr@3.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-env-paths-4428dff0a3eca1dd", "name": "env-paths", "versionInfo": "2.2.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Get paths for storing things like data, config, cache, etc", "downloadLocation": "NOASSERTION", "originator": "Person: Sindre Sorhus (sindresorhus@gmail.com)", "supplier": "Person: Sindre Sorhus (sindresorhus@gmail.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/env-paths/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/env-paths@2.2.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-exponential-backoff-602c54750e05d021", "name": "exponential-backoff", "versionInfo": "3.1.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "A utility that allows retrying a function with an exponential delay between attempts.", "downloadLocation": "git+https://github.com/coveooss/exponential-backoff.git", "originator": "Person: Sami Sayegh", "supplier": "Person: Sami Sayegh", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/exponential-backoff/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/exponential-backoff@3.1.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-fdir-84f08a6ffc39fc88", "name": "fdir", "versionInfo": "6.5.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "The fastest directory crawler \u0026 globbing alternative to glob, fast-glob, \u0026 tiny-glob. Crawls 1m files in \u003c 1s", "downloadLocation": "git+https://github.com/thecodrr/fdir.git", "originator": "Person: thecodrr (thecodrr@protonmail.com)", "supplier": "Person: thecodrr (thecodrr@protonmail.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/fdir/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/fdir@6.5.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-graceful-fs-c063cbd0db7d468c", "name": "graceful-fs", "versionInfo": "4.2.11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "A drop-in replacement for fs, making various improvements.", "downloadLocation": "https://github.com/isaacs/node-graceful-fs", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/graceful-fs/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/graceful-fs@4.2.11", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-isexe-bf2e98f2cdf851e8", "name": "isexe", "versionInfo": "4.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "Minimal module to check if a file is executable.", "downloadLocation": "https://github.com/isaacs/isexe", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/isexe/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/isexe@4.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minipass-1c151cb91f430512", "name": "minipass", "versionInfo": "7.1.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "minimal implementation of a PassThrough stream", "downloadLocation": "https://github.com/isaacs/minipass", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/minipass/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minipass@7.1.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minizlib-335c0a93fb847068", "name": "minizlib", "versionInfo": "3.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", "downloadLocation": "git+https://github.com/isaacs/minizlib.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/minizlib/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minizlib@3.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-node-gyp-3bb39ca51af9ddd2", "name": "node-gyp", "versionInfo": "13.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Node.js native addon build tool", "downloadLocation": "git://github.com/nodejs/node-gyp.git", "originator": "Person: Nathan Rajlich (nathan@tootallnate.net)", "supplier": "Person: Nathan Rajlich (nathan@tootallnate.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/node-gyp@13.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "name": "node-gyp", "versionInfo": "13.1.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Artistic-2.0", "description": "NodeJS native addon build tool", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/node-gyp@13.1.0-r1?arch=aarch64\u0026origin=node-gyp", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-nopt-dcc25162c9fb23cb", "name": "nopt", "versionInfo": "10.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "downloadLocation": "git+https://github.com/npm/nopt.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/nopt/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/nopt@10.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-picomatch-3c1ea54dadf49411", "name": "picomatch", "versionInfo": "4.0.7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "downloadLocation": "NOASSERTION", "originator": "Person: Jon Schlinkert", "supplier": "Person: Jon Schlinkert", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/picomatch/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:jonschlinkert:picomatch:4.0.7:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/picomatch@4.0.7", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-proc-log-2b8681bff9c92b41", "name": "proc-log", "versionInfo": "7.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "just emit 'log' events on the process object", "downloadLocation": "git+https://github.com/npm/proc-log.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/proc-log/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/proc-log@7.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-semver-3eddf84cc6ff8777", "name": "semver", "versionInfo": "7.8.5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "The semantic version parser used by npm.", "downloadLocation": "git+https://github.com/npm/node-semver.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/semver/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:npmjs:semver:7.8.5:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/semver@7.8.5", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-tar-ff2ea75c5fc6a653", "name": "tar", "versionInfo": "7.5.22", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "tar for node", "downloadLocation": "https://github.com/isaacs/node-tar.git", "originator": "Person: Isaac Z. Schlueter", "supplier": "Person: Isaac Z. Schlueter", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/tar/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:tar_project:tar:7.5.22:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:tar_project:tar:7.5.22:*:*:*:*:rust:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:isaacs:tar:7.5.22:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/tar@7.5.22", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-tinyglobby-da1e9af905e99f3e", "name": "tinyglobby", "versionInfo": "0.2.17", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "A fast and minimal alternative to globby and fast-glob", "downloadLocation": "git+https://github.com/SuperchupuDev/tinyglobby.git", "originator": "Person: Superchupu", "supplier": "Person: Superchupu", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/tinyglobby/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/tinyglobby@0.2.17", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-undici-64fbc3d560b596f2", "name": "undici", "versionInfo": "8.12.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "An HTTP/1.1 client, written from scratch for Node.js", "downloadLocation": "git+https://github.com/nodejs/undici.git", "originator": "Person: Daniele Belardi", "supplier": "Person: Daniele Belardi", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/undici/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:nodejs:undici:8.12.3:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/undici@8.12.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-which-96fcc673435e6765", "name": "which", "versionInfo": "7.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "downloadLocation": "git+https://github.com/npm/node-which.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/which/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/which@7.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-yallist-1e911156aa30dbb5", "name": "yallist", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "Yet Another Linked List", "downloadLocation": "git+https://github.com/isaacs/yallist.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/node-gyp/node_modules/yallist/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/yallist@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-node-gyp", "name": "node-gyp", "versionInfo": "13.1.0-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-npm-12-12.2.2-r0", "name": "npm-12", "versionInfo": "12.2.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Artistic-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/npm-12@12.2.2-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-npm-12.yaml-8a7be5d54d17fbe1630495f8b594254d68dcac38", "name": "npm-12.yaml", "versionInfo": "8a7be5d54d17fbe1630495f8b594254d68dcac38", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@8a7be5d54d17fbe1630495f8b594254d68dcac38#npm-12.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-npm-cli-v12.2.2-60e11343e61316d966c86805d803df5a0eb99230-0", "name": "cli", "versionInfo": "v12.2.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Artistic-2.0", "downloadLocation": "https://github.com/npm/cli/archive/60e11343e61316d966c86805d803df5a0eb99230.tar.gz", "originator": "Organization: Npm", "supplier": "Organization: Npm", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/npm/cli@v12.2.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--gar-promise-retry-5b6208c2bd51b9e4", "name": "@gar/promise-retry", "versionInfo": "1.0.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Retries a function that returns a promise, leveraging the power of the retry module.", "downloadLocation": "git://github.com/wraithgar/node-promise-retry.git", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@gar/promise-retry/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40gar/promise-retry@1.0.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--isaacs-fs-minipass-63f720274aa4e978", "name": "@isaacs/fs-minipass", "versionInfo": "4.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "fs read and write streams based on minipass", "downloadLocation": "https://github.com/npm/fs-minipass.git", "originator": "Person: Isaac Z. Schlueter", "supplier": "Person: Isaac Z. Schlueter", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@isaacs/fs-minipass/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--isaacs-string-locale-compare-b70d35b677385b41", "name": "@isaacs/string-locale-compare", "versionInfo": "1.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise", "downloadLocation": "git+https://github.com/isaacs/string-locale-compare", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40isaacs/string-locale-compare@1.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-agent-e299039f87b64e83", "name": "@npmcli/agent", "versionInfo": "5.0.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "the http/https agent used by the npm cli", "downloadLocation": "git+https://github.com/npm/agent.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/agent/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/agent@5.0.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-arborist-06ea895e89b040e1", "name": "@npmcli/arborist", "versionInfo": "10.0.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Manage node_modules trees", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/arborist/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:npmjs:arborist:10.0.4:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/arborist@10.0.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-config-231ea5ad422f1db5", "name": "@npmcli/config", "versionInfo": "11.2.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Configuration management for the npm cli", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/config/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/config@11.2.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-fs-64ef979e446bd528", "name": "@npmcli/fs", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "filesystem utilities for the npm cli", "downloadLocation": "git+https://github.com/npm/fs.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/fs/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/fs@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-git-469906ecbe1217bd", "name": "@npmcli/git", "versionInfo": "8.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "a util for spawning git from npm CLI contexts", "downloadLocation": "git+https://github.com/npm/git.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/git/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/git@8.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-installed-package-contents-9c860756c4b9408c", "name": "@npmcli/installed-package-contents", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Get the list of files installed in a package in node_modules, including bundled dependencies", "downloadLocation": "git+https://github.com/npm/installed-package-contents.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/installed-package-contents@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-map-workspaces-77e4ea03cc9b019a", "name": "@npmcli/map-workspaces", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Retrieves a name:pathname Map for a given workspaces config", "downloadLocation": "git+https://github.com/npm/map-workspaces.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/map-workspaces/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/map-workspaces@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-metavuln-calculator-755d08454906dffc", "name": "@npmcli/metavuln-calculator", "versionInfo": "10.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Calculate meta-vulnerabilities from package security advisories", "downloadLocation": "git+https://github.com/npm/metavuln-calculator.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/metavuln-calculator@10.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-name-from-folder-838da43b98f827ff", "name": "@npmcli/name-from-folder", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Get the package name from a folder path", "downloadLocation": "git+https://github.com/npm/name-from-folder.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/name-from-folder/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/name-from-folder@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-node-gyp-e4a9d416bfed18ae", "name": "@npmcli/node-gyp", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Tools for dealing with node-gyp packages", "downloadLocation": "git+https://github.com/npm/node-gyp.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/node-gyp/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/node-gyp@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-package-json-5e6b715b15284758", "name": "@npmcli/package-json", "versionInfo": "8.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Programmatic API to update package.json", "downloadLocation": "git+https://github.com/npm/package-json.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/package-json/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/package-json@8.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-promise-spawn-ae7a20980cb86baf", "name": "@npmcli/promise-spawn", "versionInfo": "10.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "spawn processes the way the npm cli likes to do", "downloadLocation": "git+https://github.com/npm/promise-spawn.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/promise-spawn/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/promise-spawn@10.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-query-3ed7ee4bd0016a9b", "name": "@npmcli/query", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "npm query parser and tools", "downloadLocation": "git+https://github.com/npm/query.git", "originator": "Person: GitHub Inc., Ruy Adorno", "supplier": "Person: GitHub Inc., Ruy Adorno", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/query/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/query@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-redact-3de375887f17730d", "name": "@npmcli/redact", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Redact sensitive npm information from output", "downloadLocation": "git+https://github.com/npm/redact.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/redact/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/redact@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--npmcli-run-script-0e6ef602f3a8ba50", "name": "@npmcli/run-script", "versionInfo": "11.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)", "downloadLocation": "git+https://github.com/npm/run-script.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/run-script/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40npmcli/run-script@11.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--sigstore-bundle-2efd6c66711d3816", "name": "@sigstore/bundle", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "Sigstore bundle type", "downloadLocation": "git+https://github.com/sigstore/sigstore-js.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@sigstore/bundle/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40sigstore/bundle@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--sigstore-core-7eb94386896e94a0", "name": "@sigstore/core", "versionInfo": "4.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "Base library for Sigstore", "downloadLocation": "git+https://github.com/sigstore/sigstore-js.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@sigstore/core/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40sigstore/core@4.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--sigstore-protobuf-specs-c379aa8154130dd3", "name": "@sigstore/protobuf-specs", "versionInfo": "0.5.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "code-signing for npm packages", "downloadLocation": "git+https://github.com/sigstore/protobuf-specs.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40sigstore/protobuf-specs@0.5.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--sigstore-sign-d6a429ef1c1d975c", "name": "@sigstore/sign", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "Sigstore signing library", "downloadLocation": "git+https://github.com/sigstore/sigstore-js.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@sigstore/sign/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40sigstore/sign@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--sigstore-tuf-bd5b456dca247d08", "name": "@sigstore/tuf", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "Client for the Sigstore TUF repository", "downloadLocation": "git+https://github.com/sigstore/sigstore-js.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@sigstore/tuf/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40sigstore/tuf@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--sigstore-verify-155b66244de5eb23", "name": "@sigstore/verify", "versionInfo": "4.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "Verification of Sigstore signatures", "downloadLocation": "git+https://github.com/sigstore/sigstore-js.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@sigstore/verify/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40sigstore/verify@4.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--tufjs-canonical-json-9ef193f25f81de43", "name": "@tufjs/canonical-json", "versionInfo": "2.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "OLPC JSON canonicalization", "downloadLocation": "git+https://github.com/theupdateframework/tuf-js.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@tufjs/canonical-json/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40tufjs/canonical-json@2.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm--tufjs-models-16c9940a6ffab52b", "name": "@tufjs/models", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "TUF metadata models", "downloadLocation": "git+https://github.com/theupdateframework/tuf-js.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@tufjs/models/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/%40tufjs/models@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-abbrev-af49756d10da1226", "name": "abbrev", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Like ruby's abbrev module, but in js", "downloadLocation": "git+https://github.com/npm/abbrev-js.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/abbrev/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/abbrev@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-agent-base-2296afaa86fdbb6a", "name": "agent-base", "versionInfo": "9.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Turn a function into an `http.Agent` instance", "downloadLocation": "https://github.com/TooTallNate/proxy-agents.git", "originator": "Person: Nathan Rajlich (nathan@tootallnate.net)", "supplier": "Person: Nathan Rajlich (nathan@tootallnate.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/agent/node_modules/agent-base/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/agent-base@9.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-agent-base-2d14f34152ec1c40", "name": "agent-base", "versionInfo": "9.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Turn a function into an `http.Agent` instance", "downloadLocation": "https://github.com/TooTallNate/proxy-agents.git", "originator": "Person: Nathan Rajlich (nathan@tootallnate.net)", "supplier": "Person: Nathan Rajlich (nathan@tootallnate.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/socks-proxy-agent/node_modules/agent-base/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/agent-base@9.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-aproba-347bd4135ce42b64", "name": "aproba", "versionInfo": "2.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "A ridiculously light-weight argument validator (now browser friendly)", "downloadLocation": "https://github.com/iarna/aproba", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/aproba/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/aproba@2.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-archy-06f323ee14a52ede", "name": "archy", "versionInfo": "1.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "render nested hierarchies `npm ls` style with unicode pipes", "downloadLocation": "http://github.com/substack/node-archy.git", "originator": "Person: James Halliday (mail@substack.net)", "supplier": "Person: James Halliday (mail@substack.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/archy/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/archy@1.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-balanced-match-e0230e25d50d6cc1", "name": "balanced-match", "versionInfo": "4.0.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Match balanced character pairs, like \"{\" and \"}\"", "downloadLocation": "git://github.com/juliangruber/balanced-match.git", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/balanced-match/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/balanced-match@4.0.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-bin-links-e6eaccf68e3fb4ae", "name": "bin-links", "versionInfo": "7.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "JavaScript package binary linker", "downloadLocation": "git+https://github.com/npm/bin-links.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/bin-links/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/bin-links@7.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-binary-extensions-9b297040bbd06874", "name": "binary-extensions", "versionInfo": "3.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "List of binary file extensions", "downloadLocation": "NOASSERTION", "originator": "Person: Sindre Sorhus (sindresorhus@gmail.com)", "supplier": "Person: Sindre Sorhus (sindresorhus@gmail.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/binary-extensions/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/binary-extensions@3.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-brace-expansion-0bc2e37232f894db", "name": "brace-expansion", "versionInfo": "5.0.12", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Brace expansion as known from sh/bash", "downloadLocation": "git+https://github.com/juliangruber/brace-expansion.git", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/brace-expansion/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:juliangruber:brace-expansion:5.0.12:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/brace-expansion@5.0.12", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-cacache-d2922d588b826a78", "name": "cacache", "versionInfo": "21.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", "downloadLocation": "git+https://github.com/npm/cacache.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/cacache/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/cacache@21.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-chalk-d57bb1f6d053460c", "name": "chalk", "versionInfo": "5.6.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Terminal string styling done right", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/chalk/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/chalk@5.6.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-chownr-05962a2a962d12b6", "name": "chownr", "versionInfo": "3.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "like `chown -R`", "downloadLocation": "git://github.com/isaacs/chownr.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/chownr/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/chownr@3.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-ci-info-750f7ba7563ab888", "name": "ci-info", "versionInfo": "4.4.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Get details about the current Continuous Integration environment", "downloadLocation": "https://github.com/watson/ci-info", "originator": "Person: Thomas Watson Steen (w@tson.dk)", "supplier": "Person: Thomas Watson Steen (w@tson.dk)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/ci-info/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/ci-info@4.4.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-cidr-regex-5d83b26f13e4c67d", "name": "cidr-regex", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "description": "Regular expression for matching IP addresses in CIDR notation", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/cidr-regex/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/cidr-regex@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-cmd-shim-faff14a16502a83a", "name": "cmd-shim", "versionInfo": "9.0.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Used in npm for command line application support", "downloadLocation": "git+https://github.com/npm/cmd-shim.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/bin-links/node_modules/cmd-shim/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/cmd-shim@9.0.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-common-ancestor-path-52aea8d23ed98b5f", "name": "common-ancestor-path", "versionInfo": "2.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "Find the common ancestor of 2 or more paths on Windows or Unix", "downloadLocation": "NOASSERTION", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/common-ancestor-path/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/common-ancestor-path@2.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-cssesc-70d9f3fe4216c23d", "name": "cssesc", "versionInfo": "3.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.", "downloadLocation": "https://github.com/mathiasbynens/cssesc.git", "originator": "Person: Mathias Bynens", "supplier": "Person: Mathias Bynens", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/cssesc/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/cssesc@3.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-debug-e82a5e46e86cd002", "name": "debug", "versionInfo": "4.4.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Lightweight debugging utility for Node.js and the browser", "downloadLocation": "git://github.com/debug-js/debug.git", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/debug/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/debug@4.4.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-diff-aba588db3913263b", "name": "diff", "versionInfo": "8.0.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "description": "A JavaScript text diff implementation.", "downloadLocation": "https://github.com/kpdecker/jsdiff.git", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/diff/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:kpdecker:jsdiff:8.0.4:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/diff@8.0.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-fastest-levenshtein-7d5067f37433777a", "name": "fastest-levenshtein", "versionInfo": "1.0.16", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Fastest Levenshtein distance implementation in JS.", "downloadLocation": "git+https://github.com/ka-weihe/fastest-levenshtein.git", "originator": "Person: Kasper U. Weihe", "supplier": "Person: Kasper U. Weihe", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/fastest-levenshtein/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/fastest-levenshtein@1.0.16", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-fs-minipass-0ef840dc0cbaf047", "name": "fs-minipass", "versionInfo": "3.0.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "fs read and write streams based on minipass", "downloadLocation": "https://github.com/npm/fs-minipass.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/fs-minipass/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/fs-minipass@3.0.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-glob-1277a1f95dd3d78c", "name": "glob", "versionInfo": "13.0.6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "the most correct and second fastest glob implementation in JavaScript", "downloadLocation": "NOASSERTION", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/glob/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:isaacs:glob:13.0.6:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/glob@13.0.6", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-graceful-fs-25543ac811f600f9", "name": "graceful-fs", "versionInfo": "4.2.11", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "A drop-in replacement for fs, making various improvements.", "downloadLocation": "https://github.com/isaacs/node-graceful-fs", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/graceful-fs/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/graceful-fs@4.2.11", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-hosted-git-info-7fb3d38ba5b00a9e", "name": "hosted-git-info", "versionInfo": "10.1.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", "downloadLocation": "git+https://github.com/npm/hosted-git-info.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/hosted-git-info/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/hosted-git-info@10.1.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-http-cache-semantics-427d53b9fba5814f", "name": "http-cache-semantics", "versionInfo": "4.3.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", "downloadLocation": "git+https://github.com/kornelski/http-cache-semantics.git", "originator": "Person: Kornel Lesiński (kornel@geekhood.net)", "supplier": "Person: Kornel Lesiński (kornel@geekhood.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/http-cache-semantics/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.3.0:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/http-cache-semantics@4.3.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-http-proxy-agent-25e9761c15856b56", "name": "http-proxy-agent", "versionInfo": "9.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", "downloadLocation": "https://github.com/TooTallNate/proxy-agents.git", "originator": "Person: Nathan Rajlich (nathan@tootallnate.net)", "supplier": "Person: Nathan Rajlich (nathan@tootallnate.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/agent/node_modules/http-proxy-agent/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/http-proxy-agent@9.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-https-proxy-agent-024a9111bc1b0c47", "name": "https-proxy-agent", "versionInfo": "9.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", "downloadLocation": "https://github.com/TooTallNate/proxy-agents.git", "originator": "Person: Nathan Rajlich (nathan@tootallnate.net)", "supplier": "Person: Nathan Rajlich (nathan@tootallnate.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/agent/node_modules/https-proxy-agent/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:9.1.0:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/https-proxy-agent@9.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-iconv-lite-d09a9deec3a62818", "name": "iconv-lite", "versionInfo": "0.7.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Convert character encodings in pure javascript.", "downloadLocation": "https://github.com/pillarjs/iconv-lite.git", "originator": "Person: Alexander Shtuchkin (ashtuchkin@gmail.com)", "supplier": "Person: Alexander Shtuchkin (ashtuchkin@gmail.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/iconv-lite/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/iconv-lite@0.7.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-ignore-walk-c0d426ad5161b3df", "name": "ignore-walk", "versionInfo": "9.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", "downloadLocation": "git+https://github.com/npm/ignore-walk.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-packlist/node_modules/ignore-walk/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/ignore-walk@9.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-ini-da1fbfeb27bda454", "name": "ini", "versionInfo": "7.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "An ini encoder/decoder for node", "downloadLocation": "git+https://github.com/npm/ini.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/ini/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:ini_project:ini:7.0.0:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/ini@7.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-init-package-json-b8a0148d9e5ff107", "name": "init-package-json", "versionInfo": "9.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "A node module to get your node module started", "downloadLocation": "git+https://github.com/npm/init-package-json.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/init-package-json/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/init-package-json@9.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-ip-address-b6575bdabc5eb61e", "name": "ip-address", "versionInfo": "10.7.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.", "downloadLocation": "https://github.com/beaugunderson/ip-address.git", "originator": "Person: Beau Gunderson (beau@beaugunderson.com)", "supplier": "Person: Beau Gunderson (beau@beaugunderson.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/ip-address/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:beaugunderson:ip-address:10.7.4:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/ip-address@10.7.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-is-cidr-3253422549a3189f", "name": "is-cidr", "versionInfo": "7.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "description": "Check if a string is an IP address in CIDR notation", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/is-cidr/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/is-cidr@7.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-isexe-82d33a2afefe3e4f", "name": "isexe", "versionInfo": "4.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "Minimal module to check if a file is executable.", "downloadLocation": "https://github.com/isaacs/isexe", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/isexe/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/isexe@4.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-json-parse-even-better-errors-5c7f26fa9db247ce", "name": "json-parse-even-better-errors", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "JSON.parse with context information on error", "downloadLocation": "git+https://github.com/npm/json-parse-even-better-errors.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/json-parse-even-better-errors/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/json-parse-even-better-errors@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-json-stringify-nice-8081b3f75a8bab60", "name": "json-stringify-nice", "versionInfo": "1.1.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent", "downloadLocation": "https://github.com/isaacs/json-stringify-nice", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/json-stringify-nice/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/json-stringify-nice@1.1.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-jsonparse-f34fe5f77127a968", "name": "jsonparse", "versionInfo": "1.3.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "This is a pure-js JSON streaming parser for node.js", "downloadLocation": "http://github.com/creationix/jsonparse.git", "originator": "Person: Tim Caswell (tim@creationix.com)", "supplier": "Person: Tim Caswell (tim@creationix.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/jsonparse/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/jsonparse@1.3.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-just-diff-de0cbabab18664e1", "name": "just-diff", "versionInfo": "6.0.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol", "downloadLocation": "https://github.com/angus-c/just", "originator": "Person: Angus Croll", "supplier": "Person: Angus Croll", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/just-diff/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/just-diff@6.0.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-just-diff-apply-70253bd8211c0e5f", "name": "just-diff-apply", "versionInfo": "5.5.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Apply a diff to an object. Optionally supports jsonPatch protocol", "downloadLocation": "https://github.com/angus-c/just", "originator": "Person: Angus Croll", "supplier": "Person: Angus Croll", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/just-diff-apply/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/just-diff-apply@5.5.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmaccess-b949273dae7805d5", "name": "libnpmaccess", "versionInfo": "11.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "programmatic library for `npm access` commands", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmaccess/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmaccess@11.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmdiff-feb94e55dd4cdd3c", "name": "libnpmdiff", "versionInfo": "9.0.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "The registry diff", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc., Ruy Adorno", "supplier": "Person: GitHub Inc., Ruy Adorno", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmdiff/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmdiff@9.0.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmexec-1beddd7172f637ef", "name": "libnpmexec", "versionInfo": "11.0.5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "npm exec (npx) programmatic API", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc., Ruy Adorno", "supplier": "Person: GitHub Inc., Ruy Adorno", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmexec/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmexec@11.0.5", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmfund-a8f4cd0a91c9be50", "name": "libnpmfund", "versionInfo": "8.0.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Programmatic API for npm fund", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc., Ruy Adorno", "supplier": "Person: GitHub Inc., Ruy Adorno", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmfund/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmfund@8.0.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmorg-fefdc7d620d97fce", "name": "libnpmorg", "versionInfo": "9.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Programmatic api for `npm org` commands", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmorg/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmorg@9.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmpack-009f7f6e6b750f07", "name": "libnpmpack", "versionInfo": "10.0.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Programmatic API for the bits behind npm pack", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc., Claudia Hernández (claudia@npmjs.com)", "supplier": "Person: GitHub Inc., Claudia Hernández (claudia@npmjs.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmpack/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmpack@10.0.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmpublish-68534710b41ebaa7", "name": "libnpmpublish", "versionInfo": "12.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Programmatic API for the bits behind npm publish and unpublish", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmpublish/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmpublish@12.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmsearch-dca750e612f80469", "name": "libnpmsearch", "versionInfo": "10.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Programmatic API for searching in npm and compatible registries.", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmsearch/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmsearch@10.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmteam-bd8e2eb36722b77a", "name": "libnpmteam", "versionInfo": "9.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "npm Team management APIs", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmteam/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmteam@9.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-libnpmversion-7e2c24dac68f1b7e", "name": "libnpmversion", "versionInfo": "9.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "library to do the things that 'npm version' does", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/libnpmversion/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/libnpmversion@9.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-lru-cache-4bd6d31cd9898349", "name": "lru-cache", "versionInfo": "11.5.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "A cache object that deletes the least-recently-used items.", "downloadLocation": "NOASSERTION", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/lru-cache/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:isaacs:lru-cache:11.5.2:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/lru-cache@11.5.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-make-fetch-happen-6c168e6d54753c6e", "name": "make-fetch-happen", "versionInfo": "16.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Opinionated, caching, retrying fetch client", "downloadLocation": "git+https://github.com/npm/make-fetch-happen.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/make-fetch-happen/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/make-fetch-happen@16.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minimatch-d27853b5d786d464", "name": "minimatch", "versionInfo": "10.2.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "a glob matcher in javascript", "downloadLocation": "NOASSERTION", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minimatch/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:minimatch_project:minimatch:10.2.3:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minimatch@10.2.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minipass-cc9a744f1afc8a48", "name": "minipass", "versionInfo": "3.3.6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "minimal implementation of a PassThrough stream", "downloadLocation": "git+https://github.com/isaacs/minipass.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minipass@3.3.6", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minipass-4e87a8c731f2deec", "name": "minipass", "versionInfo": "7.1.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "minimal implementation of a PassThrough stream", "downloadLocation": "https://github.com/isaacs/minipass", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minipass/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minipass@7.1.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minipass-collect-ab5d6a51baec6ea8", "name": "minipass-collect", "versionInfo": "2.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "A Minipass stream that collects all the data into a single chunk", "downloadLocation": "https://github.com/isaacs/minipass-collect", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minipass-collect/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minipass-collect@2.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minipass-fetch-e411efa059822f60", "name": "minipass-fetch", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "An implementation of window.fetch in Node.js using Minipass streams", "downloadLocation": "git+https://github.com/npm/minipass-fetch.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minipass-fetch/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minipass-fetch@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minipass-flush-24704790eb7e5c58", "name": "minipass-flush", "versionInfo": "1.0.6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "A Minipass stream that calls a flush function before emitting 'end'", "downloadLocation": "git+https://github.com/isaacs/minipass-flush.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minipass-flush/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minipass-flush@1.0.6", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minipass-pipeline-03296cbe6bb69aec", "name": "minipass-pipeline", "versionInfo": "1.2.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "create a pipeline of streams using Minipass", "downloadLocation": "NOASSERTION", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minipass-pipeline/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minipass-pipeline@1.2.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minipass-sized-41fd0a29fe448d07", "name": "minipass-sized", "versionInfo": "2.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", "downloadLocation": "git+https://github.com/isaacs/minipass-sized.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minipass-sized/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minipass-sized@2.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-minizlib-2ec85b6ce54ef1a5", "name": "minizlib", "versionInfo": "3.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", "downloadLocation": "git+https://github.com/isaacs/minizlib.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minizlib/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/minizlib@3.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-ms-76b79eeb69458da8", "name": "ms", "versionInfo": "2.1.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Tiny millisecond conversion utility", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/ms/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/ms@2.1.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-mute-stream-72d7d416c8c3f12a", "name": "mute-stream", "versionInfo": "4.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Bytes go in, but they don't come out (when muted).", "downloadLocation": "git+https://github.com/npm/mute-stream.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/mute-stream/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/mute-stream@4.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-negotiator-e3db59355e56cb9a", "name": "negotiator", "versionInfo": "1.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "HTTP content negotiation", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/negotiator/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/negotiator@1.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-nopt-f358f20b14a6907d", "name": "nopt", "versionInfo": "10.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "downloadLocation": "git+https://github.com/npm/nopt.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/nopt/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/nopt@10.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-7a88ddb1898d9c2f", "name": "npm", "versionInfo": "12.2.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Artistic-2.0", "description": "a package manager for JavaScript", "downloadLocation": "git+https://github.com/npm/cli.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:node_packaged_modules_project:node_packaged_modules:12.2.2:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm@12.2.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "name": "npm-12", "versionInfo": "12.2.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Artistic-2.0", "description": "the npm package manager for javascript, mainline", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/npm-12@12.2.2-r0?arch=aarch64\u0026origin=npm-12", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-audit-report-016543391163bb62", "name": "npm-audit-report", "versionInfo": "8.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Given a response from the npm security api, render it into a variety of security reports", "downloadLocation": "git+https://github.com/npm/npm-audit-report.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-audit-report/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-audit-report@8.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-bundled-bec4110af6f2871a", "name": "npm-bundled", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", "downloadLocation": "git+https://github.com/npm/npm-bundled.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/node_modules/npm-bundled/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-bundled@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-install-checks-11bb30b694057228", "name": "npm-install-checks", "versionInfo": "9.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "description": "Check the engines and platform fields in package.json", "downloadLocation": "git+https://github.com/npm/npm-install-checks.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-install-checks/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-install-checks@9.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-normalize-package-bin-d45e000c07289c73", "name": "npm-normalize-package-bin", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Turn any flavor of allowable package.json bin into a normalized object", "downloadLocation": "git+https://github.com/npm/npm-normalize-package-bin.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/node_modules/npm-normalize-package-bin/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-normalize-package-bin@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-normalize-package-bin-3d030f780176a600", "name": "npm-normalize-package-bin", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Turn any flavor of allowable package.json bin into a normalized object", "downloadLocation": "git+https://github.com/npm/npm-normalize-package-bin.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/bin-links/node_modules/npm-normalize-package-bin/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-normalize-package-bin@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-normalize-package-bin-78d7441e2eb709d8", "name": "npm-normalize-package-bin", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Turn any flavor of allowable package.json bin into a normalized object", "downloadLocation": "git+https://github.com/npm/npm-normalize-package-bin.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-pick-manifest/node_modules/npm-normalize-package-bin/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-normalize-package-bin@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-package-arg-6a1b416c99ae0b5b", "name": "npm-package-arg", "versionInfo": "14.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Parse the things that can be arguments to `npm install`", "downloadLocation": "git+https://github.com/npm/npm-package-arg.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-package-arg/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-package-arg@14.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-packlist-649d7f93671d7fcc", "name": "npm-packlist", "versionInfo": "11.3.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Get a list of the files to add from a folder into an npm package", "downloadLocation": "git+https://github.com/npm/npm-packlist.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-packlist/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-packlist@11.3.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-pick-manifest-93467f6387ce5c1b", "name": "npm-pick-manifest", "versionInfo": "12.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", "downloadLocation": "git+https://github.com/npm/npm-pick-manifest.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-pick-manifest/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-pick-manifest@12.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-profile-ec5c91b565ef0710", "name": "npm-profile", "versionInfo": "13.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Library for updating an npmjs.com profile", "downloadLocation": "git+https://github.com/npm/npm-profile.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-profile/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-profile@13.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-registry-fetch-0d08812019303485", "name": "npm-registry-fetch", "versionInfo": "20.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Fetch-based http client for use with npm registry APIs", "downloadLocation": "git+https://github.com/npm/npm-registry-fetch.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-registry-fetch/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-registry-fetch@20.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-npm-user-validate-be2e9b61c6debe2d", "name": "npm-user-validate", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "description": "User validations for npm", "downloadLocation": "git+https://github.com/npm/npm-user-validate.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/npm-user-validate/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/npm-user-validate@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-p-map-442e9318ff0c6ac6", "name": "p-map", "versionInfo": "7.0.5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Map over promises concurrently", "downloadLocation": "NOASSERTION", "originator": "Person: Sindre Sorhus (sindresorhus@gmail.com)", "supplier": "Person: Sindre Sorhus (sindresorhus@gmail.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/p-map/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/p-map@7.0.5", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-pacote-5c2ce8291973b4fd", "name": "pacote", "versionInfo": "22.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "JavaScript package downloader", "downloadLocation": "git+https://github.com/npm/pacote.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/pacote/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/pacote@22.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-parse-conflict-json-a93d7a4f6ad5415a", "name": "parse-conflict-json", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Parse a JSON string that has git merge conflicts, resolving if possible", "downloadLocation": "git+https://github.com/npm/parse-conflict-json.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/parse-conflict-json/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/parse-conflict-json@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-path-scurry-835f46cf092aacdd", "name": "path-scurry", "versionInfo": "2.0.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "walk paths fast and efficiently", "downloadLocation": "git+https://github.com/isaacs/path-scurry", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/path-scurry/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/path-scurry@2.0.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-postcss-selector-parser-3ffb8f6a9e420e58", "name": "postcss-selector-parser", "versionInfo": "7.1.6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Selector parser with built in methods for working with selector strings.", "downloadLocation": "https://github.com/postcss/postcss-selector-parser.git", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/postcss-selector-parser@7.1.6", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-proc-log-adc9dcb372fa70db", "name": "proc-log", "versionInfo": "7.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "just emit 'log' events on the process object", "downloadLocation": "git+https://github.com/npm/proc-log.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/proc-log/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/proc-log@7.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-proggy-af207b8cf78693a5", "name": "proggy", "versionInfo": "4.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Progress bar updates at a distance", "downloadLocation": "git+https://github.com/npm/proggy.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/proggy/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/proggy@4.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-promise-all-reject-late-b890756bf76cef52", "name": "promise-all-reject-late", "versionInfo": "1.0.1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Like Promise.all, but save rejections until all promises are resolved", "downloadLocation": "NOASSERTION", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/promise-all-reject-late/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/promise-all-reject-late@1.0.1", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-promise-call-limit-f2679cd91423be43", "name": "promise-call-limit", "versionInfo": "3.0.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.", "downloadLocation": "git+https://github.com/isaacs/promise-call-limit", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/promise-call-limit/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/promise-call-limit@3.0.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-promzard-ad68635ebd55aa32", "name": "promzard", "versionInfo": "4.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "prompting wizardly", "downloadLocation": "git+https://github.com/npm/promzard.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/promzard/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/promzard@4.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-proxy-agent-negotiate-c80dd5e5f8863a8f", "name": "proxy-agent-negotiate", "versionInfo": "1.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Negotiate/SPNEGO proxy authentication for proxy-agents", "downloadLocation": "https://github.com/TooTallNate/proxy-agents.git", "originator": "Person: Nathan Rajlich (nathan@tootallnate.net)", "supplier": "Person: Nathan Rajlich (nathan@tootallnate.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/proxy-agent-negotiate/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/proxy-agent-negotiate@1.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-qrcode-terminal-e3cf662c228dab79", "name": "qrcode-terminal", "versionInfo": "0.12.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-Apache-2.0", "description": "QRCodes, in the terminal", "downloadLocation": "https://github.com/gtanner/qrcode-terminal", "originator": "Person: Gord Tanner (gtanner@gmail.com)", "supplier": "Person: Gord Tanner (gtanner@gmail.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/qrcode-terminal/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/qrcode-terminal@0.12.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-read-76df10319452372d", "name": "read", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "read(1) for node programs", "downloadLocation": "git+https://github.com/npm/read.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/read/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/read@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-read-cmd-shim-cf4d196f34ab0bfe", "name": "read-cmd-shim", "versionInfo": "7.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.", "downloadLocation": "git+https://github.com/npm/read-cmd-shim.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/bin-links/node_modules/read-cmd-shim/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/read-cmd-shim@7.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-safer-buffer-10e6e30886d6d4aa", "name": "safer-buffer", "versionInfo": "2.1.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Modern Buffer API polyfill without footguns", "downloadLocation": "git+https://github.com/ChALkeR/safer-buffer.git", "originator": "Person: Nikita Skovoroda (chalkerx@gmail.com)", "supplier": "Person: Nikita Skovoroda (chalkerx@gmail.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/safer-buffer/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/safer-buffer@2.1.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-semver-f34d69cfef7df290", "name": "semver", "versionInfo": "7.8.6", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "The semantic version parser used by npm.", "downloadLocation": "git+https://github.com/npm/node-semver.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/semver/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:npmjs:semver:7.8.6:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/semver@7.8.6", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-signal-exit-1f67dd9602633575", "name": "signal-exit", "versionInfo": "4.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "when you want to fire an event no matter how a process exits.", "downloadLocation": "https://github.com/tapjs/signal-exit.git", "originator": "Person: Ben Coe (ben@npmjs.com)", "supplier": "Person: Ben Coe (ben@npmjs.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/signal-exit/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/signal-exit@4.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-sigstore-6032563b3087911f", "name": "sigstore", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "description": "code-signing for npm packages", "downloadLocation": "git+https://github.com/sigstore/sigstore-js.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/sigstore/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:sigstore:sigstore:5.0.0:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/sigstore@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-smart-buffer-e247b7afb2536015", "name": "smart-buffer", "versionInfo": "4.2.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "smart-buffer is a Buffer wrapper that adds automatic read \u0026 write offset tracking, string operations, data insertions, and more.", "downloadLocation": "https://github.com/JoshGlazebrook/smart-buffer.git", "originator": "Person: Josh Glazebrook, syvita", "supplier": "Person: Josh Glazebrook, syvita", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/smart-buffer/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/smart-buffer@4.2.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-socks-5aec852ba6e3fee8", "name": "socks", "versionInfo": "2.8.9", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", "downloadLocation": "git+https://github.com/JoshGlazebrook/socks.git", "originator": "Person: Josh Glazebrook, castorw", "supplier": "Person: Josh Glazebrook, castorw", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/socks/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/socks@2.8.9", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-socks-proxy-agent-aa414cd21dd1f50e", "name": "socks-proxy-agent", "versionInfo": "10.1.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", "downloadLocation": "https://github.com/TooTallNate/proxy-agents.git", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/socks-proxy-agent/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/socks-proxy-agent@10.1.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-spdx-exceptions-4632ab817c13fb0f", "name": "spdx-exceptions", "versionInfo": "2.5.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-BY-3.0", "description": "list of SPDX standard license exceptions", "downloadLocation": "NOASSERTION", "originator": "Person: The Linux Foundation, Kyle E. Mitchell (kyle@kemitchell.com)", "supplier": "Person: The Linux Foundation, Kyle E. Mitchell (kyle@kemitchell.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/spdx-exceptions/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/spdx-exceptions@2.5.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-spdx-expression-parse-92044e14c09ee66b", "name": "spdx-expression-parse", "versionInfo": "4.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "parse SPDX license expressions", "downloadLocation": "NOASSERTION", "originator": "Person: Kyle E. Mitchell (kyle@kemitchell.com)", "supplier": "Person: Kyle E. Mitchell (kyle@kemitchell.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/spdx-expression-parse/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/spdx-expression-parse@4.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-spdx-license-ids-41064f8e89207737", "name": "spdx-license-ids", "versionInfo": "3.0.23", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC0-1.0", "description": "A list of SPDX license identifiers", "downloadLocation": "NOASSERTION", "originator": "Person: Shinnosuke Watanabe", "supplier": "Person: Shinnosuke Watanabe", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/spdx-license-ids/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/spdx-license-ids@3.0.23", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-ssri-388955da23eade92", "name": "ssri", "versionInfo": "14.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", "downloadLocation": "git+https://github.com/npm/ssri.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/ssri/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:ssri_project:ssri:14.0.0:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/ssri@14.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-supports-color-98f3856e49a7323d", "name": "supports-color", "versionInfo": "10.2.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Detect whether a terminal supports color", "downloadLocation": "NOASSERTION", "originator": "Person: Sindre Sorhus (sindresorhus@gmail.com)", "supplier": "Person: Sindre Sorhus (sindresorhus@gmail.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/supports-color/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/supports-color@10.2.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-tar-91ac5c770afa50ab", "name": "tar", "versionInfo": "7.5.21", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "tar for node", "downloadLocation": "https://github.com/isaacs/node-tar.git", "originator": "Person: Isaac Z. Schlueter", "supplier": "Person: Isaac Z. Schlueter", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/tar/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:tar_project:tar:7.5.21:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:tar_project:tar:7.5.21:*:*:*:*:rust:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:isaacs:tar:7.5.21:*:*:*:*:node.js:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/tar@7.5.21", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-text-table-963631d558d1acb8", "name": "text-table", "versionInfo": "0.2.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "borderless text tables with alignment", "downloadLocation": "git://github.com/substack/text-table.git", "originator": "Person: James Halliday (mail@substack.net)", "supplier": "Person: James Halliday (mail@substack.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/text-table/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/text-table@0.2.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-tiny-relative-date-00e121be52619bc0", "name": "tiny-relative-date", "versionInfo": "2.0.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Tiny function that provides relative, human-readable dates.", "downloadLocation": "https://github.com/wildlyinaccurate/relative-date.git", "originator": "Person: Joseph Wynn (joseph@wildlyinaccurate.com)", "supplier": "Person: Joseph Wynn (joseph@wildlyinaccurate.com)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/tiny-relative-date/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/tiny-relative-date@2.0.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-treeverse-06766b04304999d5", "name": "treeverse", "versionInfo": "3.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.", "downloadLocation": "https://github.com/npm/treeverse.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/treeverse/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/treeverse@3.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-tuf-js-b593e12bc7a164c5", "name": "tuf-js", "versionInfo": "6.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "JavaScript implementation of The Update Framework (TUF)", "downloadLocation": "git+https://github.com/theupdateframework/tuf-js.git", "originator": "Person: bdehamer@github.com", "supplier": "Person: bdehamer@github.com", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/tuf-js/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/tuf-js@6.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-util-deprecate-b68f8a2f0b30c86b", "name": "util-deprecate", "versionInfo": "1.0.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "The Node.js `util.deprecate()` function with browser support", "downloadLocation": "git://github.com/TooTallNate/util-deprecate.git", "originator": "Person: Nathan Rajlich (nathan@tootallnate.net)", "supplier": "Person: Nathan Rajlich (nathan@tootallnate.net)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/util-deprecate/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/util-deprecate@1.0.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-validate-npm-package-name-0e93c78882cce8ce", "name": "validate-npm-package-name", "versionInfo": "8.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Give me a string and I'll tell you if it's a valid npm package name", "downloadLocation": "git+https://github.com/npm/validate-npm-package-name.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/validate-npm-package-name/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/validate-npm-package-name@8.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-walk-up-path-ad618b6027e250b6", "name": "walk-up-path", "versionInfo": "4.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Given a path string, return a generator that walks up the path, emitting each dirname.", "downloadLocation": "git+https://github.com/isaacs/walk-up-path", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/walk-up-path/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/walk-up-path@4.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-which-6fd4a7d76f437ee4", "name": "which", "versionInfo": "7.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "downloadLocation": "git+https://github.com/npm/node-which.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/which/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/which@7.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-write-file-atomic-917d49b77ed2d4a3", "name": "write-file-atomic", "versionInfo": "8.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Write files in an atomic fashion w/configurable ownership", "downloadLocation": "git+https://github.com/npm/write-file-atomic.git", "originator": "Person: GitHub Inc.", "supplier": "Person: GitHub Inc.", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/write-file-atomic/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/write-file-atomic@8.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-yallist-bb982a6713b948e5", "name": "yallist", "versionInfo": "4.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "ISC", "description": "Yet Another Linked List", "downloadLocation": "git+https://github.com/isaacs/yallist.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/yallist@4.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-yallist-c4d56b72d1baa6db", "name": "yallist", "versionInfo": "5.0.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BlueOak-1.0.0", "description": "Yet Another Linked List", "downloadLocation": "git+https://github.com/isaacs/yallist.git", "originator": "Person: Isaac Z. Schlueter (i@izs.me)", "supplier": "Person: Isaac Z. Schlueter (i@izs.me)", "sourceInfo": "acquired package info from installed node module manifest file: usr/lib/node_modules/npm/node_modules/yallist/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/yallist@5.0.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-npm-12", "name": "npm-12", "versionInfo": "12.2.2-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-pnpm-11.8-11.8.0-r5", "name": "pnpm-11.8", "versionInfo": "11.8.0-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/pnpm-11.8@11.8.0-r5?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-pnpm-11.8.yaml-cdb890161af416ef3bb2a726565b6ff060395754", "name": "pnpm-11.8.yaml", "versionInfo": "cdb890161af416ef3bb2a726565b6ff060395754", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@cdb890161af416ef3bb2a726565b6ff060395754#pnpm-11.8.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-pnpm-pnpm-v11.8.0-93458600a8498412f85316d054e033319ba31ed6-0", "name": "pnpm", "versionInfo": "v11.8.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/pnpm/pnpm/archive/93458600a8498412f85316d054e033319ba31ed6.tar.gz", "originator": "Organization: Pnpm", "supplier": "Organization: Pnpm", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/pnpm/pnpm@v11.8.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-pnpm-11.8-73d121d3a4c6117f", "name": "pnpm-11.8", "versionInfo": "11.8.0-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "Fast, disk space efficient package manager", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/pnpm-11.8@11.8.0-r5?arch=aarch64\u0026origin=pnpm-11.8", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-pnpm-11.8", "name": "pnpm-11.8", "versionInfo": "11.8.0-r5", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "name": "py3-pip-wheel", "versionInfo": "26.2.2-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/py3-pip-wheel@26.2.2-r2?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-py3-pip.yaml-58b78718f8e8947523a1ad3eb0deb82aee6911d7", "name": "py3-pip.yaml", "versionInfo": "58b78718f8e8947523a1ad3eb0deb82aee6911d7", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@58b78718f8e8947523a1ad3eb0deb82aee6911d7#py3-pip.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-pypa-pip-26.2.2-b3b696fe2122f2339d782517559bfade2cb6b879-0", "name": "pip", "versionInfo": "26.2.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/pypa/pip/archive/b3b696fe2122f2339d782517559bfade2cb6b879.tar.gz", "originator": "Organization: Pypa", "supplier": "Organization: Pypa", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/pypa/pip@26.2.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-urllib3-urllib3-2.8.0-b1d30ab61fe0db8f11092805e8c5ac43e091064a-2", "name": "urllib3", "versionInfo": "2.8.0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/urllib3/urllib3/archive/b1d30ab61fe0db8f11092805e8c5ac43e091064a.tar.gz", "originator": "Organization: Urllib3", "supplier": "Organization: Urllib3", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/urllib3/urllib3@2.8.0", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-msgpack-msgpack-python-v1.2.3-742cb6d7ad141343edcccc829b5b06d0c6f8fcb5-3", "name": "msgpack-python", "versionInfo": "v1.2.3", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/msgpack/msgpack-python/archive/742cb6d7ad141343edcccc829b5b06d0c6f8fcb5.tar.gz", "originator": "Organization: Msgpack", "supplier": "Organization: Msgpack", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/msgpack/msgpack-python@v1.2.3", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-certifi-python-certifi-2026.10.23-b60466c9f2882d9cf088943c650b0faac06c080c-4", "name": "python-certifi", "versionInfo": "2026.10.23", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "downloadLocation": "https://github.com/certifi/python-certifi/archive/b60466c9f2882d9cf088943c650b0faac06c080c.tar.gz", "originator": "Organization: Certifi", "supplier": "Organization: Certifi", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/certifi/python-certifi@2026.10.23", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-python-pip-4e6f3f5c92b2698c", "name": "pip", "versionInfo": "26.2.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed python package manifest file: usr/share/python-wheels/pip-26.2.2-py3-none-any.whl", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:pypi/pip@26.2.2", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-py3-pip-wheel-f8febf0c4eeb5aea", "name": "py3-pip-wheel", "versionInfo": "26.2.2-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "description": "wheel of pip", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/py3-pip-wheel@26.2.2-r2?arch=aarch64\u0026origin=py3-pip", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-py3-pip-wheel", "name": "py3-pip-wheel", "versionInfo": "26.2.2-r2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-xz-5.8.4-r1", "name": "xz", "versionInfo": "5.8.4-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/xz@5.8.4-r1?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-xz.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "name": "xz.yaml", "versionInfo": "5aeb575ed7ca64fb21dfda042e170d08f1654bbc", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@5aeb575ed7ca64fb21dfda042e170d08f1654bbc#xz.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-tukaani-project-xz-v5.8.4-d3e650e63c110e830fd5391e7f8b45df0b91d3da-0", "name": "xz", "versionInfo": "v5.8.4", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "downloadLocation": "https://github.com/tukaani-project/xz/archive/d3e650e63c110e830fd5391e7f8b45df0b91d3da.tar.gz", "originator": "Organization: Tukaani-Project", "supplier": "Organization: Tukaani-Project", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/tukaani-project/xz@v5.8.4", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-xz-9348e79a976cf12a", "name": "xz", "versionInfo": "5.8.4-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-3.0-or-later", "description": "Library and CLI tools for XZ and LZMA compressed files", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/xz@5.8.4-r1?arch=aarch64\u0026origin=xz", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-xz", "name": "xz", "versionInfo": "5.8.4-r1", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0", "name": "python-3.13-base", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/python-3.13-base@3.13.18_git20261030-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-python-3.13.yaml-52a27d12b5ebd918e282db0e2ff573eec6e57aeb", "name": "python-3.13.yaml", "versionInfo": "52a27d12b5ebd918e282db0e2ff573eec6e57aeb", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@52a27d12b5ebd918e282db0e2ff573eec6e57aeb#python-3.13.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-python-cpython-3.13-42155a0feaca9ba6991942c323cbe9fb7278be3c-0", "name": "cpython", "versionInfo": "42155a0feaca9ba6991942c323cbe9fb7278be3c", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "downloadLocation": "https://github.com/python/cpython/archive/42155a0feaca9ba6991942c323cbe9fb7278be3c.tar.gz", "originator": "Organization: Python", "supplier": "Organization: Python", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/python/cpython@42155a0feaca9ba6991942c323cbe9fb7278be3c", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-python-3.13-base-c5e711b20bfe5612", "name": "python-3.13-base", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "description": "python-3.13 without /usr/bin/python3", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/python-3.13-base@3.13.18_git20261030-r0?arch=aarch64\u0026origin=python-3.13", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-python-3.13-base", "name": "python-3.13-base", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0", "name": "python-3.13", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/python-3.13@3.13.18_git20261030-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-python-3.13-11dd55cbd97276c0", "name": "python-3.13", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "PSF-2.0", "description": "the Python programming language", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/python-3.13@3.13.18_git20261030-r0?arch=aarch64\u0026origin=python-3.13", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-python-3.13", "name": "python-3.13", "versionInfo": "3.13.18_git20261030-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-tzdata-2026f-r0", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2", "name": "tzdata.yaml", "versionInfo": "b01ceefc114cf44ccb6d35f405795435f98bf0c2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@b01ceefc114cf44ccb6d35f405795435f98bf0c2#tzdata.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0", "name": "tz", "versionInfo": "2026f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "downloadLocation": "https://github.com/eggert/tz/archive/a6cb1a1cebcc96269a02b25323c1a9424e3349a8.tar.gz", "originator": "Organization: Eggert", "supplier": "Organization: Eggert", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/eggert/tz@2026f", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-tzdata-c9ffaae8b2257589", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "CC-PDDC", "description": "Timezone data provided by IANA", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/tzdata@2026f-r0?arch=aarch64\u0026origin=tzdata", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-tzdata", "name": "tzdata", "versionInfo": "2026f-r0", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" }, { "SPDXID": "SPDXRef-Package-apk-yarn-1.22.22-r8", "name": "yarn", "versionInfo": "1.22.22-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/yarn@1.22.22-r8?arch=aarch64\u0026distro=wolfi", "referenceType": "purl" }, { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:yarnpkg:yarn:1.22.22:*:*:*:*:*:*:*", "referenceType": "cpe23Type" } ] }, { "SPDXID": "SPDXRef-Package-Melange-yarn.yaml-07b6c68377f0678af0c1cbf2bcbb3a35fbe7dd2f", "name": "yarn.yaml", "versionInfo": "07b6c68377f0678af0c1cbf2bcbb3a35fbe7dd2f", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: Wolfi", "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/chainguard-dev/stereo@07b6c68377f0678af0c1cbf2bcbb3a35fbe7dd2f#yarn.yaml", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-Source-github.com-yarnpkg-yarn-v1.22.22-740c38c3a962c30ddb344a919bbfb7065620714b-0", "name": "yarn", "versionInfo": "v1.22.22", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "downloadLocation": "https://github.com/yarnpkg/yarn/archive/740c38c3a962c30ddb344a919bbfb7065620714b.tar.gz", "originator": "Organization: Yarnpkg", "supplier": "Organization: Yarnpkg", "primaryPackagePurpose": "SOURCE", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/yarnpkg/yarn@v1.22.22", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-npm-yarn-746a75811473ed81", "name": "yarn", "versionInfo": "1.22.22", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "description": "📦🐈 Fast, reliable, and secure dependency management.", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from installed node module manifest file: usr/share/node_modules/yarn/package.json", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:npm/yarn@1.22.22", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-Package-apk-yarn-a388a32cb1753e55", "name": "yarn", "versionInfo": "1.22.22-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-2-Clause", "description": "Fast, reliable, and secure dependency management for Node.js", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "sourceInfo": "acquired package info from APK DB: /.PKGINFO", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:a:yarnpkg:yarn:1.22.22-r8:*:*:*:*:*:*:*", "referenceType": "cpe23Type" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:apk/wolfi/yarn@1.22.22-r8?arch=aarch64\u0026origin=yarn", "referenceType": "purl" } ] }, { "SPDXID": "SPDXRef-DocumentRoot-Directory-yarn", "name": "yarn", "versionInfo": "1.22.22-r8", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Wolfi", "supplier": "Organization: chainguard", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE" } ], "relationships": [ { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-ImageLayer-sha256-61cef043250aed282f53e839b9f1792f873475296148fa9b11b8155853b57cb8" }, { "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-wolfi-baselayout.yaml-ed415005c84750f03c4a9252137813734a224ae7" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-10b2691c19a945ed" }, { "spdxElementId": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-wolfi-baselayout" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-wolfi-baselayout-20230201-r31" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ca-certificates.yaml-8061afafa65af5a9026707a8880e14120dd6f4a0" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.alpinelinux.org-alpine-ca-certificates-20261020-2058424fda70ee478bcce872dcf141a0c5499ee0-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-39152a1ba5759050" }, { "spdxElementId": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ca-certificates-bundle" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ca-certificates-bundle-20261020-r0" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-e2c2b3125b2659a5" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44-locale-posix" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-locale-posix-2.44-r14" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libgcc", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-6f0563db807ae406" }, { "spdxElementId": "SPDXRef-Package-apk-libgcc-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libgcc" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgcc-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-94bbc3326135f6b7" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-2.44-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-2.44-r14" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-7fd0b6ac1f498b59" }, { "spdxElementId": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ld-linux-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ld-linux-2.44-2.44-r14" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-d4376d4149bf9b00" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses-terminfo-base" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-terminfo-base-6.6.20261107-r0" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ncurses.yaml-57b90c0084b0bc101663cdfcaa44f4ce83312443" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ThomasDickey-ncurses-snapshots-v6C956C9520261107-7404b376832583182c52722dc09d86b8675db375-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ncurses", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-fe6e9d338447068c" }, { "spdxElementId": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ncurses" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ncurses-6.6.20261107-r0" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-bash.yaml-ac7b15dc2695924986372a27cd7d6c4e029c5efa" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-bash.git-bash-5.3-b8c60bc9ca365f8261fa97900b6fa939f6ebc303-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-bash", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-bash-8fcfdb8c2df1d6c6" }, { "spdxElementId": "SPDXRef-Package-apk-bash-5.3-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-bash" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-bash-5.3-r14" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libstdc--", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdc---d49b493ee2e3bbae" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libstdc--" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdcC43C43-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-zlib.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-madler-zlib-develop-767c4c947852e143f582c85f14cf573411df1b35-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-zlib", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-zlib-1dd8dbeab0faefff" }, { "spdxElementId": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-zlib" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-zlib-1.3.2.1C95rc20260921-r2" }, { "spdxElementId": "SPDXRef-Package-apk-libzstd1-1.5.7-r13", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-zstd.yaml-0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7" }, { "spdxElementId": "SPDXRef-Package-apk-libzstd1-1.5.7-r13", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-facebook-zstd-v1.5.7-f8745da6ff1ad1e7bab384bd1f9d742439278e99-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libzstd1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libzstd1-cecd9c4f8a1f1ddf" }, { "spdxElementId": "SPDXRef-Package-apk-libzstd1-1.5.7-r13", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libzstd1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libzstd1-1.5.7-r13" }, { "spdxElementId": "SPDXRef-Package-apk-binutils-2.47-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-binutils.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-binutils-2.47-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-binutils-gdb.git-binutils-2C9547-6ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-binutils", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-binutils-1e8a1ecfca898ef1" }, { "spdxElementId": "SPDXRef-Package-apk-binutils-2.47-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-binutils" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-binutils-2.47-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libxcrypt", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-673cf320fa080268" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libxcrypt" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-4.5.2-r8" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libxcrypt.yaml-b9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-besser82-libxcrypt-v4.5.2-db70b42bd7b2a5b00a8580c8dec0aa66791c950a-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libxcrypt-dev", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-dev-8c2338cb2aa23912" }, { "spdxElementId": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libxcrypt-dev" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libxcrypt-dev-4.5.2-r8" }, { "spdxElementId": "SPDXRef-Package-apk-linux-headers-7.3.3-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-linux-headers.yaml-eeddf20cbd03c0444c2f0ff756eaf232fd6e6954" }, { "spdxElementId": "SPDXRef-Package-apk-linux-headers-7.3.3-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-gregkh-linux-v7.3.3-d50d994bffa3c7c6db2d8bc4c5f0c55e3f46b0cd-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-linux-headers", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-linux-headers-fff820186b196074" }, { "spdxElementId": "SPDXRef-Package-apk-linux-headers-7.3.3-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-linux-headers" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-linux-headers-7.3.3-r0" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-glibc-2.44-dev", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-dev-76ca689b69148c48" }, { "spdxElementId": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-glibc-2.44-dev" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-glibc-2.44-dev-2.44-r14" }, { "spdxElementId": "SPDXRef-Package-apk-libquadmath-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libquadmath-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libquadmath", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libquadmath-eced2a8c338f6266" }, { "spdxElementId": "SPDXRef-Package-apk-libquadmath-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libquadmath" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libquadmath-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libstdc---dev", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdc---dev-9471f042b8187882" }, { "spdxElementId": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libstdc---dev" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libstdcC43C43-dev-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-openssf-compiler-options-20250904-r12", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssf-compiler-options.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssf-compiler-options", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssf-compiler-options-210ef94615c3fa51" }, { "spdxElementId": "SPDXRef-Package-apk-openssf-compiler-options-20250904-r12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssf-compiler-options" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssf-compiler-options-20250904-r12" }, { "spdxElementId": "SPDXRef-Package-apk-posix-cc-wrappers-2-r10", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-posix-cc-wrappers.yaml-2337ebe7af4495f2fe254da240c747c753c2f87c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-posix-cc-wrappers", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-posix-cc-wrappers-632bd7516159d11f" }, { "spdxElementId": "SPDXRef-Package-apk-posix-cc-wrappers-2-r10", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-posix-cc-wrappers" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-posix-cc-wrappers-2-r10" }, { "spdxElementId": "SPDXRef-Package-apk-libatomic-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libatomic-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libatomic", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libatomic-e813bd19ce98ec2c" }, { "spdxElementId": "SPDXRef-Package-apk-libatomic-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libatomic" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libatomic-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-gmp-6.3.0-r12", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gmp.yaml-443eb31899638f2f252b0e587db298058036ba64" }, { "spdxElementId": "SPDXRef-Package-apk-gmp-6.3.0-r12", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gmp-6.3.0-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-gmp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gmp-d6ad0f29a7de0f81" }, { "spdxElementId": "SPDXRef-Package-apk-gmp-6.3.0-r12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-gmp" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gmp-6.3.0-r12" }, { "spdxElementId": "SPDXRef-Package-apk-libgomp-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-libgomp-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libgomp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgomp-125fda46fec4bf7c" }, { "spdxElementId": "SPDXRef-Package-apk-libgomp-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libgomp" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libgomp-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-isl-0.28-r6", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-isl.yaml-443eb31899638f2f252b0e587db298058036ba64" }, { "spdxElementId": "SPDXRef-Package-apk-isl-0.28-r6", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-repo.or.cz-isl.git-isl-0.28-6c2b19a0405759f4d31bf48b73492be4a2b1d813-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-isl", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-isl-8d545a41d55d54ef" }, { "spdxElementId": "SPDXRef-Package-apk-isl-0.28-r6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-isl" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-isl-0.28-r6" }, { "spdxElementId": "SPDXRef-Package-apk-mpfr-4.2.2-r5", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-mpfr.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-mpfr-4.2.2-r5", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.inria.fr-mpfr-mpfr.git-4.2.2-eaa57b856d814af32f97d5e5eb129fb986235323-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-mpfr", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpfr-c34be4c04688944b" }, { "spdxElementId": "SPDXRef-Package-apk-mpfr-4.2.2-r5", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-mpfr" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpfr-4.2.2-r5" }, { "spdxElementId": "SPDXRef-Package-apk-mpc-1.4.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-mpc.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-mpc-1.4.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.inria.fr-mpc-mpc.git-1.4.1-532a18ae8222f928c58f7ffd1b4f0122062172bd-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-mpc", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpc-930fd1d45bf5075e" }, { "spdxElementId": "SPDXRef-Package-apk-mpc-1.4.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-mpc" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpc-1.4.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-gcc-16.2.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gcc.yaml-4d188060cbd00821a95f1ef60605da4817e781bb" }, { "spdxElementId": "SPDXRef-Package-apk-gcc-16.2.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-gcc.git-releases-gcc-16.2.0-78d4ac73dd391005b895a6148cd9831e28e1208b-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-gcc", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gcc-0e6e3694b0231f23" }, { "spdxElementId": "SPDXRef-Package-apk-gcc-16.2.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-gcc" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gcc-16.2.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-make-4.4.1-r15", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-make.yaml-a54c6ffd90cbe4bb3ea62488789234b189e71bd5" }, { "spdxElementId": "SPDXRef-Package-apk-make-4.4.1-r15", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-make.git-4.4.1-d66a65ad5a0e31b287f53930b0f09e31801f1613-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-make", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-make-5690278a28233d1e" }, { "spdxElementId": "SPDXRef-Package-apk-make-4.4.1-r15", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-make" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-make-4.4.1-r15" }, { "spdxElementId": "SPDXRef-Package-apk-pkgconf-3.0.10-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-pkgconf.yaml-40e94215f5dcd578d6e737bd1b126cdbb5acf9cb" }, { "spdxElementId": "SPDXRef-Package-apk-pkgconf-3.0.10-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-pkgconf-pkgconf-pkgconf-3.0.10-511e6e6b8c82367e75d02edb56ad98da766e06b6-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-pkgconf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-pkgconf-6f387a3bcd6a4956" }, { "spdxElementId": "SPDXRef-Package-apk-pkgconf-3.0.10-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-pkgconf" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-pkgconf-3.0.10-r2" }, { "spdxElementId": "SPDXRef-Package-apk-build-base-1-r10", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-build-base.yaml-fc2e1e90888cd6bc7249d14081f49118edd5dab7" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-build-base", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-build-base-156943bbea3d824c" }, { "spdxElementId": "SPDXRef-Package-apk-build-base-1-r10", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-build-base" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-build-base-1-r10" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-glibc-2.44.yaml-86ee3612cb47379928ac34ad99dfbfd45d138ff9" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-gnutools-glibc.git-release-2.44-master-c5c6fc6f449dbc95e3a68cacd61852dc0a48e57c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-07e91cda91134f6e" }, { "spdxElementId": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcrypt1-2.44" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcrypt1-2.44-2.44-r14" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-busybox.yaml-59d45eb49286129d8d21b2469befa3b55be4719b" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-vda-linux-busyboxC95mirror-1C9538C950-fc71374dfccd46448c62947269a35f1420d7ee28-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-busybox", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-busybox-3debcaeac335b503" }, { "spdxElementId": "SPDXRef-Package-apk-busybox-1.38.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-busybox" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-busybox-1.38.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-c-ares-1.34.9-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-c-ares.yaml-af6b55f0eea2dce5a488569d02ea2c396f46effd" }, { "spdxElementId": "SPDXRef-Package-apk-c-ares-1.34.9-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-c-ares-c-ares-v1.34.9-bc91829cce983a35ec01f5dbc05465858a3df469-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-c-ares", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-c-ares-e97328716bcafcaa" }, { "spdxElementId": "SPDXRef-Package-apk-c-ares-1.34.9-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-c-ares" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-c-ares-1.34.9-r0" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-provider-legacy-allowed.yaml-aeae4801330be6fd269d5ed5640dc37b58ccab09" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.1.0-2f4e3a5fec05394068cfa7379890ab552483a8a6-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-db13521aee4e9c16" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-provider-legacy-allowed" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-provider-legacy-allowed-4.1.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlicommon1-4cfba742c9bc8e0d" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlicommon1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlicommon1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlidec1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlidec1-7682b7a41fbe0c53" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlidec1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlidec1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-brotli.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-google-brotli.git-v1.2.1-db24a98aed38a16de78cc05ca15cdd8dc2a0d92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbrotlienc1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlienc1-9032cd875fed45d9" }, { "spdxElementId": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbrotlienc1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbrotlienc1-1.2.1-r3" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libcrypto-12ff2dbbb7bfc81c" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libcrypto" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libcrypto-4.0.3-r8" }, { "spdxElementId": "SPDXRef-Package-apk-gdbm-1.26-r9", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-gdbm.yaml-443eb31899638f2f252b0e587db298058036ba64" }, { "spdxElementId": "SPDXRef-Package-apk-gdbm-1.26-r9", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-gdbm.git-v1.26-8ca8f03ab6cc125139a395ec2d522aebb15f8060-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-gdbm", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gdbm-7c71982fcefc1584" }, { "spdxElementId": "SPDXRef-Package-apk-gdbm-1.26-r9", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-gdbm" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-gdbm-1.26-r9" }, { "spdxElementId": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-lmdb.yaml-a4a523651db588c0ec27f7880438828e0eefec5a" }, { "spdxElementId": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-LMDB-lmdb.git-LMDBC950.9.35-69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-lmdb", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-lmdb-6e9b5be743f2a982" }, { "spdxElementId": "SPDXRef-Package-apk-lmdb-0.9.35-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-lmdb" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-lmdb-0.9.35-r3" }, { "spdxElementId": "SPDXRef-Package-apk-readline-8.3-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-readline.yaml-20a5359ac0a7a6aca23efa343f0f29c8d3ea1453" }, { "spdxElementId": "SPDXRef-Package-apk-readline-8.3-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-git.savannah.gnu.org-git-readline.git-readline-8.3-447b8290b3e2e2d117dc8e9cdb83b0dc6448a638-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-readline", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-readline-ce2ac74b9aec712c" }, { "spdxElementId": "SPDXRef-Package-apk-readline-8.3-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-readline" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-readline-8.3-r3" }, { "spdxElementId": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-sqlite.yaml-b0ca8c95606371be2557980059c10b34df30fa9f" }, { "spdxElementId": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-sqlite-3.54.1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-sqlite-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-sqlite-libs-5fc3c1d467f94c6d" }, { "spdxElementId": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-sqlite-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-sqlite-libs-3.54.1-r0" }, { "spdxElementId": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-heimdal.yaml-98d0e0fa47c531020de219448a43d120a8c0360a" }, { "spdxElementId": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-heimdal-heimdal-heimdal-7.8.0-a6cf94577c0d1e5bca5304342e4ddffb18255afe-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-heimdal-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-heimdal-libs-6466eb5bb4aa80c4" }, { "spdxElementId": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-heimdal-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-heimdal-libs-7.8.0-r55" }, { "spdxElementId": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-cyrus-sasl-heimdal.yaml-6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78" }, { "spdxElementId": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-cyrusimap-cyrus-sasl.git-cyrus-sasl-2.1.28-7a6b45b177070198fed0682bea5fa87c18abb084-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-cyrus-sasl-heimdal-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-fb4ec8f36333762d" }, { "spdxElementId": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-cyrus-sasl-heimdal-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-cyrus-sasl-heimdal-libs-2.1.28-r58" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-conf-1.0-r10", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-krb5-conf.yaml-f0f4cc5b0d900deaf94dfdcd841e289db97111e1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-krb5-conf", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-conf-b4e1ca5d34e15b9e" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-conf-1.0-r10", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-krb5-conf" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-conf-1.0-r10" }, { "spdxElementId": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-e2fsprogs.yaml-b89fefe984e6541788116bd15d4f8dce3dc021a9" }, { "spdxElementId": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-tytso-e2fsprogs-v1.47.4-7ee1d505ef3b37831215f490411f346fe57e9053-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcom-err", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcom-err-1abd12a37cdb1a36" }, { "spdxElementId": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcom-err" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcomC95err-1.47.4-r5" }, { "spdxElementId": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-keyutils.yaml-014624f79627768df6f5ff49f4265a7057c2e206" }, { "spdxElementId": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-linux-kernel-git-dhowells-keyutils.git-v1.6.3-cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-keyutils-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-keyutils-libs-3f2a0f44e7289356" }, { "spdxElementId": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-keyutils-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-keyutils-libs-1.6.3-r41" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openssl-4.0.yaml-53fb2f6751f832fa61ddba06cb8a40dbba5f409f" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openssl-openssl-openssl-4.0.3-af1775b60dfa141a4ad762585052cabeb9f37e9e-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libssl-120767333b011958" }, { "spdxElementId": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-openssl-4.0-libssl" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-openssl-4.0-libssl-4.0.3-r8" }, { "spdxElementId": "SPDXRef-Package-apk-libverto-0.3.2-r11", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libverto.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-libverto-0.3.2-r11", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-latchset-libverto-0.3.2-1e8f574f702f270d96e42348e7cc088da5acc9ae-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libverto", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libverto-5541cdf6b32b3e46" }, { "spdxElementId": "SPDXRef-Package-apk-libverto-0.3.2-r11", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libverto" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libverto-0.3.2-r11" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-krb5.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-krb5-krb5.git-krb5-1.22.2-final-8570e77819563e036027e1da789d08ec9333ed4d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-krb5-libs", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-libs-55983142037434b6" }, { "spdxElementId": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-krb5-libs" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-krb5-libs-1.22.2-r6" }, { "spdxElementId": "SPDXRef-Package-apk-libunistring-1.5-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libunistring.yaml-d8c1739b8ac0376433f810660cfe5c19987e66d2" }, { "spdxElementId": "SPDXRef-Package-apk-libunistring-1.5-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-https.git.savannah.gnu.org-git-libunistring.git-v1.5-9a0b11a515258048ba17f05009cbd317298de92d-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libunistring", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libunistring-c217a539699bc978" }, { "spdxElementId": "SPDXRef-Package-apk-libunistring-1.5-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libunistring" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libunistring-1.5-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libidn2.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-gitlab.com-libidn-libidn2-v2.3.8-9bc3ac79e2ae81ade245a0e308bf13c981efaa83-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libidn2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libidn2-9d8572c340a94c5b" }, { "spdxElementId": "SPDXRef-Package-apk-libidn2-2.3.8-r12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libidn2" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libidn2-2.3.8-r12" }, { "spdxElementId": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-openldap-2.7.yaml-0906e934a58fa878f8d3cfa650c6aab092cc7f26" }, { "spdxElementId": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-openldap-openldap.git-OPENLDAPC95RELC95ENGC952C957C952-5030280ed039f03fe7725a21f892d7f4e0b98076-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libldap-2.7", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libldap-2.7-fda93f6e5cb8b10f" }, { "spdxElementId": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libldap-2.7" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libldap-2.7-2.7.2-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-nghttp2.yaml-153ee2bd742f744ddedf5c4a97110fa46307574b" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-nghttp2-nghttp2.git-v1.71.0-80dcb8140af050fac91a7e6af4fc6dd013404bd1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libnghttp2-14", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libnghttp2-14-f0405241798ad783" }, { "spdxElementId": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libnghttp2-14" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libnghttp2-14-1.71.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-nghttp3.yaml-10e9291816e1a18eee8044d5c02177de477e1f29" }, { "spdxElementId": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ngtcp2-nghttp3.git-v1.19.0-dc83309ca5fd2beb91cc5c030a2d30525e9f2a00-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-nghttp3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nghttp3-55243b5027774927" }, { "spdxElementId": "SPDXRef-Package-apk-nghttp3-1.19.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-nghttp3" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nghttp3-1.19.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-ngtcp2.yaml-a3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78" }, { "spdxElementId": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-ngtcp2-ngtcp2.git-v1.26.0-6a22a4d7a111f6b52391910e40ad3681a09cfb9c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-ngtcp2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ngtcp2-21585986ccd703d4" }, { "spdxElementId": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-ngtcp2" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-ngtcp2-1.26.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libpsl.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-rockdaboot-libpsl.git-0.23.3-c486db8d221cbac55f87508d4da4db4497760997-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libpsl", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpsl-00717f3e46847b47" }, { "spdxElementId": "SPDXRef-Package-apk-libpsl-0.23.3-r4", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libpsl" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpsl-0.23.3-r4" }, { "spdxElementId": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-curl.yaml-010cb3d3ce5812142c1ff59d0b260650190c6241" }, { "spdxElementId": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-curl-curl.git-curl-8C9523C950-3163ec065643ba20709f190111f42c3e1fe95273-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libcurl-openssl4", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcurl-openssl4-dbf9448ef8140af5" }, { "spdxElementId": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libcurl-openssl4" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libcurl-openssl4-8.23.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-expat.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-libexpat-libexpat-RC952C9510C950-a70841d9ffa64ddde29ab824ed6305035ebe4c47-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libexpat1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libexpat1-95b2883a4585c888" }, { "spdxElementId": "SPDXRef-Package-apk-libexpat1-2.10.0-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libexpat1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libexpat1-2.10.0-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-pcre2.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-PCRE2Project-pcre2.git-pcre2-10.49-6f9d7c1373262c541324a16a358785b33ef116cf-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libpcre2-8-0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpcre2-8-0-d0d4429c86d2814c" }, { "spdxElementId": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libpcre2-8-0" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libpcre2-8-0-10.49-r3" }, { "spdxElementId": "SPDXRef-Package-apk-git-2.56.0-r3", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-git.yaml-a3655395a06e663e8406d260a966b9e022e11f7e" }, { "spdxElementId": "SPDXRef-Package-apk-git-2.56.0-r3", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-kernel.googlesource.com-pub-scm-git-git.git-v2.56.0-a018953688f1b10bddf91bff8747068f5f4746a4-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-git", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-git-19db310f7dfcfb46" }, { "spdxElementId": "SPDXRef-Package-apk-git-2.56.0-r3", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-git" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-git-2.56.0-r3" }, { "spdxElementId": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-icu.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-unicode-org-icu-release-79.1-ddc6b66926bfac6036144ca9902992a0d6d50af9-0" }, { "spdxElementId": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-unicode-org-icu-data-main-c5aeb38e05607d094b783f0665bd66219b038ca9-1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-icu79-data-full", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-icu79-data-full-dfda4c12dccf0f20" }, { "spdxElementId": "SPDXRef-Package-apk-icu79-data-full-79.1-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-icu79-data-full" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-icu79-data-full-79.1-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-bzip2.yaml-f353805867a3059d7018cceac9746da7c23634fe" }, { "spdxElementId": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-sourceware.org-git-bzip2.git-bzip2-1.0.8-6a8690fc8d26c815e798c588f796eabe9d684cf0-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libbz2-1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbz2-1-161b9abb2535e851" }, { "spdxElementId": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libbz2-1" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libbz2-1-1.0.8-r30" }, { "spdxElementId": "SPDXRef-Package-apk-libffi-3.8.0-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libffi.yaml-aaa2344b75ef8b19889f087c91e10b11f191e15c" }, { "spdxElementId": "SPDXRef-Package-apk-libffi-3.8.0-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-libffi-libffi.git-v3.8.0-12ffd1f9dc56fcea79d2f742f424301ae668d663-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libffi", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libffi-e8a6a080506d2ad6" }, { "spdxElementId": "SPDXRef-Package-apk-libffi-3.8.0-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libffi" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libffi-3.8.0-r2" }, { "spdxElementId": "SPDXRef-Package-apk-libicu79-79.1-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-icu.yaml-f5ef816d1cb2bd0e165a402c4e8a4c4622464bf3" }, { "spdxElementId": "SPDXRef-Package-apk-libicu79-79.1-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-unicode-org-icu-release-79.1-ddc6b66926bfac6036144ca9902992a0d6d50af9-0" }, { "spdxElementId": "SPDXRef-Package-apk-libicu79-79.1-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-unicode-org-icu-data-main-c5aeb38e05607d094b783f0665bd66219b038ca9-1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libicu79", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libicu79-ccbe9a514ca528c5" }, { "spdxElementId": "SPDXRef-Package-apk-libicu79-79.1-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libicu79" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libicu79-79.1-r1" }, { "spdxElementId": "SPDXRef-Package-apk-libuuid-2.42.4-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-util-linux.yaml-8298ba7be686605b03c1943f22ccf5a0640e0042" }, { "spdxElementId": "SPDXRef-Package-apk-libuuid-2.42.4-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-util-linux-util-linux-v2.42.4-d76cbf8f13e65ff657344f7f6a90042cf755ba59-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libuuid", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libuuid-060f7e4f1502928d" }, { "spdxElementId": "SPDXRef-Package-apk-libuuid-2.42.4-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libuuid" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libuuid-2.42.4-r2" }, { "spdxElementId": "SPDXRef-Package-apk-libuv-1.53.0-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-libuv.yaml-6ee5086b767a2f31854a43ce96bd3b6a275cc36c" }, { "spdxElementId": "SPDXRef-Package-apk-libuv-1.53.0-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-libuv-libuv.git-v1.53.0-840404ce8ba7cc0204be52389a6cfff9f2c90fb6-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-libuv", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libuv-1ca688a614853a23" }, { "spdxElementId": "SPDXRef-Package-apk-libuv-1.53.0-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-libuv" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-libuv-1.53.0-r0" }, { "spdxElementId": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-mpdecimal.yaml-491b184c82ef2868d73a46a98997db789342ff15" }, { "spdxElementId": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-mpdecimal-4.0.1-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-mpdecimal", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpdecimal-a88311b96b77a716" }, { "spdxElementId": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-mpdecimal" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-mpdecimal-4.0.1-r6" }, { "spdxElementId": "SPDXRef-Package-apk-nodejs-24-24.22.2-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-nodejs-24.yaml-76a7da28bfe0554c26b2edaed70fceb60db3fa15" }, { "spdxElementId": "SPDXRef-Package-apk-nodejs-24-24.22.2-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-nodejs-node.git-v24.22.2-f7f273a9bb6445f6f7fb6349105e7532972045fb-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-nodejs-24", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nodejs-24-79b76d5f10e6c3d7" }, { "spdxElementId": "SPDXRef-Package-apk-nodejs-24-24.22.2-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-nodejs-24" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-nodejs-24-24.22.2-r2" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-13.1.0-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-node-gyp.yaml-cc172a7c7af38af8145f690046e25a7069c96f21" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--isaacs-fs-minipass-1be8bd741034d732" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-1c151cb91f430512" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-yallist-1e911156aa30dbb5" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-proc-log-2b8681bff9c92b41" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minizlib-335c0a93fb847068" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-node-gyp-3bb39ca51af9ddd2" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-picomatch-3c1ea54dadf49411" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-semver-3eddf84cc6ff8777" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-env-paths-4428dff0a3eca1dd" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-abbrev-4cac821073793d7f" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-exponential-backoff-602c54750e05d021" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-undici-64fbc3d560b596f2" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-chownr-70a6bf17ba99f73d" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-fdir-84f08a6ffc39fc88" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-which-96fcc673435e6765" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-isexe-bf2e98f2cdf851e8" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-graceful-fs-c063cbd0db7d468c" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tinyglobby-da1e9af905e99f3e" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-nopt-dcc25162c9fb23cb" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tar-ff2ea75c5fc6a653" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--isaacs-fs-minipass-1be8bd741034d732" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-abbrev-4cac821073793d7f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-chownr-70a6bf17ba99f73d" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-env-paths-4428dff0a3eca1dd" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-exponential-backoff-602c54750e05d021" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-fdir-84f08a6ffc39fc88" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-graceful-fs-c063cbd0db7d468c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-isexe-bf2e98f2cdf851e8" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-1c151cb91f430512" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minizlib-335c0a93fb847068" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-node-gyp-3bb39ca51af9ddd2" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-node-gyp-89df5c2b34ee35f6" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-nopt-dcc25162c9fb23cb" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-picomatch-3c1ea54dadf49411" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-proc-log-2b8681bff9c92b41" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-semver-3eddf84cc6ff8777" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tar-ff2ea75c5fc6a653" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tinyglobby-da1e9af905e99f3e" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-undici-64fbc3d560b596f2" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-which-96fcc673435e6765" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-node-gyp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-yallist-1e911156aa30dbb5" }, { "spdxElementId": "SPDXRef-Package-apk-node-gyp-13.1.0-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-node-gyp" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-node-gyp-13.1.0-r1" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-12.2.2-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-npm-12.yaml-8a7be5d54d17fbe1630495f8b594254d68dcac38" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-12.2.2-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-npm-cli-v12.2.2-60e11343e61316d966c86805d803df5a0eb99230-0" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmpack-009f7f6e6b750f07" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tiny-relative-date-00e121be52619bc0" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-audit-report-016543391163bb62" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-https-proxy-agent-024a9111bc1b0c47" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-pipeline-03296cbe6bb69aec" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-chownr-05962a2a962d12b6" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-treeverse-06766b04304999d5" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-arborist-06ea895e89b040e1" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-archy-06f323ee14a52ede" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-brace-expansion-0bc2e37232f894db" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-registry-fetch-0d08812019303485" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-run-script-0e6ef602f3a8ba50" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-validate-npm-package-name-0e93c78882cce8ce" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-fs-minipass-0ef840dc0cbaf047" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-safer-buffer-10e6e30886d6d4aa" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-install-checks-11bb30b694057228" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-glob-1277a1f95dd3d78c" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-verify-155b66244de5eb23" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--tufjs-models-16c9940a6ffab52b" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmexec-1beddd7172f637ef" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-signal-exit-1f67dd9602633575" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-agent-base-2296afaa86fdbb6a" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-config-231ea5ad422f1db5" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-flush-24704790eb7e5c58" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-graceful-fs-25543ac811f600f9" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-http-proxy-agent-25e9761c15856b56" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-agent-base-2d14f34152ec1c40" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minizlib-2ec85b6ce54ef1a5" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-bundle-2efd6c66711d3816" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-is-cidr-3253422549a3189f" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-aproba-347bd4135ce42b64" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ssri-388955da23eade92" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-normalize-package-bin-3d030f780176a600" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-redact-3de375887f17730d" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-query-3ed7ee4bd0016a9b" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-postcss-selector-parser-3ffb8f6a9e420e58" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-spdx-license-ids-41064f8e89207737" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-sized-41fd0a29fe448d07" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-http-cache-semantics-427d53b9fba5814f" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-p-map-442e9318ff0c6ac6" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-spdx-exceptions-4632ab817c13fb0f" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-git-469906ecbe1217bd" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-lru-cache-4bd6d31cd9898349" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-4e87a8c731f2deec" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-common-ancestor-path-52aea8d23ed98b5f" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-socks-5aec852ba6e3fee8" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--gar-promise-retry-5b6208c2bd51b9e4" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-pacote-5c2ce8291973b4fd" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-json-parse-even-better-errors-5c7f26fa9db247ce" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-cidr-regex-5d83b26f13e4c67d" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-package-json-5e6b715b15284758" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-sigstore-6032563b3087911f" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--isaacs-fs-minipass-63f720274aa4e978" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-packlist-649d7f93671d7fcc" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-fs-64ef979e446bd528" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmpublish-68534710b41ebaa7" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-package-arg-6a1b416c99ae0b5b" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-make-fetch-happen-6c168e6d54753c6e" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-which-6fd4a7d76f437ee4" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-just-diff-apply-70253bd8211c0e5f" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-cssesc-70d9f3fe4216c23d" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-mute-stream-72d7d416c8c3f12a" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ci-info-750f7ba7563ab888" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-metavuln-calculator-755d08454906dffc" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ms-76b79eeb69458da8" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-read-76df10319452372d" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-map-workspaces-77e4ea03cc9b019a" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-normalize-package-bin-78d7441e2eb709d8" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-7a88ddb1898d9c2f" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-fastest-levenshtein-7d5067f37433777a" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmversion-7e2c24dac68f1b7e" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-core-7eb94386896e94a0" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-hosted-git-info-7fb3d38ba5b00a9e" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-json-stringify-nice-8081b3f75a8bab60" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-isexe-82d33a2afefe3e4f" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-path-scurry-835f46cf092aacdd" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-name-from-folder-838da43b98f827ff" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-write-file-atomic-917d49b77ed2d4a3" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tar-91ac5c770afa50ab" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-spdx-expression-parse-92044e14c09ee66b" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-pick-manifest-93467f6387ce5c1b" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-text-table-963631d558d1acb8" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-supports-color-98f3856e49a7323d" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-binary-extensions-9b297040bbd06874" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-installed-package-contents-9c860756c4b9408c" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--tufjs-canonical-json-9ef193f25f81de43" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmfund-a8f4cd0a91c9be50" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-parse-conflict-json-a93d7a4f6ad5415a" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-socks-proxy-agent-aa414cd21dd1f50e" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-collect-ab5d6a51baec6ea8" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-diff-aba588db3913263b" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-walk-up-path-ad618b6027e250b6" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-promzard-ad68635ebd55aa32" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-proc-log-adc9dcb372fa70db" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-promise-spawn-ae7a20980cb86baf" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-proggy-af207b8cf78693a5" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-abbrev-af49756d10da1226" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tuf-js-b593e12bc7a164c5" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ip-address-b6575bdabc5eb61e" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-util-deprecate-b68f8a2f0b30c86b" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--isaacs-string-locale-compare-b70d35b677385b41" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-promise-all-reject-late-b890756bf76cef52" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-init-package-json-b8a0148d9e5ff107" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmaccess-b949273dae7805d5" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-yallist-bb982a6713b948e5" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-tuf-bd5b456dca247d08" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmteam-bd8e2eb36722b77a" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-user-validate-be2e9b61c6debe2d" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-bundled-bec4110af6f2871a" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ignore-walk-c0d426ad5161b3df" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-protobuf-specs-c379aa8154130dd3" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-yallist-c4d56b72d1baa6db" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-proxy-agent-negotiate-c80dd5e5f8863a8f" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-cc9a744f1afc8a48" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-read-cmd-shim-cf4d196f34ab0bfe" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-iconv-lite-d09a9deec3a62818" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minimatch-d27853b5d786d464" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-cacache-d2922d588b826a78" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-normalize-package-bin-d45e000c07289c73" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-chalk-d57bb1f6d053460c" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-sign-d6a429ef1c1d975c" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ini-da1fbfeb27bda454" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmsearch-dca750e612f80469" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-just-diff-de0cbabab18664e1" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-balanced-match-e0230e25d50d6cc1" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-smart-buffer-e247b7afb2536015" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-agent-e299039f87b64e83" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-qrcode-terminal-e3cf662c228dab79" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-negotiator-e3db59355e56cb9a" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-fetch-e411efa059822f60" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-node-gyp-e4a9d416bfed18ae" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-bin-links-e6eaccf68e3fb4ae" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-debug-e82a5e46e86cd002" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-profile-ec5c91b565ef0710" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-promise-call-limit-f2679cd91423be43" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-semver-f34d69cfef7df290" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-jsonparse-f34fe5f77127a968" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-nopt-f358f20b14a6907d" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-cmd-shim-faff14a16502a83a" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmdiff-feb94e55dd4cdd3c" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmorg-fefdc7d620d97fce" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--gar-promise-retry-5b6208c2bd51b9e4" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--isaacs-fs-minipass-63f720274aa4e978" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--isaacs-string-locale-compare-b70d35b677385b41" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-agent-e299039f87b64e83" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-arborist-06ea895e89b040e1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-config-231ea5ad422f1db5" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-fs-64ef979e446bd528" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-git-469906ecbe1217bd" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-installed-package-contents-9c860756c4b9408c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-map-workspaces-77e4ea03cc9b019a" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-metavuln-calculator-755d08454906dffc" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-name-from-folder-838da43b98f827ff" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-node-gyp-e4a9d416bfed18ae" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-package-json-5e6b715b15284758" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-promise-spawn-ae7a20980cb86baf" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-query-3ed7ee4bd0016a9b" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-redact-3de375887f17730d" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--npmcli-run-script-0e6ef602f3a8ba50" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-bundle-2efd6c66711d3816" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-core-7eb94386896e94a0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-protobuf-specs-c379aa8154130dd3" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-sign-d6a429ef1c1d975c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-tuf-bd5b456dca247d08" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--sigstore-verify-155b66244de5eb23" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--tufjs-canonical-json-9ef193f25f81de43" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm--tufjs-models-16c9940a6ffab52b" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-abbrev-af49756d10da1226" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-agent-base-2296afaa86fdbb6a" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-agent-base-2d14f34152ec1c40" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-aproba-347bd4135ce42b64" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-archy-06f323ee14a52ede" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-balanced-match-e0230e25d50d6cc1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-bin-links-e6eaccf68e3fb4ae" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-binary-extensions-9b297040bbd06874" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-brace-expansion-0bc2e37232f894db" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-cacache-d2922d588b826a78" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-chalk-d57bb1f6d053460c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-chownr-05962a2a962d12b6" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ci-info-750f7ba7563ab888" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-cidr-regex-5d83b26f13e4c67d" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-cmd-shim-faff14a16502a83a" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-common-ancestor-path-52aea8d23ed98b5f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-cssesc-70d9f3fe4216c23d" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-debug-e82a5e46e86cd002" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-diff-aba588db3913263b" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-fastest-levenshtein-7d5067f37433777a" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-fs-minipass-0ef840dc0cbaf047" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-glob-1277a1f95dd3d78c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-graceful-fs-25543ac811f600f9" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-hosted-git-info-7fb3d38ba5b00a9e" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-http-cache-semantics-427d53b9fba5814f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-http-proxy-agent-25e9761c15856b56" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-https-proxy-agent-024a9111bc1b0c47" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-iconv-lite-d09a9deec3a62818" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ignore-walk-c0d426ad5161b3df" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ini-da1fbfeb27bda454" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-init-package-json-b8a0148d9e5ff107" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ip-address-b6575bdabc5eb61e" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-is-cidr-3253422549a3189f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-isexe-82d33a2afefe3e4f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-json-parse-even-better-errors-5c7f26fa9db247ce" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-json-stringify-nice-8081b3f75a8bab60" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-jsonparse-f34fe5f77127a968" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-just-diff-de0cbabab18664e1" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-just-diff-apply-70253bd8211c0e5f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmaccess-b949273dae7805d5" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmdiff-feb94e55dd4cdd3c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmexec-1beddd7172f637ef" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmfund-a8f4cd0a91c9be50" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmorg-fefdc7d620d97fce" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmpack-009f7f6e6b750f07" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmpublish-68534710b41ebaa7" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmsearch-dca750e612f80469" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmteam-bd8e2eb36722b77a" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-libnpmversion-7e2c24dac68f1b7e" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-lru-cache-4bd6d31cd9898349" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-make-fetch-happen-6c168e6d54753c6e" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minimatch-d27853b5d786d464" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-cc9a744f1afc8a48" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-4e87a8c731f2deec" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-collect-ab5d6a51baec6ea8" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-fetch-e411efa059822f60" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-flush-24704790eb7e5c58" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-pipeline-03296cbe6bb69aec" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minipass-sized-41fd0a29fe448d07" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-minizlib-2ec85b6ce54ef1a5" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ms-76b79eeb69458da8" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-mute-stream-72d7d416c8c3f12a" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-negotiator-e3db59355e56cb9a" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-nopt-f358f20b14a6907d" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-7a88ddb1898d9c2f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-npm-12-2a690adb3ad55bad" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-audit-report-016543391163bb62" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-bundled-bec4110af6f2871a" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-install-checks-11bb30b694057228" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-normalize-package-bin-d45e000c07289c73" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-normalize-package-bin-3d030f780176a600" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-normalize-package-bin-78d7441e2eb709d8" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-package-arg-6a1b416c99ae0b5b" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-packlist-649d7f93671d7fcc" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-pick-manifest-93467f6387ce5c1b" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-profile-ec5c91b565ef0710" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-registry-fetch-0d08812019303485" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-npm-user-validate-be2e9b61c6debe2d" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-p-map-442e9318ff0c6ac6" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-pacote-5c2ce8291973b4fd" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-parse-conflict-json-a93d7a4f6ad5415a" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-path-scurry-835f46cf092aacdd" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-postcss-selector-parser-3ffb8f6a9e420e58" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-proc-log-adc9dcb372fa70db" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-proggy-af207b8cf78693a5" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-promise-all-reject-late-b890756bf76cef52" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-promise-call-limit-f2679cd91423be43" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-promzard-ad68635ebd55aa32" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-proxy-agent-negotiate-c80dd5e5f8863a8f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-qrcode-terminal-e3cf662c228dab79" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-read-76df10319452372d" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-read-cmd-shim-cf4d196f34ab0bfe" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-safer-buffer-10e6e30886d6d4aa" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-semver-f34d69cfef7df290" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-signal-exit-1f67dd9602633575" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-sigstore-6032563b3087911f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-smart-buffer-e247b7afb2536015" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-socks-5aec852ba6e3fee8" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-socks-proxy-agent-aa414cd21dd1f50e" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-spdx-exceptions-4632ab817c13fb0f" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-spdx-expression-parse-92044e14c09ee66b" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-spdx-license-ids-41064f8e89207737" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-ssri-388955da23eade92" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-supports-color-98f3856e49a7323d" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tar-91ac5c770afa50ab" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-text-table-963631d558d1acb8" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tiny-relative-date-00e121be52619bc0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-treeverse-06766b04304999d5" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-tuf-js-b593e12bc7a164c5" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-util-deprecate-b68f8a2f0b30c86b" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-validate-npm-package-name-0e93c78882cce8ce" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-walk-up-path-ad618b6027e250b6" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-which-6fd4a7d76f437ee4" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-write-file-atomic-917d49b77ed2d4a3" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-yallist-bb982a6713b948e5" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-npm-12", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-yallist-c4d56b72d1baa6db" }, { "spdxElementId": "SPDXRef-Package-apk-npm-12-12.2.2-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-npm-12" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-npm-12-12.2.2-r0" }, { "spdxElementId": "SPDXRef-Package-apk-pnpm-11.8-11.8.0-r5", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-pnpm-11.8.yaml-cdb890161af416ef3bb2a726565b6ff060395754" }, { "spdxElementId": "SPDXRef-Package-apk-pnpm-11.8-11.8.0-r5", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-pnpm-pnpm-v11.8.0-93458600a8498412f85316d054e033319ba31ed6-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-pnpm-11.8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-pnpm-11.8-73d121d3a4c6117f" }, { "spdxElementId": "SPDXRef-Package-apk-pnpm-11.8-11.8.0-r5", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-pnpm-11.8" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-pnpm-11.8-11.8.0-r5" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-py3-pip.yaml-58b78718f8e8947523a1ad3eb0deb82aee6911d7" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-pypa-pip-26.2.2-b3b696fe2122f2339d782517559bfade2cb6b879-0" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-urllib3-urllib3-2.8.0-b1d30ab61fe0db8f11092805e8c5ac43e091064a-2" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-msgpack-msgpack-python-v1.2.3-742cb6d7ad141343edcccc829b5b06d0c6f8fcb5-3" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-certifi-python-certifi-2026.10.23-b60466c9f2882d9cf088943c650b0faac06c080c-4" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-f8febf0c4eeb5aea", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-python-pip-4e6f3f5c92b2698c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-py3-pip-wheel", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-python-pip-4e6f3f5c92b2698c" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-py3-pip-wheel", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-py3-pip-wheel-f8febf0c4eeb5aea" }, { "spdxElementId": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-py3-pip-wheel" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-py3-pip-wheel-26.2.2-r2" }, { "spdxElementId": "SPDXRef-Package-apk-xz-5.8.4-r1", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-xz.yaml-5aeb575ed7ca64fb21dfda042e170d08f1654bbc" }, { "spdxElementId": "SPDXRef-Package-apk-xz-5.8.4-r1", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-tukaani-project-xz-v5.8.4-d3e650e63c110e830fd5391e7f8b45df0b91d3da-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-xz", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-xz-9348e79a976cf12a" }, { "spdxElementId": "SPDXRef-Package-apk-xz-5.8.4-r1", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-xz" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-xz-5.8.4-r1" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-python-3.13.yaml-52a27d12b5ebd918e282db0e2ff573eec6e57aeb" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-python-cpython-3.13-42155a0feaca9ba6991942c323cbe9fb7278be3c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-python-3.13-base", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-python-3.13-base-c5e711b20bfe5612" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-python-3.13-base" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-python-3.13-base-3.13.18C95git20261030-r0" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-python-3.13.yaml-52a27d12b5ebd918e282db0e2ff573eec6e57aeb" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-python-cpython-3.13-42155a0feaca9ba6991942c323cbe9fb7278be3c-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-python-3.13", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-python-3.13-11dd55cbd97276c0" }, { "spdxElementId": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-python-3.13" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-python-3.13-3.13.18C95git20261030-r0" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-tzdata.yaml-b01ceefc114cf44ccb6d35f405795435f98bf0c2" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-eggert-tz-2026f-a6cb1a1cebcc96269a02b25323c1a9424e3349a8-0" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-tzdata", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-c9ffaae8b2257589" }, { "spdxElementId": "SPDXRef-Package-apk-tzdata-2026f-r0", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-tzdata" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-tzdata-2026f-r0" }, { "spdxElementId": "SPDXRef-Package-apk-yarn-1.22.22-r8", "relationshipType": "DESCRIBED_BY", "relatedSpdxElement": "SPDXRef-Package-Melange-yarn.yaml-07b6c68377f0678af0c1cbf2bcbb3a35fbe7dd2f" }, { "spdxElementId": "SPDXRef-Package-apk-yarn-1.22.22-r8", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Package-Source-github.com-yarnpkg-yarn-v1.22.22-740c38c3a962c30ddb344a919bbfb7065620714b-0" }, { "spdxElementId": "SPDXRef-Package-apk-yarn-a388a32cb1753e55", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-yarn-746a75811473ed81" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-yarn", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-npm-yarn-746a75811473ed81" }, { "spdxElementId": "SPDXRef-DocumentRoot-Directory-yarn", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-yarn-a388a32cb1753e55" }, { "spdxElementId": "SPDXRef-Package-apk-yarn-1.22.22-r8", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-yarn" }, { "spdxElementId": "SPDXRef-Package-Image-sha256-27ca468704c3a4c73f83ba0df3ae62509fe3b9a11966f5d7536fe0e10b26775f", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-apk-yarn-1.22.22-r8" } ], "hasExtractedLicensingInfos": [ { "licenseId": "LicenseRef-Apache-2.0", "extractedText": "NOASSERTION" } ] }