SPDXVersion: SPDX-2.1
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: project
DocumentNamespace: http://spdx.org/spdxdocs/spdx-v2.1-39ce7527-097c-459f-af37-fa5dded19d50
Creator: Person: Anonymous ()
Creator: Organization: Anonymous ()
Creator: Tool: reuse-6.1.0
Created: 2026-09-19T03:50:13Z
CreatorComment: <text>This document was created automatically using available reuse information consistent with REUSE.</text>
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e5bc6bed8fec5f46ed6d702e4b05fbde
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-f049b2c7d8a0edeb4bb6cc15a44a9c87
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3e63cd227969dfcf15453f9a6be76dea
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-106330fec96b2541a8e8da522415cbb5
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-bdaa602e710bfaf9b42efdf3eaa7e085
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4c0228735a3c6e0c5188d73aaea61e27
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-442b2de55ad4c5d7b24105ea3835b58d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-560a92a60dc499d5d4b459d9e919304d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-6f949a62c9083ae53196b31a0cfa4bef
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ad931415b5bea71fbfe5c99399a4fcd4
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-bea666c2dedd9ad12c668986de8f301d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4f8542de669e235dda133805958f7f58
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-641972ac31702ca1f67115fe77852b85
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-07ccfe4704dee0ec53ba50d5ea0de98e
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ba9e3d35a71ef20fe49596c3f12faa76
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e5229c93603888ab2367fae5b2cbc248
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-bafbce18825ed2b85c2fe24452eb911f
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-cc5404398d48c792393c26b852231531
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-98cce0e8a47724f4fa8b4240f44f2f5d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c0ef1631d31f2eb01644b8a9f1fa5692
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-69266618bf052ce5a277ddc9457fde27
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-539b3ca1edad27998f62d1cad8309ec4
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-5f06d6911e94e347d46d7fc04ec24278
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1e6e93a6db709d46a5ec8dc3d584c218
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-87750578e8d1907eb233ea31a7994c1f
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-347acd71e4e502d8a84cc15c37c22722
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0b00870ec52f24d1d689c1456c9f051d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3aad7984f740ae24bde93099cef010f2
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e7b7567b3c640f87f649366b80a2b556
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-6073d3d8c79e208a5e19c2d97e172b4e
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-24f4dd5ac7c4d9b4f6190700952c913d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-899b2388b2a6d7c6cf353518b2e61254
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1ca8434427aa15a97d3134c441def3a6
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a582c6120fea59bd64daf760ee4b50e1
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2a79edeccd4f92435ae6b1688061f172
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7c451d0af835a38a8a6749dc3cd33466
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1b041754ec630f290008ae925212e787
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-9e32d7cea9c3761272da4276b5d3e41d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d7d71c74bd17d01240bcb49f41d7b182
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d377e0c14784edcb46771663de6526da

FileName: ./.editorconfig
SPDXID: SPDXRef-e5bc6bed8fec5f46ed6d702e4b05fbde
FileChecksum: SHA1: 6497bfb3d4bcc9726e98eafce6a150de717faf91
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.github/ISSUE_TEMPLATE/bug_report.yml
SPDXID: SPDXRef-f049b2c7d8a0edeb4bb6cc15a44a9c87
FileChecksum: SHA1: ef6b617e9558b1ff84116cbac9c2294f1b2e3dca
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.github/ISSUE_TEMPLATE/config.yml
SPDXID: SPDXRef-3e63cd227969dfcf15453f9a6be76dea
FileChecksum: SHA1: 38383ad9ef69f3b3ffd83f2b74ef1a83a7c1720a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.github/ISSUE_TEMPLATE/feature_request.yml
SPDXID: SPDXRef-106330fec96b2541a8e8da522415cbb5
FileChecksum: SHA1: 251aaa86c492c69fc040b3f97bb8086c7bcbea75
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.github/PULL_REQUEST_TEMPLATE.md
SPDXID: SPDXRef-bdaa602e710bfaf9b42efdf3eaa7e085
FileChecksum: SHA1: af1607a3bd633f5b441c55f896a71c6dc975061f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.github/dependabot.yml
SPDXID: SPDXRef-4c0228735a3c6e0c5188d73aaea61e27
FileChecksum: SHA1: a4bb015cf7b7967c64d898f03f261eeb5b34fc08
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.github/release.yml
SPDXID: SPDXRef-442b2de55ad4c5d7b24105ea3835b58d
FileChecksum: SHA1: 3e2113d4580319035eb4e0771fd86d3672dc8928
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.github/workflows/ci.yml
SPDXID: SPDXRef-560a92a60dc499d5d4b459d9e919304d
FileChecksum: SHA1: 68aa7f9e2485ad49463f43ffbd39d2890cd54802
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.github/workflows/codeql.yml
SPDXID: SPDXRef-6f949a62c9083ae53196b31a0cfa4bef
FileChecksum: SHA1: 77c9668c59812affee41e1d6ee8a2b77ebe055a5
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.github/workflows/scorecard.yml
SPDXID: SPDXRef-ad931415b5bea71fbfe5c99399a4fcd4
FileChecksum: SHA1: aff99d4611053c08d13c192ce1cbc8d87e6b4c1e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.gitignore
SPDXID: SPDXRef-bea666c2dedd9ad12c668986de8f301d
FileChecksum: SHA1: bdd5865bd212b6775d29870467ede3ba52b6dcde
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.grype.yaml
SPDXID: SPDXRef-4f8542de669e235dda133805958f7f58
FileChecksum: SHA1: f752e311bd0e6a01590f1a14a3cba45fe2dce056
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.lefthook.yml
SPDXID: SPDXRef-641972ac31702ca1f67115fe77852b85
FileChecksum: SHA1: 5df90efb024438554d205aff2705191a5795c295
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./.yamllint.yml
SPDXID: SPDXRef-07ccfe4704dee0ec53ba50d5ea0de98e
FileChecksum: SHA1: b7bed6bc992a8e8d83386951660bce8e6e282d94
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./CHANGELOG.md
SPDXID: SPDXRef-ba9e3d35a71ef20fe49596c3f12faa76
FileChecksum: SHA1: 71f7173c203f82d8d2e8a04a8d6174c57a82cb66
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./CLAUDE.md
SPDXID: SPDXRef-e5229c93603888ab2367fae5b2cbc248
FileChecksum: SHA1: 8bc9cc58a6767375ad5fb7ee32bd94791461c836
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./CODE_OF_CONDUCT.md
SPDXID: SPDXRef-bafbce18825ed2b85c2fe24452eb911f
FileChecksum: SHA1: f80af5f5d38dc38edda38ed277d1c20ec0d4ae74
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-4.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2014 The Contributor Covenant authors
SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./CONTRIBUTING.md
SPDXID: SPDXRef-cc5404398d48c792393c26b852231531
FileChecksum: SHA1: 8f45e96910d2e67bb694a760fbeeff0cf5040bcb
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./Containerfile
SPDXID: SPDXRef-98cce0e8a47724f4fa8b4240f44f2f5d
FileChecksum: SHA1: 607210e7ccee64bc13fb988acff9c128b086f4ed
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./README.md
SPDXID: SPDXRef-c0ef1631d31f2eb01644b8a9f1fa5692
FileChecksum: SHA1: 23fdc0ad25cc3e7c3e44fefd7e700b9f1b8ef191
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./SECURITY.md
SPDXID: SPDXRef-69266618bf052ce5a277ddc9457fde27
FileChecksum: SHA1: 779c02b6d69e5da46f17cf50734b036654233d6b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./bin/check-dco.sh
SPDXID: SPDXRef-539b3ca1edad27998f62d1cad8309ec4
FileChecksum: SHA1: 8a20fd55d27bfa2f386990e8166876413703b8b5
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./bin/measure.sh
SPDXID: SPDXRef-5f06d6911e94e347d46d7fc04ec24278
FileChecksum: SHA1: 3b4ac02c2a0f8a979e5413110aee88648dd3df06
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./bin/smoke-test.sh
SPDXID: SPDXRef-1e6e93a6db709d46a5ec8dc3d584c218
FileChecksum: SHA1: 7ead419762e74c4f2ef374d63f2190a48a367987
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./compose.ci.yml
SPDXID: SPDXRef-87750578e8d1907eb233ea31a7994c1f
FileChecksum: SHA1: fe4b202a64335c54050bd4edd3c544bf40755540
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./containers/entrypoint.sh
SPDXID: SPDXRef-347acd71e4e502d8a84cc15c37c22722
FileChecksum: SHA1: e184492e7277215755e54943a08365dea8f3c296
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./containers/settings.py
SPDXID: SPDXRef-0b00870ec52f24d1d689c1456c9f051d
FileChecksum: SHA1: d2abc8758c02194aed8cdcfd1fffc678ec5d7803
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./docs/adr/0001-record-architecture-decisions.md
SPDXID: SPDXRef-3aad7984f740ae24bde93099cef010f2
FileChecksum: SHA1: a528a85a761091fd4af3b53151b85c3c76ef302d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./docs/adr/0002-adopt-development-best-practices.md
SPDXID: SPDXRef-e7b7567b3c640f87f649366b80a2b556
FileChecksum: SHA1: cddec2c45db2f50450073c052060dde05e7c60cd
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./docs/adr/0003-trimmed-pulp-image-on-python-slim.md
SPDXID: SPDXRef-6073d3d8c79e208a5e19c2d97e172b4e
FileChecksum: SHA1: a53b8b5920ee14a9e2651bdd1cd156b7c9d76461
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./docs/adr/0004-open-the-source-keep-the-image-internal.md
SPDXID: SPDXRef-24f4dd5ac7c4d9b4f6190700952c913d
FileChecksum: SHA1: 3af93f85f4abe119699eb60189e15ee03783bf03
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./docs/adr/index.yml
SPDXID: SPDXRef-899b2388b2a6d7c6cf353518b2e61254
FileChecksum: SHA1: 826cb9e73fadcf776b72862ebc7dd0aa9959f061
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./measurements/20260916-211828-arm64.json
SPDXID: SPDXRef-1ca8434427aa15a97d3134c441def3a6
FileChecksum: SHA1: 81dba5e92dd672a7d84ad8b4e402d9430f9cf5c2
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./measurements/20260916-212331-arm64.json
SPDXID: SPDXRef-a582c6120fea59bd64daf760ee4b50e1
FileChecksum: SHA1: eea057c2ec0bfd6f31b8e4414815caec9b2d1762
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./measurements/20260916-223308-amd64.json
SPDXID: SPDXRef-2a79edeccd4f92435ae6b1688061f172
FileChecksum: SHA1: a63d83e6c50096ee96f111e43a40e89920c22039
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./measurements/20260917-095009-arm64.json
SPDXID: SPDXRef-7c451d0af835a38a8a6749dc3cd33466
FileChecksum: SHA1: ac8d993d5047c46c207bc952036e29542ffe0ad8
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./measurements/20260917-095047-amd64.json
SPDXID: SPDXRef-1b041754ec630f290008ae925212e787
FileChecksum: SHA1: 04cbb98b92707b6f3a19cee4b41a0e932c1b6a1c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./measurements/20260917-123528-arm64.json
SPDXID: SPDXRef-9e32d7cea9c3761272da4276b5d3e41d
FileChecksum: SHA1: a423e4548b7652ed8db58155e413df00bfea03d6
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./measurements/20260917-123628-amd64.json
SPDXID: SPDXRef-d7d71c74bd17d01240bcb49f41d7b182
FileChecksum: SHA1: 1f799ea78aef65cb491256d70478daacc12764f4
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>

FileName: ./measurements/requirements.lock
SPDXID: SPDXRef-d377e0c14784edcb46771663de6526da
FileChecksum: SHA1: c12a381818316422abdb36467415aa01580835c4
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: <text>SPDX-FileCopyrightText: 2026 Georges Martin <jrjsmrtn@gmail.com></text>