{
"SPDXID": "SPDXRef-DOCUMENT",
"creationInfo": {
"created": "2025-06-03T19:24:23Z",
"creators": [
"Person: Python Release Managers",
"Tool: ReleaseTools-3a17727552e5d8dfa453a12956343d837db496af"
],
"licenseListVersion": "3.22"
},
"dataLicense": "CC0-1.0",
"documentNamespace": "
https://www.python.org/ftp/python/3.13.4/python-3.13.4.exe.spdx.json",
"files": [],
"name": "CPython SBOM",
"packages": [
{
"SPDXID": "SPDXRef-PACKAGE-bzip2",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "ab8d1b0cc087c20d4c32c0e4fcf7d0c733a95da12cedc6d63b3f0a9af07427e2"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/bzip2-1.0.8.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:bzip:bzip2:1.0.8:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "bzip2",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.0.8"
},
{
"SPDXID": "SPDXRef-PACKAGE-cachecontrol",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "ebad2091bf12d0d200dfc2464330db638c5deb41d546f6d7aca079e87290f3b0"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/c8/63/baffb44ca6876e7b5fc8fe17b24a7c07bf479d604a592182db9af26ea366/cachecontrol-0.14.2-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "cachecontrol",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "0.14.2"
},
{
"SPDXID": "SPDXRef-PACKAGE-certifi",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "ca78db4565a652026a4db2bcdf68f2fb589ea80d0be70e03929ed730746b84fe"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/38/fc/bce832fd4fd99766c04d1ee0eead6b0ec6486fb100ae5e74c1d91292b982/certifi-2025.1.31-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "certifi",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "2025.1.31"
},
{
"SPDXID": "SPDXRef-PACKAGE-cpython",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "b3fece33b3402d563da434e938ce5ce52332bdaeda50696aa31886e8b0486ba6"
}
],
"downloadLocation": "
https://www.python.org/ftp/python/3.13.4/python-3.13.4.exe",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:python:python:3.13.4:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "PSF-2.0",
"name": "CPython",
"originator": "Organization: Python Software Foundation",
"packageFileName": "python-3.13.4.exe",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "3.13.4"
},
{
"SPDXID": "SPDXRef-PACKAGE-dependency-groups",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "51aeaa0dfad72430fcfb7bcdbefbd75f3792e5919563077f30bc0d73f4493030"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/99/c7/d1ec24fb280caa5a79b6b950db565dab30210a66259d17d5bb2b3a9f878d/dependency_groups-1.3.1-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "dependency-groups",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.3.1"
},
{
"SPDXID": "SPDXRef-PACKAGE-distlib",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "47f8c22fd27c27e25a65601af709b38e4f0a45ea4fc2e710f65755fa8caaaf87"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/91/a1/cf2472db20f7ce4a6be1253a81cfdf85ad9c7885ffbed7047fb72c24cf87/distlib-0.3.9-py2.py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "distlib",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "0.3.9"
},
{
"SPDXID": "SPDXRef-PACKAGE-distro",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "7bffd925d65168f85027d8da9af6bddab658135b840670a223589bc0c8ef02b2"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/12/b3/231ffd4ab1fc9d679809f356cebee130ac7daa00d6d6f3206dd4fd137e9e/distro-1.9.0-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "distro",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.9.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-expat-2.6.3",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "17aa6cfc5c4c219c09287abfc10bc13f0c06f30bb654b28bfe6f567ca646eb79"
}
],
"downloadLocation": "
https://github.com/libexpat/libexpat/releases/download/R_2_6_3/expat-2.6.3.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.6.3:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "expat",
"originator": "Organization: Expat development team",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "2.6.3"
},
{
"SPDXID": "SPDXRef-PACKAGE-hacl-star-bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "e31e4ca10da91c585793c0eaf1b98aee3cb43e3a58d3d8d478593e5a6bd82927"
}
],
"downloadLocation": "
https://github.com/hacl-star/hacl-star/archive/bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0.zip",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:hacl-star:hacl-star:bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "hacl-star",
"originator": "Organization: HACL* Developers",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0"
},
{
"SPDXID": "SPDXRef-PACKAGE-idna",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/76/c6/c88e154df9c4e1a2a66ccf0005a88dfb2650c1dffb6f5ce603dfbd452ce3/idna-3.10-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "idna",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "3.10"
},
{
"SPDXID": "SPDXRef-PACKAGE-libb2-0.98.1",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "53626fddce753c454a3fea581cbbc7fe9bbcf0bc70416d48fdbbf5d87ef6c72e"
}
],
"downloadLocation": "
https://github.com/BLAKE2/libb2/releases/download/v0.98.1/libb2-0.98.1.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:blake2:libb2:0.98.1:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "libb2",
"originator": "Organization: BLAKE2 - fast secure hashing",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "0.98.1"
},
{
"SPDXID": "SPDXRef-PACKAGE-libffi",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "9d802681adfea27d84cae0487a785fb9caa925bdad44c401b364c59ab2b8edda"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/libffi-3.4.4.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:libffi_project:libffi:3.4.4:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "libffi",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "3.4.4"
},
{
"SPDXID": "SPDXRef-PACKAGE-macholib-1.0",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "c76f268f5054024e962f2515a0e522baf85313064f6740d80375afc850787a38"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/ec/57/f0a712efc3ed982cf4038a3cee172057303b9be914c32c93b2fbec27f785/macholib-1.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "macholib",
"originator": "Person: Ronald Oussoren (
[email protected])",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-mpdecimal",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "338fac3fb8cdd60f406b6326431338756f58a8af94229ffd9bf1e7c2b1ad71ca"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/mpdecimal-4.0.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:4.0.0:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "mpdecimal",
"originator": "Organization: bytereef.org",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "4.0.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-mpdecimal-2.5.1",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "9f9cd4c041f99b5c49ffb7b59d9f12d95b683d88585608aa56a6307667b2b21f"
}
],
"downloadLocation": "
https://www.bytereef.org/software/mpdecimal/releases/mpdecimal-2.5.1.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:2.5.1:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "mpdecimal",
"originator": "Organization: bytereef.org",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "2.5.1"
},
{
"SPDXID": "SPDXRef-PACKAGE-msgpack",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "7ad442d527a7e358a469faf43fda45aaf4ac3249c8310a82f0ccff9164e5dccd"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/4b/f9/a892a6038c861fa849b11a2bb0502c07bc698ab6ea53359e5771397d883b/msgpack-1.1.0-cp310-cp310-macosx_10_9_universal2.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "msgpack",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.1.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-openssl",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "6bb739ecddbd2cfb6d255eb5898437a9b5739277dee931338d3275bac5d96ba2"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/openssl-3.0.16.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:openssl:openssl:3.0.16:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "openssl",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "3.0.16"
},
{
"SPDXID": "SPDXRef-PACKAGE-packaging",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "29572ef2b1f17581046b3a2227d5c611fb25ec70ca1ba8554b24b0e69331a484"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/20/12/38679034af332785aac8774540895e234f4d07f7545804097de4b666afd8/packaging-25.0-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "packaging",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "25.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-pip",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "2913a38a2abf4ea6b64ab507bd9e967f3b53dc1ede74b01b0931e1ce548751af"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/29/a2/d40fb2460e883eca5199c62cfc2463fd261f760556ae6290f88488c362c0/pip-25.1.1-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
},
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:pypa:pip:25.1.1:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "pip",
"originator": "Organization: Python Packaging Authority",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "25.1.1"
},
{
"SPDXID": "SPDXRef-PACKAGE-platformdirs",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "a03875334331946f13c549dbd8f4bac7a13a50a895a0eb1e8c6a8ace80d40a94"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/6d/45/59578566b3275b8fd9157885918fcd0c4d74162928a5310926887b856a51/platformdirs-4.3.7-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "platformdirs",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "4.3.7"
},
{
"SPDXID": "SPDXRef-PACKAGE-pygments",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "9ea1544ad55cecf4b8242fab6dd35a93bbce657034b0611ee383099054ab6d8c"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/8a/0b/9fcc47d19c48b59121088dd6da2488a49d5f72dacf8262e2790a1d2c7d15/pygments-2.19.1-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "pygments",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "2.19.1"
},
{
"SPDXID": "SPDXRef-PACKAGE-pyproject-hooks",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "9e5c6bfa8dcc30091c74b0cf803c81fdd29d94f01992a7707bc97babb1141913"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/bd/24/12818598c362d7f300f18e74db45963dbcb85150324092410c8b49405e42/pyproject_hooks-1.2.0-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "pyproject-hooks",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.2.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-requests",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "70761cfe03c773ceb22aa2f671b4757976145175cdfca038c02654d061d6dcc6"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/f9/9b/335f9764261e915ed497fcdeb11df5dfd6f7bf257d4a6a2a686d80da4d54/requests-2.32.3-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "requests",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "2.32.3"
},
{
"SPDXID": "SPDXRef-PACKAGE-resolvelib",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "f80de38ae744bcf4e918e27a681a5c6cb63a08d9a926c0989c0730bcdd089049"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/cb/1b/ddbb64024a94228e10e65c98c9f28bb235d6947998238bbfe665a044f3d8/resolvelib-1.1.0-py2.py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "resolvelib",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.1.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-rich",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "1c9491e1951aac09caffd42f448ee3d04e58923ffe14993f6e83068dc395d7e0"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/0d/9b/63f4c7ebc259242c89b3acafdb37b41d1185c07ff0011164674e9076b491/rich-14.0.0-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "rich",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "14.0.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-setuptools",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "fe384da74336c398e0d956d1cae0669bc02eed936cdb1d49b57de1990dc11ffc"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/ef/15/88e46eb9387e905704b69849618e699dc2f54407d8953cc4ec4b8b46528d/setuptools-70.3.0-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "setuptools",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "70.3.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-sqlite",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "e335aeb44fa36cde60ecbb6a9f8be6f5d449d645ce9b0199ee53a7e6728d19d2"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/sqlite-3.49.1.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:sqlite:sqlite:3.49.1.0:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "sqlite",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "3.49.1.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-tcl-core",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "4c23f0dd3efcbe6f3a22c503a68d147617bb30c4f5290f1eb3eaacf0b460440b"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/tcl-core-8.6.15.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.15.0:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "tcl-core",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "8.6.15.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-tk",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "0ae56d39bca92865f338529557a1e56d110594184b6dc5a91339c5675751e264"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/tk-8.6.15.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.15.0:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "tk",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "8.6.15.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-tomli",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "678e4fa69e4575eb77d103de3df8a895e1591b48e740211bd1067378c69e8249"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/43/ca/75707e6efa2b37c77dadb324ae7d9571cb424e61ea73fad7c56c2d14527f/tomli-2.2.1-cp311-cp311-macosx_10_9_x86_64.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "tomli",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "2.2.1"
},
{
"SPDXID": "SPDXRef-PACKAGE-tomli-w",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "188306098d013b691fcadc011abd66727d3c414c571bb01b1a174ba8c983cf90"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/c7/18/c86eb8e0202e32dd3df50d43d7ff9854f8e0603945ff398974c1d91ac1ef/tomli_w-1.2.0-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "tomli-w",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.2.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-truststore",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "b64e6025a409a43ebdd2807b0c41c8bff49ea7ae6550b5087ac6df6619352d4c"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/bc/df/8ad635bdcfa8214c399e5614f7c2121dced47defb755a85ea1fa702ffb1c/truststore-0.10.1-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "truststore",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "0.10.1"
},
{
"SPDXID": "SPDXRef-PACKAGE-typing-extensions",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "a439e7c04b49fec3e5d3e2beaa21755cadbbdc391694e28ccdd36ca4a1408f8c"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/8b/54/b1ae86c0973cc6f0210b53d508ca3641fb6d0c56823f288d108bc7ab3cc8/typing_extensions-4.13.2-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "typing_extensions",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "4.13.2"
},
{
"SPDXID": "SPDXRef-PACKAGE-urllib3",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "0ed14ccfbf1c30a9072c7ca157e4319b70d65f623e91e7b32fadb2853431016e"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/33/cf/8435d5a7159e2a9c83a95896ed596f68cf798005fe107cc655b5c5c14704/urllib3-1.26.20-py2.py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "urllib3",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.26.20"
},
{
"SPDXID": "SPDXRef-PACKAGE-xz",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "a15c168e39e87d750c3dc766edc7f19bdda57dacf01e509678467eace91ad282"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/xz-5.2.5.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "xz",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "5.2.5"
},
{
"SPDXID": "SPDXRef-PACKAGE-zlib",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "e3f3fb32564952006eb18b091ca8464740e5eca29d328cfb0b2da22768e0b638"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/zlib-1.3.1.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.1:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "zlib",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.3.1"
}
],
"relationships": [
{
"relatedSpdxElement": "SPDXRef-PACKAGE-bzip2",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-cachecontrol",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-certifi",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-cpython",
"relationshipType": "DESCRIBES",
"spdxElementId": "SPDXRef-DOCUMENT"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-dependency-groups",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-distlib",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-distro",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-expat-2.6.3",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-hacl-star-bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-idna",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-libb2-0.98.1",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-libffi",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-macholib-1.0",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal-2.5.1",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-msgpack",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-openssl",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-packaging",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-pip",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-platformdirs",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-pygments",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-pyproject-hooks",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-requests",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-resolvelib",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-rich",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-setuptools",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-sqlite",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-tcl-core",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-tk",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-tomli",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-tomli-w",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-truststore",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-typing-extensions",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-urllib3",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-pip"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-xz",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-zlib",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
}
],
"spdxVersion": "SPDX-2.3"
}