{
"SPDXID": "SPDXRef-DOCUMENT",
"creationInfo": {
"created": "2025-06-17T17:37:41Z",
"creators": [
"Person: Python Release Managers",
"Tool: ReleaseTools-a50b621ebbc3e32d86db5e547992c66afda9d621"
],
"licenseListVersion": "3.22"
},
"dataLicense": "CC0-1.0",
"documentNamespace": "
https://www.python.org/ftp/python/3.14.0/python-3.14.0b3-embed-amd64.zip.spdx.json",
"files": [],
"name": "CPython SBOM",
"packages": [
{
"SPDXID": "SPDXRef-PACKAGE-bzip2",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "ab8d1b0cc087c20d4c32c0e4fcf7d0c733a95da12cedc6d63b3f0a9af07427e2"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/bzip2-1.0.8.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:bzip:bzip2:1.0.8:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "bzip2",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.0.8"
},
{
"SPDXID": "SPDXRef-PACKAGE-cpython",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "a8dcd27176706093062faaa9c9e2894a19e226eb708a61944e0d38f6c6662a7e"
}
],
"downloadLocation": "
https://www.python.org/ftp/python/3.14.0/python-3.14.0b3-embed-amd64.zip",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:python:python:3.14.0b3:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "PSF-2.0",
"name": "CPython",
"originator": "Organization: Python Software Foundation",
"packageFileName": "python-3.14.0b3-embed-amd64.zip",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "3.14.0b3"
},
{
"SPDXID": "SPDXRef-PACKAGE-expat-2.6.3",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "17aa6cfc5c4c219c09287abfc10bc13f0c06f30bb654b28bfe6f567ca646eb79"
}
],
"downloadLocation": "
https://github.com/libexpat/libexpat/releases/download/R_2_6_3/expat-2.6.3.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.6.3:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "expat",
"originator": "Organization: Expat development team",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "2.6.3"
},
{
"SPDXID": "SPDXRef-PACKAGE-hacl-star-4ef25b547b377dcef855db4289c6a00580e7221c",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "39f6fd4f2fe98aecc995a2fd980fae0e0835cef6e563ebbf25f69d3d3102bafd"
}
],
"downloadLocation": "
https://github.com/hacl-star/hacl-star/archive/4ef25b547b377dcef855db4289c6a00580e7221c.zip",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:hacl-star:hacl-star:4ef25b547b377dcef855db4289c6a00580e7221c:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "hacl-star",
"originator": "Organization: HACL* Developers",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "4ef25b547b377dcef855db4289c6a00580e7221c"
},
{
"SPDXID": "SPDXRef-PACKAGE-libffi",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "9d802681adfea27d84cae0487a785fb9caa925bdad44c401b364c59ab2b8edda"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/libffi-3.4.4.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:libffi_project:libffi:3.4.4:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "libffi",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "3.4.4"
},
{
"SPDXID": "SPDXRef-PACKAGE-macholib-1.0",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "c76f268f5054024e962f2515a0e522baf85313064f6740d80375afc850787a38"
}
],
"downloadLocation": "
https://files.pythonhosted.org/packages/ec/57/f0a712efc3ed982cf4038a3cee172057303b9be914c32c93b2fbec27f785/macholib-1.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/
[email protected]",
"referenceType": "purl"
}
],
"licenseConcluded": "NOASSERTION",
"name": "macholib",
"originator": "Person: Ronald Oussoren (
[email protected])",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-mpdecimal",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "338fac3fb8cdd60f406b6326431338756f58a8af94229ffd9bf1e7c2b1ad71ca"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/mpdecimal-4.0.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:4.0.0:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "mpdecimal",
"originator": "Organization: bytereef.org",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "4.0.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-mpdecimal-2.5.1",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "9f9cd4c041f99b5c49ffb7b59d9f12d95b683d88585608aa56a6307667b2b21f"
}
],
"downloadLocation": "
https://www.bytereef.org/software/mpdecimal/releases/mpdecimal-2.5.1.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:2.5.1:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "mpdecimal",
"originator": "Organization: bytereef.org",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "2.5.1"
},
{
"SPDXID": "SPDXRef-PACKAGE-openssl",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "6bb739ecddbd2cfb6d255eb5898437a9b5739277dee931338d3275bac5d96ba2"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/openssl-3.0.16.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:openssl:openssl:3.0.16:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "openssl",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "3.0.16"
},
{
"SPDXID": "SPDXRef-PACKAGE-sqlite",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "e335aeb44fa36cde60ecbb6a9f8be6f5d449d645ce9b0199ee53a7e6728d19d2"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/sqlite-3.49.1.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:sqlite:sqlite:3.49.1.0:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "sqlite",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "3.49.1.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-tcl-core",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "4c23f0dd3efcbe6f3a22c503a68d147617bb30c4f5290f1eb3eaacf0b460440b"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/tcl-core-8.6.15.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.15.0:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "tcl-core",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "8.6.15.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-tk",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "0ae56d39bca92865f338529557a1e56d110594184b6dc5a91339c5675751e264"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/tk-8.6.15.0.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.15.0:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "tk",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "8.6.15.0"
},
{
"SPDXID": "SPDXRef-PACKAGE-xz",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "a15c168e39e87d750c3dc766edc7f19bdda57dacf01e509678467eace91ad282"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/xz-5.2.5.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "xz",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "5.2.5"
},
{
"SPDXID": "SPDXRef-PACKAGE-zlib-ng",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "00bbd88709bc416cb96160ab61d3e1c8f76e106799af7328d0fe434dc7dd5004"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/zlib-ng-2.2.4.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:zlib-ng:zlib-ng:2.2.4:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "zlib-ng",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "2.2.4"
},
{
"SPDXID": "SPDXRef-PACKAGE-zstd",
"checksums": [
{
"algorithm": "SHA256",
"checksumValue": "f24b52470d12f466e9fa4fcc94e6c530625ada51d7b36de7fdc6ed7e6f499c8e"
}
],
"downloadLocation": "
https://github.com/python/cpython-source-deps/archive/refs/tags/zstd-1.5.7.tar.gz",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:facebook:zstandard:1.5.7:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
}
],
"licenseConcluded": "NOASSERTION",
"name": "zstd",
"primaryPackagePurpose": "LIBRARY",
"supplier": "Organization: Python Software Foundation",
"versionInfo": "1.5.7"
}
],
"relationships": [
{
"relatedSpdxElement": "SPDXRef-PACKAGE-bzip2",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-cpython",
"relationshipType": "DESCRIBES",
"spdxElementId": "SPDXRef-DOCUMENT"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-expat-2.6.3",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-hacl-star-4ef25b547b377dcef855db4289c6a00580e7221c",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-libffi",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-macholib-1.0",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal-2.5.1",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-openssl",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-sqlite",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-tcl-core",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-tk",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-xz",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-zlib-ng",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
},
{
"relatedSpdxElement": "SPDXRef-PACKAGE-zstd",
"relationshipType": "DEPENDS_ON",
"spdxElementId": "SPDXRef-PACKAGE-cpython"
}
],
"spdxVersion": "SPDX-2.3"
}