{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.python/cpython","documentNamespace":"https://spdx.org/spdxdocs/protobom/3ee975ba-63f9-4de9-945a-1b0be109eadd","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20250703203817-48bceb9919d2+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-07-04T12:47:37Z"},"packages":[{"name":"sphinxext-opengraph","SPDXID":"SPDXRef-pypi-sphinxext-opengraph-75c946","versionInfo":"~\u003e 0.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinxext-opengraph"}]},{"name":"blurb","SPDXID":"SPDXRef-pypi-blurb-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/blurb"}]},{"name":"python-docs-theme","SPDXID":"SPDXRef-pypi-python-docs-theme-75c946","versionInfo":"\u003e= 2023.3.1,\u003c 2023.7 || \u003e 2023.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/python-docs-theme"}]},{"name":"sphinx-notfound-page","SPDXID":"SPDXRef-pypi-sphinx-notfound-page-75c946","versionInfo":"~\u003e 1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx-notfound-page"}]},{"name":"sphinx","SPDXID":"SPDXRef-pypi-sphinx-75c946","versionInfo":"~\u003e 8.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx"}]},{"name":"mypy","SPDXID":"SPDXRef-pypi-mypy-1.16.1-75c946","versionInfo":"1.16.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT AND Python-2.0.1","copyrightText":"(c) D TypeAlias, (c) E Argument, (c) E Cannot, (c) E Incompatible, (c) E Only, (c) E Too, (c) Error Method, (c) N Revealed, Copyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands, Copyright (c) 1995-2001 Corporation for National Research Initiatives, Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Python Software Foundation, Copyright (c) 2012-2023 Jukka Lehtosalo and contributors, Copyright (c) 2015 Jukka Lehtosalo and contributors, Copyright (c) 2015-2023 Dropbox, Inc., Copyright (c) 2016 The Pybind Development Team, Copyright 2003 Google Inc., Copyright 2005, Google Inc., Copyright 2006, Google Inc., Copyright 2007, Google Inc., Copyright 2008 Google Inc., Copyright 2008, Google Inc., Copyright 2009 Google Inc., copyright 2012- Y Jukka Lehtosalo and mypy contributors, Copyright 2015, Google Inc., copyright 2020-2022, mypyc team, Copyright Contributors to the pythoncapi_compat project.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/mypy@1.16.1"}]},{"name":"types-setuptools","SPDXID":"SPDXRef-pypi-types-setuptools-80.9.0.20250529-75c946","versionInfo":"80.9.0.20250529","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 AND MIT","copyrightText":"Copyright (c) 2015 Jukka Lehtosalo and contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/types-setuptools@80.9.0.20250529"}]},{"name":"types-psutil","SPDXID":"SPDXRef-pypi-types-psutil-7.0.0.20250601-75c946","versionInfo":"7.0.0.20250601","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 AND MIT","copyrightText":"Copyright (c) 2015 Jukka Lehtosalo and contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/types-psutil@7.0.0.20250601"}]},{"name":"hypothesis","SPDXID":"SPDXRef-pypi-hypothesis-6.111.2-75c946","versionInfo":"6.111.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MPL-2.0","copyrightText":"Copyright (c) 2013, David R. MacIver, copyright 2007 by Armin Ronacher, Portions (c) 2009 by Robert Kern","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/hypothesis@6.111.2"}]},{"name":"actions/github-script","SPDXID":"SPDXRef-githubactions-actions-github-script-7..-75c946","versionInfo":"7.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/github-script@7.%2A.%2A"}]},{"name":"google/oss-fuzz/infra/cifuzz/actions/build_fuzzers","SPDXID":"SPDXRef-githubactions-googleoss-fuzzinfracifuzzactions-buildfuzzers-master-75c946","versionInfo":"master","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master"}]},{"name":"google/oss-fuzz/infra/cifuzz/actions/run_fuzzers","SPDXID":"SPDXRef-githubactions-googleoss-fuzzinfracifuzzactions-runfuzzers-master-75c946","versionInfo":"master","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master"}]},{"name":"re-actors/alls-green","SPDXID":"SPDXRef-githubactions-re-actors-alls-green-05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe-75c946","versionInfo":"05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@4.%2A.%2A"}]},{"name":"hendrikmuhs/ccache-action","SPDXID":"SPDXRef-githubactions-hendrikmuhs-ccache-action-1.2.-75c946","versionInfo":"1.2.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/hendrikmuhs/ccache-action@1.2.%2A"}]},{"name":"egor-tensin/setup-gcc","SPDXID":"SPDXRef-githubactions-egor-tensin-setup-gcc-1..-75c946","versionInfo":"1.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/egor-tensin/setup-gcc@1.%2A.%2A"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@5.%2A.%2A"}]},{"name":"actions/cache","SPDXID":"SPDXRef-githubactions-actions-cache-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache@4.%2A.%2A"}]},{"name":"github/codeql-action/upload-sarif","SPDXID":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/upload-sarif@3.%2A.%2A"}]},{"name":"pre-commit/action","SPDXID":"SPDXRef-githubactions-pre-commit-action-3.0.1-75c946","versionInfo":"3.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pre-commit/action@3.0.1"}]},{"name":"mheap/github-action-required-labels","SPDXID":"SPDXRef-githubactions-mheap-github-action-required-labels-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/mheap/github-action-required-labels@5.%2A.%2A"}]},{"name":"actions/stale","SPDXID":"SPDXRef-githubactions-actions-stale-9..-75c946","versionInfo":"9.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/stale@9.%2A.%2A"}]},{"name":"readthedocs/actions/preview","SPDXID":"SPDXRef-githubactions-readthedocsactions-preview-1..-75c946","versionInfo":"1.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/readthedocs/actions/preview@1.%2A.%2A"}]},{"name":"actions/setup-node","SPDXID":"SPDXRef-githubactions-actions-setup-node-4-75c946","versionInfo":"4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-node@4"}]},{"name":"actions/github-script","SPDXID":"SPDXRef-githubactions-actions-github-script-7-75c946","versionInfo":"7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/github-script@7"}]},{"name":"actions/add-to-project","SPDXID":"SPDXRef-githubactions-actions-add-to-project-1.0.0-75c946","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/add-to-project@1.0.0"}]},{"name":"bytecodealliance/actions/wasmtime/setup","SPDXID":"SPDXRef-githubactions-bytecodeallianceactionswasmtime-setup-1..-75c946","versionInfo":"1.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/bytecodealliance/actions/wasmtime/setup@1.%2A.%2A"}]},{"name":"com.github.python/cpython","SPDXID":"SPDXRef-github-python-cpython-main-1e908b","versionInfo":"main","downloadLocation":"git+https://github.com/python/cpython","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/python/cpython@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-pypi-sphinxext-opengraph-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-pypi-sphinx-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-googleoss-fuzzinfracifuzzactions-buildfuzzers-master-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-re-actors-alls-green-05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-hendrikmuhs-ccache-action-1.2.-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-mheap-github-action-required-labels-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-actions-stale-9..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-actions-add-to-project-1.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-pypi-blurb-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-pypi-python-docs-theme-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-pypi-sphinx-notfound-page-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-pypi-mypy-1.16.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-pypi-types-setuptools-80.9.0.20250529-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-actions-cache-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-pypi-hypothesis-6.111.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-actions-github-script-7..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-googleoss-fuzzinfracifuzzactions-runfuzzers-master-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-readthedocsactions-preview-1..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-node-4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-actions-github-script-7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-pypi-types-psutil-7.0.0.20250601-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-egor-tensin-setup-gcc-1..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-pre-commit-action-3.0.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cpython-main-1e908b","relatedSpdxElement":"SPDXRef-githubactions-bytecodeallianceactionswasmtime-setup-1..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-python-cpython-main-1e908b","relationshipType":"DESCRIBES"}]}