{ "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": { "created": "2025-08-15T04:51:34Z", "creators": [ "Organization: keenlab", "Tool: ksas" ], "comment": "Generated by keenlab ksas at 2025-08-15T04:51:34Z" }, "dataLicense": "CC0-1.0", "name": "", "spdxVersion": "SPDX-2.3", "documentNamespace": "https://console.cloud.tencent.com/bsca/spdx/-05bb1dcd-8163-47fe-916c-9c9a373be95b", "packages": [ { "SPDXID": "SPDXRef-04da9430-07ae-4060-b4ee-089032a6e7f7", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/user@v0.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/user", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.3.0" }, { "SPDXID": "SPDXRef-9d6f9c89-9d50-460e-86dc-680e2ef822d0", "description": "Package sequential provides a set of functions for managing sequential\nfiles on Windows", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/sequential@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/sequential", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-555cff1f-0288-4e96-9539-0a025aaf0563", "description": "Package errors provides simple error handling primitives", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-simplified", "name": "github.com/pkg/errors", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.9.1" }, { "SPDXID": "SPDXRef-bcb48902-2f29-46a9-a6e7-18dcc21360aa", "description": "A library that provides cryptographic and general-purpose functions for Go\nSecure Systems Lab projects at NYU", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.4.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/secure-systems-lab/go-securesystemslib", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.4.0" }, { "SPDXID": "SPDXRef-8b40abf0-2adf-452b-a74f-15412e93d6c3", "description": "Package otlptrace contains abstractions for OTLP span exporters", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-fb8ffb89-05ce-4e63-8d7a-3641d237604d", "description": "This package is intended to be a more powerful and safer alternative to\nreflect", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/google/go-cmp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-02a9a4d5-51ac-4e1b-99a9-2a6a7c1989ee", "description": "gofuzz is a library for populating go objects with random values", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/gofuzz@v1.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/google/gofuzz", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.0" }, { "SPDXID": "SPDXRef-2efa15b2-92e8-4318-bb34-0d256610e4e0", "description": "Schema of the external API types that are served by the Kubernetes API server", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/api@v0.29.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/api", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.2" }, { "SPDXID": "SPDXRef-b2b646fd-06fc-4386-8f2d-4a5110866aa9", "description": "Package acceptencoding provides customizations associated with Accept Encoding Header", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.10.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.10.4" }, { "SPDXID": "SPDXRef-b6ec90c1-8317-4b2a-93a7-44ab9575059f", "description": "docker-credential-helpers is a suite of programs to use native stores to keep Docker credentials safe", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.8.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/docker/docker-credential-helpers", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.8.2" }, { "SPDXID": "SPDXRef-1f1da821-8c0c-4445-a893-4490365a9f28", "description": "Parse line as shell words", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.12", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mattn/go-shellwords", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.12" }, { "SPDXID": "SPDXRef-8e643edc-0e3b-4200-b986-4c8a28433665", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "github.com/apparentlymart/go-textseg/v15", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v15.0.0" }, { "SPDXID": "SPDXRef-12889b23-de10-408a-8d87-27bb4a1e6da0", "description": "errwrap is a package for Go that formalizes the pattern of wrapping errors\nand checking if an error contains another error", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/errwrap", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.0" }, { "SPDXID": "SPDXRef-738753c7-d574-4b2e-8737-4f60ca08d328", "description": "Common digest package used across the container ecosystem", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND cc-by-sa-4.0", "name": "github.com/opencontainers/go-digest", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-bd627861-244d-4f9d-b9a1-583fb7c63141", "description": "oauth2 package contains a client implementation for OAuth 2", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.21.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/oauth2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.21.0" }, { "SPDXID": "SPDXRef-c2e6642a-f66f-4cd5-9e0d-913f5c72c5d6", "description": "This directory contains the GRPC API definitions for containerd", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/containerd/api@v1.7.19", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/containerd/api", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.19" }, { "SPDXID": "SPDXRef-acd73e9f-df01-4b42-90f6-a4026f7010ec", "description": "A helper to merge structs and maps in Golang", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/imdario/mergo@v0.3.16", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/imdario/mergo", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.3.16" }, { "SPDXID": "SPDXRef-f9fad933-b59c-442e-a799-9afca9330cab", "description": "HCL is a toolkit for creating structured configuration languages that are\nboth human- and machine-friendly, for use with command-line tools", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl/v2@v2.20.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/hcl/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.20.1" }, { "SPDXID": "SPDXRef-4704d407-6aac-4537-bcc3-bfa0d8bfa63c", "description": "hashstructure is a Go library for creating a unique hash value\nfor arbitrary values in Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mitchellh/hashstructure/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.0.2" }, { "SPDXID": "SPDXRef-69992364-1c57-4db7-b3ab-63a6d97f8f12", "description": "term provides structures and helper functions to work with terminal (state, sizes)", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/term", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-d5976796-9a98-4191-ba3a-ce1883d24f8e", "description": "go-csvvalue provides an efficient parser for a single-line CSV value", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240710180619-ddb21b71c0b4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/go-csvvalue", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240710180619-ddb21b71c0b4" }, { "SPDXID": "SPDXRef-c45f49bb-bd00-4ab0-bb69-5854ad2ec0c4", "description": "Package metric provides an implementation of the OpenTelemetry metrics SDK", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/sdk/metric", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-27761b11-de28-4056-a6f7-5c88cd3b2372", "description": "Package credentials provides types for retrieving credentials from credentials sources", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.16.16", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/credentials", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.16.16" }, { "SPDXID": "SPDXRef-2c422655-cb44-4611-ae16-a3358b2e7bc5", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/go-connections", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-a06e2374-6dd1-44b5-90d6-3ed5ecc853f4", "description": "GRPC for low-memory environments", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/ttrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.5" }, { "SPDXID": "SPDXRef-d4d4e92b-1b58-4df8-93d5-0cf245d115d7", "description": "An implementation of JSON Pointer - Go language\nCompleted YES\nTested YES\nhttp://tools", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.6", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-openapi/jsonpointer", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.19.6" }, { "SPDXID": "SPDXRef-4611b1d8-a2aa-4d48-b950-7ce765555c32", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/serialx/hashring@v0.0.0-20200727003509-22c0c7ab6b1b", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "github.com/serialx/hashring", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20200727003509-22c0c7ab6b1b" }, { "SPDXID": "SPDXRef-61aac957-f74c-427d-902e-6ccdf23ac88d", "description": "Package otlpmetricgrpc provides an OTLP metrics exporter using gRPC", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v0.44.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.44.0" }, { "SPDXID": "SPDXRef-c2f5c531-211b-4730-80c0-d8e27f352063", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/errdefs", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.3.0" }, { "SPDXID": "SPDXRef-6f9d0b37-0b4c-459c-908d-13dbcf5dfe12", "description": "aws-sdk-go-v2 is the v2 AWS SDK for the Go programming language", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.24.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.24.1" }, { "SPDXID": "SPDXRef-b614d8e6-2332-4571-9d76-f43227b9fa64", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cty-funcs@v0.0.0-20230405223818-a090f58aa992", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/go-cty-funcs", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20230405223818-a090f58aa992" }, { "SPDXID": "SPDXRef-4b0b538b-8861-4e7f-8933-f23ad5af63f6", "description": "Go implementation of the\nin-toto specification", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/in-toto/in-toto-golang@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/in-toto/in-toto-golang", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-cf8266cf-6ded-4b49-b147-75bdba3d7efc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/morikuni/aec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-73c5f596-7456-4d0a-a7c3-494d6414d42e", "description": "The OCI Image Format project creates and maintains the software shipping container image format spec (OCI Image Format)", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/opencontainers/image-spec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.0" }, { "SPDXID": "SPDXRef-62018808-edf4-465c-85bf-8bde5d6c6a3e", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND mit", "name": "github.com/pelletier/go-toml", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.9.5" }, { "SPDXID": "SPDXRef-3f65b1b8-4a65-445e-87eb-b5be3fd46262", "description": "This package provides functions to retrieve system, kernel, and process\nmetrics from the pseudo-filesystems /proc and /sys", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.15.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/procfs", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.15.1" }, { "SPDXID": "SPDXRef-59a83755-4adb-466e-946a-6b4316fef6d7", "description": "Package sts provides the API client, operations, and parameter types for AWS\nSecurity Token Service", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.26.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/sts", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.26.7" }, { "SPDXID": "SPDXRef-a660da75-81cd-41e3-ac5d-873348a6a558", "description": "A high-performance 100% compatible drop-in replacement of \"encoding/json\"\nYou can also use thrift like JSON using thrift-iterator\n\nSource code: https://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/json-iterator/go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.12" }, { "SPDXID": "SPDXRef-69a31665-e92c-464b-a0fb-446a92f9e89b", "description": "This repository holds supplemental Go packages for low-level interactions with\nthe operating system", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.26.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/sys", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.26.0" }, { "SPDXID": "SPDXRef-7d78fbdb-1163-4175-91de-6adad06bb03c", "description": "The Notary project has officially been accepted in to the Cloud Native Computing Foundation (CNCF)", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/theupdateframework/notary@v0.7.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/theupdateframework/notary", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.0" }, { "SPDXID": "SPDXRef-305d833f-b8e1-4804-9c06-cab737ba752b", "description": "An implementation of JSON Pointer - Go languag", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/xeipuuv/gojsonpointer", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20190905194746-02993c407bfb" }, { "SPDXID": "SPDXRef-a02b3a1f-9f7f-45ce-8b57-10e631138107", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go@v1.5.1-1.0.20160303222718-d30aec9fd63c", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/docker/go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.1-1.0.20160303222718-d30aec9fd63c" }, { "SPDXID": "SPDXRef-3fd31daa-ba42-46f3-8683-6d8991d1938f", "description": "go-units is a library to transform human friendly measurements into machine friendly values", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/go-units", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-5415cffc-10b9-4b6b-bbb9-53e439842f1e", "description": "Package otelhttp provides an http", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.53.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.53.0" }, { "SPDXID": "SPDXRef-945d8817-668e-43ec-bef7-dabdf14737ff", "description": "This package implements distance and similarity metrics for strings, based on the Levenshtein measure, in Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/agext/levenshtein", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.3" }, { "SPDXID": "SPDXRef-ccdd66a5-2708-41cc-9253-03269ce1467b", "description": "A transport-agnostic, filesystem metadata manifest system\nThis project is a staging area for experiments in providing transport agnostic\nmetadata storage", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.4.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/continuity", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.4.5" }, { "SPDXID": "SPDXRef-7640a69f-6623-4510-bef0-80518be6612b", "description": "Moby is an open-source project created by Docker to enable and accelerate software containerization", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/docker@v27.4.0-rc.2%2Bincompatible", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/docker", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v27.4.0-rc.2+incompatible" }, { "SPDXID": "SPDXRef-e100ccc2-700c-4ee7-a6f5-57c01857137d", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/golang/protobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.4" }, { "SPDXID": "SPDXRef-0249df5c-b9b2-40d1-a199-0d22102bb5c9", "description": "Functions for accessing \"clean\" Go http", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/go-cleanhttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.2" }, { "SPDXID": "SPDXRef-308bb067-1574-4667-9b74-668de695d1b5", "description": "StopSignal will not be recovered, will propagate to upper level goroutine\n\nGlobalUnboundedExecutor has the life cycle of the program itself\nany goroutine want to be shutdown before main exit can be started from this executor\nGlobalUnboundedExecutor expects the main function to call stop\nit does not magically knows the main function exits\n\nLogInfo logs informational message, for example\nwhich goroutine is still alive preventing the executor shutdown\n\nLogPanic logs goroutine panic\n\nThis section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/modern-go/concurrent", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd" }, { "SPDXID": "SPDXRef-667a2933-1222-4c3f-9930-8672782ca1b5", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "github.com/munnerz/goautoneg", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822" }, { "SPDXID": "SPDXRef-6ff4e81e-cbc4-4ab8-bc59-85876baaf030", "description": "Package otelhttptrace provides instrumentation for the net/http/httptrace\npackage", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.46.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.46.1" }, { "SPDXID": "SPDXRef-2ba7416f-7413-4a10-a5b1-c41a9645324c", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.2.10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.10" }, { "SPDXID": "SPDXRef-f6079d66-2201-4e46-b5cf-696c1942a72b", "description": "This repository is the home of the Docker CLI", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/cli@v27.4.0-rc.2%2Bincompatible", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/cli", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v27.4.0-rc.2+incompatible" }, { "SPDXID": "SPDXRef-4f2d9c02-4cad-4e2e-b0c0-c746ef12baf5", "description": "Smithy code generators for Go and the accompanying smithy-go runtime", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.19.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/smithy-go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.19.0" }, { "SPDXID": "SPDXRef-7b00cc99-55d2-4975-b619-5feacc4b3953", "description": "Package trace provides an implementation of the tracing part of the\nOpenTelemetry API", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/trace", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-38956bab-a7c6-4f2d-9ff2-6f22f236b89d", "description": "kubernetes-sigs/yaml is a permanent fork of ghodss/yaml", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new AND mit", "name": "sigs.k8s.io/yaml", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.0" }, { "SPDXID": "SPDXRef-b5d513d4-af3d-40e1-af47-9d6e01759b9e", "description": "Package shlex implements a simple lexer which splits input in to tokens usingshell-style rules for quoting and commenting", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/google/shlex", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510" }, { "SPDXID": "SPDXRef-a87a449c-8c6e-4f16-b342-dd26d629cc6f", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mattn/go-runewidth", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.15" }, { "SPDXID": "SPDXRef-74bea52d-721b-4b30-9946-22ee2cbfb363", "description": "An implementation of JSON Reference - Go languag", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/xeipuuv/gojsonreference", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180127040603-bd5ef7bd5415" }, { "SPDXID": "SPDXRef-188d1bc4-1e25-448a-8242-829d9da5af0a", "description": "Package sdk provides the OpenTelemetry default SDK for Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/sdk", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-16c0a93e-ddaf-4a88-bfdf-92761969b2a0", "description": "This repository provides Go concurrency primitives in addition to the\nones provided by the language and \"sync\" and \"sync/atomic\" packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.8.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/sync", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.8.0" }, { "SPDXID": "SPDXRef-06601875-31bc-4345-abf4-d3b6d93363ef", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-cidr@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/apparentlymart/go-cidr", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-b33a7bb0-a2d9-4a42-aaf6-d0e307be1e91", "description": "Package httpsnoop provides an easy way to capture http related metrics (i", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/felixge/httpsnoop", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.4" }, { "SPDXID": "SPDXRef-2fd4f309-68b1-43ec-8317-8b06ef1cc165", "description": "This repository provides the protoc-gen-go-vtproto plug-in for protoc, which is used by Vitess to generate optimized marshall & unmarshal code", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/planetscale/vtprotobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10" }, { "SPDXID": "SPDXRef-d5784ac6-ba06-480b-a2bc-2f855684ff4f", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20241001053921-ca0759fec205", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "github.com/tonistiigi/dchapes-mode", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20241001053921-ca0759fec205" }, { "SPDXID": "SPDXRef-678ae84b-2a67-4f4b-839a-1f6807a4fd6f", "description": "This repository provides Go terminal and console support packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/term@v0.24.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/term", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.24.0" }, { "SPDXID": "SPDXRef-0691d26a-e4be-4baf-be5f-bae030986abd", "description": "The Go implementation of gRPC: A high performance, open source, general\nRPC framework that puts mobile and HTTP/2 first", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.66.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/grpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.66.3" }, { "SPDXID": "SPDXRef-ad5db2fa-4ab6-4fe7-a9c3-5ef42c4e6ad9", "description": "Package imds provides the API client for interacting with the Amazon EC2\nInstance Metadata Service", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.14.11", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.14.11" }, { "SPDXID": "SPDXRef-b6b471c1-58e8-42c9-899f-52ba16ead0c5", "description": "Package swag contains a bunch of helper functions for go-openapi and go-swagger projects", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-openapi/swag@v0.22.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-openapi/swag", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.22.3" }, { "SPDXID": "SPDXRef-99088cbb-5396-44e2-b8b1-84ebff23aacb", "description": "The semver package provides the ability to work with Semantic Versions in Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/masterminds/semver/v3@v3.2.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/masterminds/semver/v3", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v3.2.1" }, { "SPDXID": "SPDXRef-2e00ef53-b1bc-43ef-92b8-a80b09acff40", "description": "xxhash is a Go implementation of the 64-bit xxHash algorithm, XXH64", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/cespare/xxhash/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.3.0" }, { "SPDXID": "SPDXRef-2badc2ef-9b63-4ec1-ac58-c6ab569b1f32", "description": "Package config provides utilities for loading configuration from multiple\nsources that can be used to configure the SDK's API clients, and utilities", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.26.6", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/config", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.26.6" }, { "SPDXID": "SPDXRef-9e7a20be-df12-4a43-9f70-edaf628b071d", "description": "This is a Go port of the exponential backoff algorithm from Google's HTTP Client Library for Java", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/cenkalti/backoff/v4", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v4.3.0" }, { "SPDXID": "SPDXRef-87ec9380-1d9c-479f-9953-301c36f0635b", "description": "Golang package for dealing with consoles", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/console@v1.0.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/console", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.4" }, { "SPDXID": "SPDXRef-6396eeff-f762-4de9-b005-749e49b89ccd", "description": "A Go package for managing the registration, marshaling, and unmarshaling of encoded types", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/typeurl/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.2.3" }, { "SPDXID": "SPDXRef-f53029d9-fd47-4518-93f2-c4e6251db918", "description": "[]\n(https://travis-ci", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "isc", "name": "github.com/davecgh/go-spew", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.1" }, { "SPDXID": "SPDXRef-cba53851-9602-4fb4-9147-d181476a431c", "description": "gRPC to JSON proxy generator following the gRPC HTTP spec\n\nThe gRPC-Gateway is a plugin of the Google protocol buffers compiler\nprotoc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.20.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/grpc-ecosystem/grpc-gateway/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.20.0" }, { "SPDXID": "SPDXRef-61a48d93-643d-4357-8ddb-58c7c5a00477", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/opencloudos/docker-buildx-plugin@0.19.3-3?distro_version=9", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "opencloudos/docker-buildx-plugin", "primaryPackagePurpose": "LIBRARY", "versionInfo": "0.19.3-3" }, { "SPDXID": "SPDXRef-f709155b-14b2-497d-b4b1-bc02a755a7a1", "description": "Package presignedurl provides the customizations for API clients to fill in\npresigned URLs into input parameters", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.10.10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.10.10" }, { "SPDXID": "SPDXRef-06df6a76-c524-468b-a25f-3829ade135fe", "description": "[!NOTE]\nTestify is being maintained at v1, no breaking changes will be accepted in this repo", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.9.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/stretchr/testify", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.9.0" }, { "SPDXID": "SPDXRef-efd27eac-cc9b-4107-8908-1b520f241e5f", "description": "Scheme, typing, encoding, decoding, and conversion packages for Kubernetes and Kubernetes-like API objects", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/apimachinery@v0.29.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/apimachinery", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.2" }, { "SPDXID": "SPDXRef-8877111f-e51c-4d46-9e2c-381634293954", "description": "go-wordwrap (Golang package: wordwrap) is a package for Go that\nautomatically wraps words into multiple lines", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v0.0.0-20150314170334-ad45545899c7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mitchellh/go-wordwrap", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20150314170334-ad45545899c7" }, { "SPDXID": "SPDXRef-a8fb0731-5016-4462-93fe-2a617f276384", "description": "This package provides various compression algorithms", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.17.11", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND bsd-new AND mit", "name": "github.com/klauspost/compress", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.17.11" }, { "SPDXID": "SPDXRef-a54a6dd4-9bad-4b6a-8265-4f177fcb6a12", "description": "Package easyjson provides a fast and easy way to marshal/unmarshal Go structs\nto/from JSON without the use of reflection", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mailru/easyjson@v0.7.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mailru/easyjson", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.7" }, { "SPDXID": "SPDXRef-e39e9729-0571-4f30-a744-2320943f3de1", "description": "This directory contains documents about Docker Image Specification v1", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/docker-image-spec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.1" }, { "SPDXID": "SPDXRef-8404fa37-2848-4b38-be42-8e30f7bf7382", "description": "This subrepository holds experimental and deprecated (in the old\ndirectory) packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20240909161429-701f63a606c0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/exp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240909161429-701f63a606c0" }, { "SPDXID": "SPDXRef-83a16bbb-177d-4ad8-bed1-f90e21633286", "description": "Package ssooidc provides the API client, operations, and parameter types for\nAWS SSO OIDC", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.21.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.21.7" }, { "SPDXID": "SPDXRef-46359677-6a82-49fa-95d8-96bdd52493b5", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.5.10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.5.10" }, { "SPDXID": "SPDXRef-e37e4a96-2bbf-404b-bb28-16843594f15f", "description": "pflag is a drop-in replacement for Go's flag package, implementing\nPOSIX/GNU-style --flags", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/spf13/pflag", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.5" }, { "SPDXID": "SPDXRef-ec5720ed-61f7-4565-a35a-87792d572061", "description": "Package otelgrpc is the instrumentation library for google", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.46.1" }, { "SPDXID": "SPDXRef-58da43bd-d140-4ed5-be81-33c7f0b69a32", "description": "This project hosts the Go implementation for\nprotocol buffers, which is a\nlanguage-neutral, platform-neutral, extensible mechanism for serializing\nstructured data", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.35.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "google.golang.org/protobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.35.1" }, { "SPDXID": "SPDXRef-d13a1e85-8d57-4b1f-a1a8-fe1f4cb0d025", "description": "Package sso provides the API client, operations, and parameter types for AWS\nSingle Sign-On", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.18.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/sso", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.18.7" }, { "SPDXID": "SPDXRef-d2587ba2-7065-4534-985a-b9c24007d25a", "description": "locker provides a mechanism for creating finer-grained locking to helpfree up more global locks to handle other tasks", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/locker", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-b5826bad-9bd4-4ab3-b15d-2f3afdd73047", "description": "(If you are reading this because you are interested in Prometheus's native\nhistograms, pay special attention to the last paragraph below", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/client_model", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.1" }, { "SPDXID": "SPDXRef-800114d3-51b4-4402-a2cd-e620ccaf4459", "description": "Package inf (type inf", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/inf.v0@v0.9.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "gopkg.in/inf.v0", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.9.1" }, { "SPDXID": "SPDXRef-ec86d5a4-ef21-42d4-b0bf-b6e0ee93bf01", "description": "Perks contains the Go package quantile that computes approximate quantiles over\nan unbounded data stream within low memory and CPU bounds", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/beorn7/perks", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-6766357f-3b39-4b24-8d85-ff511a22f987", "description": "Package metric provides the OpenTelemetry API used to measure metrics about\nsource code operation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/metric", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-f1912638-55a0-485a-8964-42933b694be1", "description": "Gorilla WebSocket is a Go implementation of the\nWebSocket protocol", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gorilla/websocket@v1.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-simplified", "name": "github.com/gorilla/websocket", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.0" }, { "SPDXID": "SPDXRef-3099e87e-b08d-4480-a6df-3e8d74a31b98", "description": "reflect api that avoids runtime reflect", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/modern-go/reflect2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.2" }, { "SPDXID": "SPDXRef-87ed0e94-4416-4895-96b7-1c333dc580aa", "description": "An implementation of JSON Schema, based on IETF's draft v4 - Go language\nReferences :\nDependencies :\nThere are various ways to load your JSON data", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/xeipuuv/gojsonschema", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.0" }, { "SPDXID": "SPDXRef-2066c241-e569-4f1c-a39b-23c8e7921739", "description": "OpenTelemetry-Go is the Go implementation of OpenTelemetry", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-e94cacf5-036d-49c4-a4bc-fe3881095c79", "description": "This repository provides supplementary Go time packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/time@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/time", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-72e072fd-b35a-4df1-aaa0-962e5d07bafc", "description": "This repo is the home for Kubernetes OpenAPI discovery spec generation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20231010175941-2dd684a91f00", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/kube-openapi", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20231010175941-2dd684a91f00" }, { "SPDXID": "SPDXRef-e7417bdd-1bad-470c-b710-d97a4f39b883", "description": "This is a library containing utilities to generate (reference) documentation\nfor the docker CLI on docs", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/cli-docs-tool@v0.8.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/cli-docs-tool", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.8.0" }, { "SPDXID": "SPDXRef-8850fc0c-8dfd-4fd9-96e5-2c926a0ac4c2", "description": "mapstructure is a Go library for decoding generic map values to structures\nand vice versa, while providing helpful error handling", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/go-viper/mapstructure/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.0.0" }, { "SPDXID": "SPDXRef-411122ec-f11e-4d2d-99fe-b4c97b3c3777", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/patternmatcher", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-27806a4d-0542-47c7-89b0-def75ba88223", "description": "This repository holds supplementary Go packages for text processing,\nmany involving Unicode", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/text@v0.18.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/text", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.18.0" }, { "SPDXID": "SPDXRef-eb6315f1-7a53-46f1-b1b8-993204837532", "description": "An implementation of JSON Reference - Go language\nFeature complete", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-openapi/jsonreference", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.20.2" }, { "SPDXID": "SPDXRef-157dc8cd-3cf3-46eb-8174-8cd09ff51e1d", "description": "flock implements a thread-safe file lock", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gofrs/flock@v0.12.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/gofrs/flock", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.12.1" }, { "SPDXID": "SPDXRef-3c3062b3-2bbc-451f-af38-24b9a508bff2", "description": "Package gorilla/mux implements a request router and dispatcher", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/gorilla/mux", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.8.1" }, { "SPDXID": "SPDXRef-4237998f-3cd6-4e46-ad9a-5b93d2bdad95", "description": "Package mountinfo provides a set of functions to retrieve information about OS mounts", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/mountinfo", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.2" }, { "SPDXID": "SPDXRef-a7351ef4-4e20-40ad-8a51-f3a37fe4e63b", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/pmezard/go-difflib", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-70f23c89-7498-49b0-9a0b-f5ae6db0d12a", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20240701130421-f6361c86f094", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/genproto/googleapis/rpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240701130421-f6361c86f094" }, { "SPDXID": "SPDXRef-d54d53f5-46e3-4678-ac0f-159dba3de15f", "description": "This repo contains code which implements the Kubernetes \"apply\" operation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.4.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "sigs.k8s.io/structured-merge-diff/v4", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v4.4.1" }, { "SPDXID": "SPDXRef-4e7b6191-0a67-4951-a1b3-dfccd1e14d2d", "description": "gogoprotobuf is a fork of golang/protobuf with extra code generation features", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/gogo/protobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.2" }, { "SPDXID": "SPDXRef-5e60eeaf-67e2-4f6b-ba5c-2fd409d7f3f4", "description": "This repository contains Protocol Buffer models and associated libraries\nfor working with API description formats supported by\ngnostic", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/gnostic-models@v0.6.8", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/google/gnostic-models", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.8" }, { "SPDXID": "SPDXRef-6387ecc8-cf55-4f03-a971-1d3ec2f6fb15", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.3.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/proto/otlp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.1" }, { "SPDXID": "SPDXRef-1bbd03f0-809c-4b20-817b-99dcbc59620a", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20240701130421-f6361c86f094", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/genproto/googleapis/api", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240701130421-f6361c86f094" }, { "SPDXID": "SPDXRef-cedce1dc-cc77-4acb-a150-980f5cd2160a", "description": "Package signal provides helper functions for dealing with signals across\nvarious operating systems", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/signal@v0.7.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/signal", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.1" }, { "SPDXID": "SPDXRef-cd96602d-21e7-43e2-9877-ca6fccbd7e9e", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/mxk/go-flowrate", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20140419014527-cca7078d478f" }, { "SPDXID": "SPDXRef-38b47482-fd2d-470a-85ec-a7f4659fade7", "description": "Go clients for talking to a kubernetes cluster", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/client-go@v0.29.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/client-go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.2" }, { "SPDXID": "SPDXRef-92857fe3-3587-4dae-b0e2-85eb4b2ce9ae", "description": "This package is currently in development and the API may not be stable", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/google/uuid", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.6.0" }, { "SPDXID": "SPDXRef-83ca6edb-5420-4271-8727-75ca95472f89", "description": "This package implements types that can be used in stdlib formatting functionslike fmt", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/units@v0.0.0-20180711220420-6950e57a87ea", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/units", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180711220420-6950e57a87ea" }, { "SPDXID": "SPDXRef-b524688b-3efa-4637-9f31-26c28ae8a06a", "description": "This is the Go client library for\nPrometheus", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.20.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/client_golang", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.20.2" }, { "SPDXID": "SPDXRef-0a7b94fd-ec81-4aad-850c-f0886f2efc29", "description": "Package otlptracegrpc provides an OTLP span exporter using gRPC", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-796842fc-ef14-4d23-8614-69e174a479ca", "description": "Go library to handle references to container images", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/distribution/reference", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-12933715-19dd-46a1-a382-507c06e756c1", "description": "The Docker toolset to pack, ship, store, and deliver content", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/distribution", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.8.3+incompatible" }, { "SPDXID": "SPDXRef-2d0b1902-2d71-4150-bbc0-55f45fffb6cb", "description": "logr offers an(other) opinion on how Go programs and libraries can do logging\nwithout becoming coupled to a particular logging implementation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-logr/logr", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.4.2" }, { "SPDXID": "SPDXRef-c1a49c78-dcfa-4e6e-8d67-40d8d5bdd411", "description": "Incremental file directory sync tools in golang", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/fsutil@v0.0.0-20241121093142-31cf1f437184", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/fsutil", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20241121093142-31cf1f437184" }, { "SPDXID": "SPDXRef-a988b3c7-7ee3-4298-bdb6-098760accf42", "description": "WARNING(2023-05-26): New submodules: upgrade before 2024-03-01 to avoid\nambiguous import errors with\ngoogle", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20240123012728-ef4313101c80", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/genproto", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240123012728-ef4313101c80" }, { "SPDXID": "SPDXRef-e0f49db6-fb27-4103-8f86-a5a62997d026", "description": "klog is a permanent fork of https://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/klog/v2@v2.110.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/klog/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.110.1" }, { "SPDXID": "SPDXRef-b5ec3abc-8091-4126-a0c1-c4be8fc7e708", "description": "Package ini implements parsing of the AWS shared config file", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.7.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/internal/ini", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.3" }, { "SPDXID": "SPDXRef-f53e8541-6634-4cb6-bd3b-8900f19e49b8", "description": "Go reference library for parsing and loading Compose files as specified by the\nCompose specification", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/compose-spec/compose-go/v2@v2.4.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/compose-spec/compose-go/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.4.4" }, { "SPDXID": "SPDXRef-2f66c574-94b5-479d-b102-83998f8b5397", "description": "This Go package implements Unicode Text Segmentation according to Unicode Standard Annex #29 (Unicode version 12", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/rivo/uniseg", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.0" }, { "SPDXID": "SPDXRef-0724ffde-c04f-443c-9cec-60a13cf23bdd", "description": "Logrus is a structured logger for Go (golang), completely API compatible with\nthe standard library logger", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/sirupsen/logrus", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.9.3" }, { "SPDXID": "SPDXRef-599853c7-85e1-43f8-83d1-f843d290a717", "description": "cty (pronounced \"see-tie\", emoji: \ud83d\udc40 \ud83d\udc54,\nIPA: /si't\u02b0a\u026a/)\nis a dynamic type system for applications written\nin Go that need to represent user-supplied values without losing type\ninformation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.14.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/zclconf/go-cty", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.14.4" }, { "SPDXID": "SPDXRef-5aeb6750-58fc-4e86-b626-aa171c6bc640", "description": "Package otlptracehttp provides an OTLP span exporter using HTTP with protobuf payloads", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-087e494b-c930-448c-8d77-6bd77be2de55", "description": "The yaml package enables Go programs to comfortably encode and decode YAML\nvalues", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "gopkg.in/yaml.v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.4.0" }, { "SPDXID": "SPDXRef-4bd1c8cb-3a27-4335-a8dd-e27e37e12c4e", "description": "A set of Go libraries that provide low-level, kubernetes-independent packages\nsupplementing the Go standard libs", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/utils@v0.0.0-20230726121419-3b25d923346b", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/utils", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20230726121419-3b25d923346b" }, { "SPDXID": "SPDXRef-cc718b77-2fba-4f02-af6b-545a8b870a10", "description": "This package is small wrapper around the prometheus go client to help enforce convention and best practices for metrics collection in Docker projects", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go-metrics@v0.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND cc-by-sa-4.0", "name": "github.com/docker/go-metrics", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.1" }, { "SPDXID": "SPDXRef-c3a61a61-8e0f-451d-8cd7-45d83d68c911", "description": "Package userns provides utilities to detect whether we are currently running\nin a Linux user namespace", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/userns@v0.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/userns", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.1.0" }, { "SPDXID": "SPDXRef-aa06dbca-a9cd-4e36-a556-c628004db2d2", "description": "This library is a subproject of sig-api-machinery", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/sigs.k8s.io/json@v0.0.0-20221116044647-bc3834ca7abd", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND bsd-new", "name": "sigs.k8s.io/json", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20221116044647-bc3834ca7abd" }, { "SPDXID": "SPDXRef-45a37f94-ca30-42cf-8759-21dfe13b6cd4", "description": "This repository holds supplementary Go networking packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/net@v0.29.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/net", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.0" }, { "SPDXID": "SPDXRef-d0c19bcf-1c5f-4e83-9867-50eb88bd2c81", "description": "Docs: https://godoc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/josharian/intern@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/josharian/intern", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-f864f600-f7e0-4224-80a6-e33ebf633b39", "description": "A multiplexed stream library using spdy\nClient example (connecting to mirroring server without auth)\nServer example (mirroring server without auth)\nCopyright 2013-2021 Docker, inc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/spdystream@v0.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/spdystream", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.0" }, { "SPDXID": "SPDXRef-9ed45b61-ec85-4c84-9547-6cf9e4e8f976", "description": "Package otlpmetrichttp provides an OTLP metrics exporter using HTTP with protobuf payloads", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v0.44.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.44.0" }, { "SPDXID": "SPDXRef-9a119c5c-2321-49b2-a586-e6686bd14648", "description": "This package implements the logr interface\nin terms of Go's standard log package(https://pkg", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-logr/stdr", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.2" }, { "SPDXID": "SPDXRef-5afda898-8d5f-4a84-b665-536c33906c65", "description": "containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.7.24", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/containerd", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.24" }, { "SPDXID": "SPDXRef-37723f00-7889-45b0-bed7-037a8195e95b", "description": "Sort orders and comparison functions", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/fvbommel/sortorder@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/fvbommel/sortorder", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-2bad5ebf-080a-4a9b-95d2-8cf141e1da1a", "description": "go-pathspec implements gitignore-style pattern matching for paths", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/shibumi/go-pathspec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.0" }, { "SPDXID": "SPDXRef-8fa00d11-2f5a-48e4-b5fa-c7122eae3488", "description": "The yaml package enables Go programs to comfortably encode and decode YAML\nvalues", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND mit", "name": "gopkg.in/yaml.v3", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v3.0.1" }, { "SPDXID": "SPDXRef-042686dc-80a9-4918-b261-2d4ed9ee233f", "description": "This repository holds supplementary Go cryptography packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.27.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/crypto", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.27.0" }, { "SPDXID": "SPDXRef-bda8ef62-76d4-42c5-a98f-26b27663bc35", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/log", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.1.0" }, { "SPDXID": "SPDXRef-886d4be1-e870-4069-b94a-9b2e034ab3d3", "description": "package for building REST-style Web Services using Google Go\n\n\n\nREST asks developers to use HTTP methods explicitly and in a way that's consistent with the protocol definition", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/emicklei/go-restful/v3@v3.11.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/emicklei/go-restful/v3", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v3.11.0" }, { "SPDXID": "SPDXRef-7686c701-de18-4129-8eb6-4e0e891065ec", "description": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.18.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/buildkit", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.18.0" }, { "SPDXID": "SPDXRef-ceb12bed-4501-4cb5-a086-18d3686ac576", "description": "This repository contains Go libraries that are shared across Prometheus\ncomponents and libraries", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.55.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/common", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.55.0" }, { "SPDXID": "SPDXRef-bfabde29-f928-478b-ab18-2b733186d7d7", "description": "Cobra is a library for creating powerful modern CLI applications", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.8.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/spf13/cobra", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.8.1" }, { "SPDXID": "SPDXRef-85d67cb0-4953-41b6-9881-9d88a430f028", "description": "#VT100\n\nThis project was based on jaguilar/vt100\nThis is a vt100 screen reader", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/vt100@v0.0.0-20240514184818-90bafcd6abab", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/vt100", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240514184818-90bafcd6abab" }, { "SPDXID": "SPDXRef-1051a82e-7eef-41c4-96ec-e2da868c662b", "description": "A Go package for formatting, normalizing and matching container platforms", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v0.2.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/platforms", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.1" }, { "SPDXID": "SPDXRef-2aff5bae-5727-41e8-ad09-7a27c0aeb1c0", "description": "go-multierror is a package for Go that provides a mechanism for\nrepresenting a list of error values as a single error", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/go-multierror", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.1" } ], "relationships": [ { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ec5720ed-61f7-4565-a35a-87792d572061", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-945d8817-668e-43ec-bef7-dabdf14737ff", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3fd31daa-ba42-46f3-8683-6d8991d1938f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e39e9729-0571-4f30-a744-2320943f3de1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ceb12bed-4501-4cb5-a086-18d3686ac576", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b5d513d4-af3d-40e1-af47-9d6e01759b9e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ec86d5a4-ef21-42d4-b0bf-b6e0ee93bf01", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-87ec9380-1d9c-479f-9953-301c36f0635b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cedce1dc-cc77-4acb-a150-980f5cd2160a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2ba7416f-7413-4a10-a5b1-c41a9645324c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-38956bab-a7c6-4f2d-9ff2-6f22f236b89d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8404fa37-2848-4b38-be42-8e30f7bf7382", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-02a9a4d5-51ac-4e1b-99a9-2a6a7c1989ee", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-87ed0e94-4416-4895-96b7-1c333dc580aa", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5e60eeaf-67e2-4f6b-ba5c-2fd409d7f3f4", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ad5db2fa-4ab6-4fe7-a9c3-5ef42c4e6ad9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d54d53f5-46e3-4678-ac0f-159dba3de15f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cc718b77-2fba-4f02-af6b-545a8b870a10", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5415cffc-10b9-4b6b-bbb9-53e439842f1e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-678ae84b-2a67-4f4b-839a-1f6807a4fd6f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d13a1e85-8d57-4b1f-a1a8-fe1f4cb0d025", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-800114d3-51b4-4402-a2cd-e620ccaf4459", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-99088cbb-5396-44e2-b8b1-84ebff23aacb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a660da75-81cd-41e3-ac5d-873348a6a558", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-efd27eac-cc9b-4107-8908-1b520f241e5f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f53029d9-fd47-4518-93f2-c4e6251db918", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-fb8ffb89-05ce-4e63-8d7a-3641d237604d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f1912638-55a0-485a-8964-42933b694be1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1051a82e-7eef-41c4-96ec-e2da868c662b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-acd73e9f-df01-4b42-90f6-a4026f7010ec", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4b0b538b-8861-4e7f-8933-f23ad5af63f6", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e7417bdd-1bad-470c-b710-d97a4f39b883", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-305d833f-b8e1-4804-9c06-cab737ba752b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-04da9430-07ae-4060-b4ee-089032a6e7f7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f53e8541-6634-4cb6-bd3b-8900f19e49b8", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-70f23c89-7498-49b0-9a0b-f5ae6db0d12a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7640a69f-6623-4510-bef0-80518be6612b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d0c19bcf-1c5f-4e83-9867-50eb88bd2c81", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8b40abf0-2adf-452b-a74f-15412e93d6c3", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-69992364-1c57-4db7-b3ab-63a6d97f8f12", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2d0b1902-2d71-4150-bbc0-55f45fffb6cb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a8fb0731-5016-4462-93fe-2a617f276384", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-796842fc-ef14-4d23-8614-69e174a479ca", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cf8266cf-6ded-4b49-b147-75bdba3d7efc", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6387ecc8-cf55-4f03-a971-1d3ec2f6fb15", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-bfabde29-f928-478b-ab18-2b733186d7d7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-06df6a76-c524-468b-a25f-3829ade135fe", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4f2d9c02-4cad-4e2e-b0c0-c746ef12baf5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d5976796-9a98-4191-ba3a-ce1883d24f8e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-188d1bc4-1e25-448a-8242-829d9da5af0a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-46359677-6a82-49fa-95d8-96bdd52493b5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ccdd66a5-2708-41cc-9253-03269ce1467b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c1a49c78-dcfa-4e6e-8d67-40d8d5bdd411", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a06e2374-6dd1-44b5-90d6-3ed5ecc853f4", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b6ec90c1-8317-4b2a-93a7-44ab9575059f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0a7b94fd-ec81-4aad-850c-f0886f2efc29", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cba53851-9602-4fb4-9147-d181476a431c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c45f49bb-bd00-4ab0-bb69-5854ad2ec0c4", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2aff5bae-5727-41e8-ad09-7a27c0aeb1c0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-599853c7-85e1-43f8-83d1-f843d290a717", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e94cacf5-036d-49c4-a4bc-fe3881095c79", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0691d26a-e4be-4baf-be5f-bae030986abd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-bd627861-244d-4f9d-b9a1-583fb7c63141", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9ed45b61-ec85-4c84-9547-6cf9e4e8f976", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-61aac957-f74c-427d-902e-6ccdf23ac88d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-37723f00-7889-45b0-bed7-037a8195e95b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-83ca6edb-5420-4271-8727-75ca95472f89", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-555cff1f-0288-4e96-9539-0a025aaf0563", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2f66c574-94b5-479d-b102-83998f8b5397", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-eb6315f1-7a53-46f1-b1b8-993204837532", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-16c0a93e-ddaf-4a88-bfdf-92761969b2a0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d4d4e92b-1b58-4df8-93d5-0cf245d115d7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a988b3c7-7ee3-4298-bdb6-098760accf42", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b524688b-3efa-4637-9f31-26c28ae8a06a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7d78fbdb-1163-4175-91de-6adad06bb03c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-aa06dbca-a9cd-4e36-a556-c628004db2d2", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cd96602d-21e7-43e2-9877-ca6fccbd7e9e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6396eeff-f762-4de9-b005-749e49b89ccd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b5826bad-9bd4-4ab3-b15d-2f3afdd73047", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4bd1c8cb-3a27-4335-a8dd-e27e37e12c4e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b614d8e6-2332-4571-9d76-f43227b9fa64", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-308bb067-1574-4667-9b74-668de695d1b5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8fa00d11-2f5a-48e4-b5fa-c7122eae3488", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-27806a4d-0542-47c7-89b0-def75ba88223", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8850fc0c-8dfd-4fd9-96e5-2c926a0ac4c2", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-738753c7-d574-4b2e-8737-4f60ca08d328", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-62018808-edf4-465c-85bf-8bde5d6c6a3e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2badc2ef-9b63-4ec1-ac58-c6ab569b1f32", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c3a61a61-8e0f-451d-8cd7-45d83d68c911", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1bbd03f0-809c-4b20-817b-99dcbc59620a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a87a449c-8c6e-4f16-b342-dd26d629cc6f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-06601875-31bc-4345-abf4-d3b6d93363ef", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5afda898-8d5f-4a84-b665-536c33906c65", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6766357f-3b39-4b24-8d85-ff511a22f987", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4237998f-3cd6-4e46-ad9a-5b93d2bdad95", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9a119c5c-2321-49b2-a586-e6686bd14648", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f6079d66-2201-4e46-b5cf-696c1942a72b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-38b47482-fd2d-470a-85ec-a7f4659fade7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9d6f9c89-9d50-460e-86dc-680e2ef822d0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-12889b23-de10-408a-8d87-27bb4a1e6da0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e0f49db6-fb27-4103-8f86-a5a62997d026", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-74bea52d-721b-4b30-9946-22ee2cbfb363", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5aeb6750-58fc-4e86-b626-aa171c6bc640", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9e7a20be-df12-4a43-9f70-edaf628b071d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4704d407-6aac-4537-bcc3-bfa0d8bfa63c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b5ec3abc-8091-4126-a0c1-c4be8fc7e708", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2efa15b2-92e8-4318-bb34-0d256610e4e0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d2587ba2-7065-4534-985a-b9c24007d25a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-61a48d93-643d-4357-8ddb-58c7c5a00477", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b33a7bb0-a2d9-4a42-aaf6-d0e307be1e91", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-59a83755-4adb-466e-946a-6b4316fef6d7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c2e6642a-f66f-4cd5-9e0d-913f5c72c5d6", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-bcb48902-2f29-46a9-a6e7-18dcc21360aa", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4e7b6191-0a67-4951-a1b3-dfccd1e14d2d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-72e072fd-b35a-4df1-aaa0-962e5d07bafc", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2c422655-cb44-4611-ae16-a3358b2e7bc5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-12933715-19dd-46a1-a382-507c06e756c1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-69a31665-e92c-464b-a0fb-446a92f9e89b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3f65b1b8-4a65-445e-87eb-b5be3fd46262", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-27761b11-de28-4056-a6f7-5c88cd3b2372", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7b00cc99-55d2-4975-b619-5feacc4b3953", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6ff4e81e-cbc4-4ab8-bc59-85876baaf030", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-73c5f596-7456-4d0a-a7c3-494d6414d42e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d5784ac6-ba06-480b-a2bc-2f855684ff4f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b6b471c1-58e8-42c9-899f-52ba16ead0c5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-83a16bbb-177d-4ad8-bed1-f90e21633286", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4611b1d8-a2aa-4d48-b950-7ce765555c32", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-58da43bd-d140-4ed5-be81-33c7f0b69a32", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3c3062b3-2bbc-451f-af38-24b9a508bff2", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2bad5ebf-080a-4a9b-95d2-8cf141e1da1a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-087e494b-c930-448c-8d77-6bd77be2de55", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2fd4f309-68b1-43ec-8317-8b06ef1cc165", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b2b646fd-06fc-4386-8f2d-4a5110866aa9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8877111f-e51c-4d46-9e2c-381634293954", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6f9d0b37-0b4c-459c-908d-13dbcf5dfe12", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a02b3a1f-9f7f-45ce-8b57-10e631138107", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3099e87e-b08d-4480-a6df-3e8d74a31b98", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e37e4a96-2bbf-404b-bb28-16843594f15f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-45a37f94-ca30-42cf-8759-21dfe13b6cd4", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a54a6dd4-9bad-4b6a-8265-4f177fcb6a12", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f864f600-f7e0-4224-80a6-e33ebf633b39", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1f1da821-8c0c-4445-a893-4490365a9f28", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e100ccc2-700c-4ee7-a6f5-57c01857137d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2e00ef53-b1bc-43ef-92b8-a80b09acff40", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-042686dc-80a9-4918-b261-2d4ed9ee233f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-667a2933-1222-4c3f-9930-8672782ca1b5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a7351ef4-4e20-40ad-8a51-f3a37fe4e63b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-92857fe3-3587-4dae-b0e2-85eb4b2ce9ae", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c2f5c531-211b-4730-80c0-d8e27f352063", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-886d4be1-e870-4069-b94a-9b2e034ab3d3", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0724ffde-c04f-443c-9cec-60a13cf23bdd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8e643edc-0e3b-4200-b986-4c8a28433665", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f709155b-14b2-497d-b4b1-bc02a755a7a1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-85d67cb0-4953-41b6-9881-9d88a430f028", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f9fad933-b59c-442e-a799-9afca9330cab", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0249df5c-b9b2-40d1-a199-0d22102bb5c9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-157dc8cd-3cf3-46eb-8174-8cd09ff51e1d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-411122ec-f11e-4d2d-99fe-b4c97b3c3777", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7686c701-de18-4129-8eb6-4e0e891065ec", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-bda8ef62-76d4-42c5-a98f-26b27663bc35", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2066c241-e569-4f1c-a39b-23c8e7921739", "relationshipType": "DESCRIBES" } ] }