{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.xmlsec/python-xmlsec","documentNamespace":"https://spdx.org/spdxdocs/protobom/57b5e87c-6daa-485e-a474-b2a6121e65ec","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260330165726-14d82a196d68+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-03-31T08:29:08Z"},"packages":[{"name":"lxml-stubs","SPDXID":"SPDXRef-pypi-lxml-stubs-0.5.1-75c946","versionInfo":"0.5.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 AND MIT","copyrightText":"Copyright (c) 2015 Jukka Lehtosalo and contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/[email protected]"}]},{"name":"pytest","SPDXID":"SPDXRef-pypi-pytest-8.4.1-75c946","versionInfo":"8.4.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2004 Holger Krekel and others, Copyright (c) 2014, Gregory Boissinot, copyright 2015, holger krekel and pytest-dev team, Copyright Holger Krekel and others, 2004. Distributed","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/[email protected]"}]},{"name":"ruff","SPDXID":"SPDXRef-pypi-ruff-0.14.4-75c946","versionInfo":"0.14.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) Copyright 2000 Guido van Rossum, (c) Copyright CNRI, (c) revealed list Literal 99, Copyright (c) 1999-2003 Steve Purcell, Copyright (c) 2000 Bastian Kleineidam, Copyright (c) 2000 Luke Kenneth Casson Leighton \[email protected]\u003e, Copyright (c) 2001 Python Software Foundation, Copyright (c) 2001-2021 Vinay Sajip, Copyright (c) 2001-2022 Vinay Sajip, Copyright (c) 2003 Python Software Foundation, Copyright (c) 2006-2009 Johann C. Rocholl \[email protected]\u003e, Copyright (c) 2009-2014 Florent Xicluna \[email protected]\u003e, Copyright (c) 2011-2013 Tarek Ziade \[email protected]\u003e, Copyright (c) 2011-2014 Vinay Sajip, Copyright (c) 2012 GreenSteam, \u003chttp://greensteam.dk/\u003e, Copyright (c) 2012-2016 Ian Cordasco \[email protected]\u003e, Copyright (c) 2012-2018 Steven Myint, Copyright (c) 2013 Timothy Edmund Crosley, Copyright (c) 2014-2020 Amir Rachum, \u003chttp://amir.rachum.com/\u003e, Copyright (c) 2014-2020 Ian Lee \[email protected]\u003e, Copyright (c) 2015 Jukka Lehtosalo and contributors, Copyright (c) 2016 Lukasz Langa, Copyright (c) 2017 Anthony Sottile, Copyright (c) 2018 Anthony Sottile, Copyright (c) 2018 Nikita Sobolev, Copyright (c) 2020 Martin Thoma, Copyright (c) 2020 RustPython Team, Copyright (c) 2020 Sambhav Kothari, \u003chttps://github.com/samj1912\u003e, Copyright (c) 2021-2023, Copyright (c) 2021-2023 import os, Copyright (c) 2021, 2022 import os, Copyright (c) 2021, 2023 option, Copyright (c) 2022 - 2023 Ruff, Copyright (c) 2022 Charles Marsh, Copyright (c) 2022- 2023 Ruff, Copyright (c) 2022-2023 Ruff, Copyright (c) 2022, 2023 Ruff, Copyright (c) 2022,2023 Ruff, Copyright (c) 2023, Copyright (c) 2023 import os, COPYRIGHT (c) 2023 import os, Copyright (c) 2023 Jelle Zijlstra, Copyright (c) 2023 Ruff, Copyright (c) Individual contributors, Copyright (c) Microsoft Corporation, Copyright (c) Rome Tools, Inc. and its affiliates, Copyright 2005-2011 Divmod, Inc., Copyright 2008 by Armin Ronacher, Copyright 2013-2014 Florent Xicluna, Copyright 2020 The TensorFlow Authors, Copyright 2021-2023, Copyright 2023, Copyright 2023 .trim, Copyright 2023 import os","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/[email protected]"}]},{"name":"lxml","SPDXID":"SPDXRef-pypi-lxml-6.0.2-75c946","versionInfo":"6.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause AND GPL-1.0-or-later","copyrightText":"(c) Copyright 2020, lxml dev team, (c) ET. Where, (c) OpenJS Foundation and other contributors, (c) self.assertEqual http://ns1, Copyright (c) 1989, 1991 Free Software Foundation, Inc., Copyright (c) 1999-2003 by Fredrik Lundh, Copyright (c) 1999-2003 by Secret Labs AB, Copyright (c) 1999-2004 by Fredrik Lundh, Copyright (c) 1999-2009 by Fredrik Lundh, Copyright (c) 2000-2008 Rick Jelliffe and Academia Sinica Computing Center, Copyright (c) 2000,2001 Rick Jelliffe and Academia Sinica Computing Center, Copyright (c) 2001, 2006 Rick Jelliffe and Academia Sinica Computing Center, Copyright (c) 2003 Shuttleworth Foundation, Copyright (c) 2003-2004 by Fredrik Lundh, Copyright (c) 2003-2009 by Fredrik Lundh, Copyright (c) 2004 Ian Bicking, Copyright (c) 2004 Infrae, Copyright (c) 2004-2010 Rick Jellife, Copyright (c) 2008 Rick Jelliffe, Copyright (c) ISO/IEC 2015, Copyright 2006-2009 by the Pygments team, copyright 2020, lxml dev team, copyright Ian Bicking, copyright International Organization, copyright Rick Jelliffe and Academia Sinica Computing Center, copyright Shuttleworth Foundation, Copyright Sphinx contributors, copyrighted by the Free Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/[email protected]"}]},{"name":"importlib-metadata","SPDXID":"SPDXRef-pypi-importlib-metadata-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/importlib-metadata"}]},{"name":"packaging","SPDXID":"SPDXRef-pypi-packaging-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/packaging"}]},{"name":"sphinx","SPDXID":"SPDXRef-pypi-sphinx-75c946","versionInfo":"\u003e= 3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx"}]},{"name":"furo","SPDXID":"SPDXRef-pypi-furo-75c946","versionInfo":"\u003e= 2021.4.11b34","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/furo"}]},{"name":"lxml","SPDXID":"SPDXRef-pypi-lxml-75c946","versionInfo":"\u003e= 3.8","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/lxml"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@6.%2A.%2A"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@6.%2A.%2A"}]},{"name":"actions/cache","SPDXID":"SPDXRef-githubactions-actions-cache-4.3.0-75c946","versionInfo":"4.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/[email protected]"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@3.%2A.%2A"}]},{"name":"actions/cache/restore","SPDXID":"SPDXRef-githubactions-actionscache-restore-4.3.0-75c946","versionInfo":"4.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache/[email protected]"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-5.0.0-75c946","versionInfo":"5.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/[email protected]"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@4.%2A.%2A"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-5.0.0-75c946","versionInfo":"5.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/[email protected]"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6.0.0-75c946","versionInfo":"6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/[email protected]"}]},{"name":"docker/setup-qemu-action","SPDXID":"SPDXRef-githubactions-docker-setup-qemu-action-3.7.0-75c946","versionInfo":"3.7.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/[email protected]"}]},{"name":"pypa/cibuildwheel","SPDXID":"SPDXRef-githubactions-pypa-cibuildwheel-3.3.0-75c946","versionInfo":"3.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pypa/[email protected]"}]},{"name":"com.github.xmlsec/python-xmlsec","SPDXID":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","versionInfo":"master","downloadLocation":"git+https://github.com/xmlsec/python-xmlsec","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/xmlsec/python-xmlsec@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-ruff-0.14.4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-lxml-6.0.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-cache-4.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actionscache-restore-4.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-5.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-lxml-stubs-0.5.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-packaging-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-furo-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-lxml-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-pypa-cibuildwheel-3.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-qemu-action-3.7.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-pytest-8.4.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-importlib-metadata-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-pypi-sphinx-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-5.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-xmlsec-python-xmlsec-master-fa3308","relationshipType":"DESCRIBES"}]}