{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.xmlsec/python-xmlsec","documentNamespace":"https://spdx.org/spdxdocs/protobom/a714b7a1-ba38-49aa-bb87-5eb7034f4580","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260409125808-b30cb6032525+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-04-13T01:29:10Z"},"packages":[{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@6.%2A.%2A"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@6.%2A.%2A"}]},{"name":"actions/cache","SPDXID":"SPDXRef-githubactions-actions-cache-4.3.0-75c946","versionInfo":"4.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache@4.3.0"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@3.%2A.%2A"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-5.0.0-75c946","versionInfo":"5.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@5.0.0"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@4.%2A.%2A"}]},{"name":"actions/cache/restore","SPDXID":"SPDXRef-githubactions-actionscache-restore-4.3.0-75c946","versionInfo":"4.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache/restore@4.3.0"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-5.0.0-75c946","versionInfo":"5.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@5.0.0"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6.0.0-75c946","versionInfo":"6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@6.0.0"}]},{"name":"docker/setup-qemu-action","SPDXID":"SPDXRef-githubactions-docker-setup-qemu-action-3.7.0-75c946","versionInfo":"3.7.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/setup-qemu-action@3.7.0"}]},{"name":"pypa/cibuildwheel","SPDXID":"SPDXRef-githubactions-pypa-cibuildwheel-3.3.0-75c946","versionInfo":"3.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pypa/cibuildwheel@3.3.0"}]},{"name":"pytest","SPDXID":"SPDXRef-pypi-pytest-8.4.1-75c946","versionInfo":"8.4.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2004 Holger Krekel and others, Copyright (c) 2014, Gregory Boissinot, copyright 2015, holger krekel and pytest-dev team, Copyright Holger Krekel and others, 2004. Distributed","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest@8.4.1"}]},{"name":"ruff","SPDXID":"SPDXRef-pypi-ruff-0.14.4-75c946","versionInfo":"0.14.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) Copyright 2000 Guido van Rossum, (c) Copyright CNRI, (c) revealed list Literal 99, Copyright (c) 1999-2003 Steve Purcell, Copyright (c) 2000 Bastian Kleineidam, Copyright (c) 2000 Luke Kenneth Casson Leighton \u003clkcl@samba.org\u003e, Copyright (c) 2001 Python Software Foundation, Copyright (c) 2001-2021 Vinay Sajip, Copyright (c) 2001-2022 Vinay Sajip, Copyright (c) 2003 Python Software Foundation, Copyright (c) 2006-2009 Johann C. Rocholl \u003cjohann@rocholl.net\u003e, Copyright (c) 2009-2014 Florent Xicluna \u003cflorent.xicluna@gmail.com\u003e, Copyright (c) 2011-2013 Tarek Ziade \u003ctarek@ziade.org\u003e, Copyright (c) 2011-2014 Vinay Sajip, Copyright (c) 2012 GreenSteam, \u003chttp://greensteam.dk/\u003e, Copyright (c) 2012-2016 Ian Cordasco \u003cgraffatcolmingov@gmail.com\u003e, Copyright (c) 2012-2018 Steven Myint, Copyright (c) 2013 Timothy Edmund Crosley, Copyright (c) 2014-2020 Amir Rachum, \u003chttp://amir.rachum.com/\u003e, Copyright (c) 2014-2020 Ian Lee \u003cIanLee1521@gmail.com\u003e, Copyright (c) 2015 Jukka Lehtosalo and contributors, Copyright (c) 2016 Lukasz Langa, Copyright (c) 2017 Anthony Sottile, Copyright (c) 2018 Anthony Sottile, Copyright (c) 2018 Nikita Sobolev, Copyright (c) 2020 Martin Thoma, Copyright (c) 2020 RustPython Team, Copyright (c) 2020 Sambhav Kothari, \u003chttps://github.com/samj1912\u003e, Copyright (c) 2021-2023, Copyright (c) 2021-2023 import os, Copyright (c) 2021, 2022 import os, Copyright (c) 2021, 2023 option, Copyright (c) 2022 - 2023 Ruff, Copyright (c) 2022 Charles Marsh, Copyright (c) 2022- 2023 Ruff, Copyright (c) 2022-2023 Ruff, Copyright (c) 2022, 2023 Ruff, Copyright (c) 2022,2023 Ruff, Copyright (c) 2023, Copyright (c) 2023 import os, COPYRIGHT (c) 2023 import os, Copyright (c) 2023 Jelle Zijlstra, Copyright (c) 2023 Ruff, Copyright (c) Individual contributors, Copyright (c) Microsoft Corporation, Copyright (c) Rome Tools, Inc. and its affiliates, Copyright 2005-2011 Divmod, Inc., Copyright 2008 by Armin Ronacher, Copyright 2013-2014 Florent Xicluna, Copyright 2020 The TensorFlow Authors, Copyright 2021-2023, Copyright 2023, Copyright 2023 .trim, Copyright 2023 import os","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/ruff@0.14.4"}]},{"name":"lxml-stubs","SPDXID":"SPDXRef-pypi-lxml-stubs-0.5.1-75c946","versionInfo":"0.5.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 AND MIT","copyrightText":"Copyright (c) 2015 Jukka Lehtosalo and contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/lxml-stubs@0.5.1"}]},{"name":"lxml","SPDXID":"SPDXRef-pypi-lxml-6.0.3-75c946","versionInfo":"6.0.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/lxml@6.0.3"}]},{"name":"furo","SPDXID":"SPDXRef-pypi-furo-75c946","versionInfo":"\u003e= 2021.4.11b34","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/furo"}]},{"name":"importlib-metadata","SPDXID":"SPDXRef-pypi-importlib-metadata-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/importlib-metadata"}]},{"name":"packaging","SPDXID":"SPDXRef-pypi-packaging-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/packaging"}]},{"name":"sphinx","SPDXID":"SPDXRef-pypi-sphinx-75c946","versionInfo":"\u003e= 3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx"}]},{"name":"lxml","SPDXID":"SPDXRef-pypi-lxml-75c946","versionInfo":"\u003e= 3.8","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/lxml"}]},{"name":"com.github.xmlsec/python-xmlsec","SPDXID":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","versionInfo":"master","downloadLocation":"git+https://github.com/xmlsec/python-xmlsec","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/xmlsec/python-xmlsec@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actionscache-restore-4.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-qemu-action-3.7.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-importlib-metadata-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-packaging-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-lxml-stubs-0.5.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-5.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-pypa-cibuildwheel-3.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-ruff-0.14.4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-sphinx-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-lxml-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-cache-4.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-5.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-pytest-8.4.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-lxml-6.0.3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-furo-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relationshipType":"DESCRIBES"}]}