{
 "SPDXID": "SPDXRef-DOCUMENT",
 "creationInfo": {
   "created": "2024-06-06T20:12:14Z",
   "creators": [
     "Person: Python Release Managers",
     "Tool: ReleaseTools-98d5d0cf34858138a877b75a88738bc3199c6980"
   ],
   "licenseListVersion": "3.22"
 },
 "dataLicense": "CC0-1.0",
 "documentNamespace": "https://www.python.org/ftp/python/3.12.4/python-3.12.4.exe.spdx.json",
 "files": [],
 "name": "CPython SBOM",
 "packages": [
   {
     "SPDXID": "SPDXRef-PACKAGE-bzip2",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "ab8d1b0cc087c20d4c32c0e4fcf7d0c733a95da12cedc6d63b3f0a9af07427e2"
       }
     ],
     "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/bzip2-1.0.8.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:bzip:bzip2:1.0.8:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "bzip2",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "1.0.8"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-cachecontrol",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "95dedbec849f46dda3137866dc28b9d133fc9af55f5b805ab1291833e4457aa4"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/1d/e3/a22348e6226dcd585d5a4b5f0175b3a16dabfd3912cbeb02f321d00e56c7/cachecontrol-0.13.1-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "cachecontrol",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "0.13.1"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-certifi",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "92d6037539857d8206b8f6ae472e8b77db8058fec5937a1ef3f54304089edbb9"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/4c/dd/2234eab22353ffc7d94e8d13177aaa050113286e93e7b40eae01fbf7c3d9/certifi-2023.7.22-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "certifi",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "2023.7.22"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-chardet",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "362777fb014af596ad31334fde1e8c327dfdb076e1960d1694662d46a6917ab9"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/74/8f/8fc49109009e8d2169d94d72e6b1f4cd45c13d147ba7d6170fb41f22b08f/chardet-5.1.0-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "chardet",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "5.1.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-colorama",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/d1/d6/3965ed04c63042e047cb6a3e6ed1a63a35087b6a609aa3a15ed8ac56c221/colorama-0.4.6-py2.py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "colorama",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "0.4.6"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-cpython",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "a8b4c07237446364dc8d74288a5e33c04c4554b7be1f8d81100d219f6e9bba10"
       }
     ],
     "downloadLocation": "https://www.python.org/ftp/python/3.12.4/python-3.12.4.exe",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:python:python:3.12.4:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "PSF-2.0",
     "name": "CPython",
     "originator": "Organization: Python Software Foundation",
     "packageFileName": "python-3.12.4.exe",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "3.12.4"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-distlib",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "034db59a0b96f8ca18035f36290806a9a6e6bd9d1ff91e45a7f172eb17e51784"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/8e/41/9307e4f5f9976bc8b7fea0b66367734e8faf3ec84bc0d412d8cfabbb66cd/distlib-0.3.8-py2.py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "distlib",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "0.3.8"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-distro",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "99522ca3e365cac527b44bde033f64c6945d90eb9f769703caaec52b09bbd3ff"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/f4/2c/c90a3adaf0ddb70afe193f5ebfb539612af57cffe677c3126be533df3098/distro-1.8.0-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "distro",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "1.8.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-expat",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "d4cf38d26e21a56654ffe4acd9cd5481164619626802328506a2869afab29ab3"
       }
     ],
     "downloadLocation": "https://github.com/libexpat/libexpat/releases/download/R_2_6_2/expat-2.6.2.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.6.2:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "expat",
     "originator": "Organization: Expat development team",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "2.6.2"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-hacl-star",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "e31e4ca10da91c585793c0eaf1b98aee3cb43e3a58d3d8d478593e5a6bd82927"
       }
     ],
     "downloadLocation": "https://github.com/hacl-star/hacl-star/archive/bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0.zip",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:hacl-star:hacl-star:bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "hacl-star",
     "originator": "Organization: HACL* Developers",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-idna",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/fc/34/3030de6f1370931b9dbb4dad48f6ab1015ab1d32447850b9fc94e60097be/idna-3.4-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "idna",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "3.4"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-libb2",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "53626fddce753c454a3fea581cbbc7fe9bbcf0bc70416d48fdbbf5d87ef6c72e"
       }
     ],
     "downloadLocation": "https://github.com/BLAKE2/libb2/releases/download/v0.98.1/libb2-0.98.1.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:blake2:libb2:0.98.1:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "libb2",
     "originator": "Organization: BLAKE2 - fast secure hashing",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "0.98.1"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-libffi",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "9d802681adfea27d84cae0487a785fb9caa925bdad44c401b364c59ab2b8edda"
       }
     ],
     "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/libffi-3.4.4.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:libffi_project:libffi:3.4.4:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "libffi",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "3.4.4"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-macholib",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "c76f268f5054024e962f2515a0e522baf85313064f6740d80375afc850787a38"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/ec/57/f0a712efc3ed982cf4038a3cee172057303b9be914c32c93b2fbec27f785/macholib-1.0.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "macholib",
     "originator": "Person: Ronald Oussoren ([email protected])",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "1.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-mpdecimal",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "9f9cd4c041f99b5c49ffb7b59d9f12d95b683d88585608aa56a6307667b2b21f"
       }
     ],
     "downloadLocation": "https://www.bytereef.org/software/mpdecimal/releases/mpdecimal-2.5.1.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:2.5.1:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "mpdecimal",
     "originator": "Organization: bytereef.org",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "2.5.1"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-msgpack",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "525228efd79bb831cf6830a732e2e80bc1b05436b086d4264814b4b2955b2fa9"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/9f/4a/36d936e54cf71e23ad276564465f6a54fb129e3d61520b76e13e0bb29167/msgpack-1.0.5-cp310-cp310-macosx_10_9_universal2.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "msgpack",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "1.0.5"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-openssl",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "e6a77c273ebb284fedd8ea19b081fce74a9455936ffd47215f7c24713e2614b2"
       }
     ],
     "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/openssl-3.0.13.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:openssl:openssl:3.0.13:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "openssl",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "3.0.13"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-packaging",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "ef103e05f519cdc783ae24ea4e2e0f508a9c99b2d4969652eed6a2e1ea5bd522"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/05/8e/8de486cbd03baba4deef4142bd643a3e7bbe954a784dc1bb17142572d127/packaging-21.3-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "packaging",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "21.3"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-pip",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "ba0d021a166865d2265246961bec0152ff124de910c5cc39f1156ce3fa7c69dc"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/8a/6a/19e9fe04fca059ccf770861c7d5721ab4c2aebc539889e97c7977528a53b/pip-24.0-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       },
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:pypa:pip:24.0:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "pip",
     "originator": "Organization: Python Packaging Authority",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "24.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-platformdirs",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "cec7b889196b9144d088e4c57d9ceef7374f6c39694ad1577a0aab50d27ea28c"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/9e/d8/563a9fc17153c588c8c2042d2f0f84a89057cdb1c30270f589c88b42d62c/platformdirs-3.8.1-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "platformdirs",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "3.8.1"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-pygments",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "db2db3deb4b4179f399a09054b023b6a586b76499d36965813c71aa8ed7b5fd1"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/34/a7/37c8d68532ba71549db4212cb036dbd6161b40e463aba336770e80c72f84/Pygments-2.15.1-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "pygments",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "2.15.1"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-pyparsing",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "d554a96d1a7d3ddaf7183104485bc19fd80543ad6ac5bdb6426719d766fb06c1"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/a4/24/6ae4c9c45cf99d96b06b5d99e25526c060303171fb0aea9da2bfd7dbde93/pyparsing-3.1.0-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "pyparsing",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "3.1.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-pyproject-hooks",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "283c11acd6b928d2f6a7c73fa0d01cb2bdc5f07c57a2eeb6e83d5e56b97976f8"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/d5/ea/9ae603de7fbb3df820b23a70f6aff92bf8c7770043254ad8d2dc9d6bcba4/pyproject_hooks-1.0.0-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "pyproject-hooks",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "1.0.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-requests",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "58cd2187c01e70e6e26505bca751777aa9f2ee0b7f4300988b709f44e013003f"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/70/8e/0e2d847013cb52cd35b38c009bb167a1a26b2ce6cd6965bf26b47bc0bf44/requests-2.31.0-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "requests",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "2.31.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-resolvelib",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "d2da45d1a8dfee81bdd591647783e340ef3bcb104b54c383f70d422ef5cc7dbf"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/d2/fc/e9ccf0521607bcd244aa0b3fbd574f71b65e9ce6a112c83af988bbbe2e23/resolvelib-1.0.1-py2.py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "resolvelib",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "1.0.1"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-rich",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "8f87bc7ee54675732fa66a05ebfe489e27264caeeff3728c945d25971b6485ec"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/fc/1e/482e5eec0b89b593e81d78f819a9412849814e22225842b598908e7ac560/rich-13.4.2-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "rich",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "13.4.2"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-setuptools",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "11e52c67415a381d10d6b462ced9cfb97066179f0e871399e006c4ab101fc85f"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/c7/42/be1c7bbdd83e1bfb160c94b9cafd8e25efc7400346cf7ccdbdb452c467fa/setuptools-68.0.0-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "setuptools",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "68.0.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-six",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/d9/5a/e7c31adbe875f2abbb91bd84cf2dc52d792b5a01506781dbcf25c91daf11/six-1.16.0-py2.py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "six",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "1.16.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-sqlite",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "730e4a3efd6a63828bee499940fb13acc2a32c182502ce8a1d970387895d0504"
       }
     ],
     "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/sqlite-3.45.3.0.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:sqlite:sqlite:3.45.3.0:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "sqlite",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "3.45.3.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-tcl-core",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "6e33a88f116822167734cd72b693b5d30ced130a3cae6dc2ff696042f993bb42"
       }
     ],
     "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/tcl-core-8.6.13.0.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.13.0:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "tcl-core",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "8.6.13.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-tenacity",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "2f277afb21b851637e8f52e6a613ff08734c347dc19ade928e519d7d2d8569b0"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/e7/b0/c23bd61e1b32c9b96fbca996c87784e196a812da8d621d8d04851f6c8181/tenacity-8.2.2-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "tenacity",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "8.2.2"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-tix",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "f7b21d115867a41ae5fd7c635a4c234d3ca25126c3661eb36028c6e25601f85e"
       }
     ],
     "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/tix-8.4.3.6.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.4.3.6:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "tix",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "8.4.3.6"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-tk",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "896c1f488bdd0159091bd5cce124b756dfdffa4a5350b7fd4d7d8e48421089a4"
       }
     ],
     "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/tk-8.6.13.0.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.13.0:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "tk",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "8.6.13.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-tomli",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "939de3e7a6161af0c887ef91b7d41a53e7c5a1ca976325f429cb46ea9bc30ecc"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/97/75/10a9ebee3fd790d20926a90a2547f0bf78f371b2f13aa822c759680ca7b9/tomli-2.0.1-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "tomli",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "2.0.1"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-truststore",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "e37a5642ae9fc48caa8f120b6283d77225d600d224965a672c9e8ef49ce4bb4c"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/20/56/7811d5439b6a56374f274a8672d8f18b4deadadeb3a9f0c86424b98b6f96/truststore-0.8.0-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "truststore",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "0.8.0"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-typing-extensions",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "440d5dd3af93b060174bf433bccd69b0babc3b15b1a8dca43789fd7f61514b36"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/ec/6b/63cc3df74987c36fe26157ee12e09e8f9db4de771e0f3404263117e75b95/typing_extensions-4.7.1-py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "typing_extensions",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "4.7.1"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-urllib3",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "94a757d178c9be92ef5539b8840d48dc9cf1b2709c9d6b588232a055c524458b"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/48/fe/a5c6cc46e9fe9171d7ecf0f33ee7aae14642f8d74baa7af4d7840f9358be/urllib3-1.26.17-py2.py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "urllib3",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "1.26.17"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-webencodings",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "a0af1213f3c2226497a97e2b3aa01a7e4bee4f403f95be16fc9acd2947514a78"
       }
     ],
     "downloadLocation": "https://files.pythonhosted.org/packages/f4/24/2a3e3df732393fed8b3ebf2ec078f05546de641fe1b667ee316ec1dcf3b7/webencodings-0.5.1-py2.py3-none-any.whl",
     "externalRefs": [
       {
         "referenceCategory": "PACKAGE_MANAGER",
         "referenceLocator": "pkg:pypi/[email protected]",
         "referenceType": "purl"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "webencodings",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "0.5.1"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-xz",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "a15c168e39e87d750c3dc766edc7f19bdda57dacf01e509678467eace91ad282"
       }
     ],
     "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/xz-5.2.5.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "xz",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "5.2.5"
   },
   {
     "SPDXID": "SPDXRef-PACKAGE-zlib",
     "checksums": [
       {
         "algorithm": "SHA256",
         "checksumValue": "e3f3fb32564952006eb18b091ca8464740e5eca29d328cfb0b2da22768e0b638"
       }
     ],
     "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/zlib-1.3.1.tar.gz",
     "externalRefs": [
       {
         "referenceCategory": "SECURITY",
         "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.1:*:*:*:*:*:*:*",
         "referenceType": "cpe23Type"
       }
     ],
     "licenseConcluded": "NOASSERTION",
     "name": "zlib",
     "primaryPackagePurpose": "LIBRARY",
     "supplier": "Organization: Python Software Foundation",
     "versionInfo": "1.3.1"
   }
 ],
 "relationships": [
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-bzip2",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-cachecontrol",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-certifi",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-chardet",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-colorama",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-cpython",
     "relationshipType": "DESCRIBES",
     "spdxElementId": "SPDXRef-DOCUMENT"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-distlib",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-distro",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-expat",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-hacl-star",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-idna",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-libb2",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-libffi",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-macholib",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-msgpack",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-openssl",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-packaging",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-pip",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-platformdirs",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-pygments",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-pyparsing",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-pyproject-hooks",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-requests",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-resolvelib",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-rich",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-setuptools",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-six",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-sqlite",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-tcl-core",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-tenacity",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-tix",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-tk",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-tomli",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-truststore",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-typing-extensions",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-urllib3",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-webencodings",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-pip"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-xz",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   },
   {
     "relatedSpdxElement": "SPDXRef-PACKAGE-zlib",
     "relationshipType": "DEPENDS_ON",
     "spdxElementId": "SPDXRef-PACKAGE-cpython"
   }
 ],
 "spdxVersion": "SPDX-2.3"
}