SPDXVersion: SPDX-2.1 DataLicense: CC0-1.0 SPDXID: SPDXRef-DOCUMENT DocumentName: project DocumentNamespace: http://spdx.org/spdxdocs/spdx-v2.1-68184bad-8b64-4fc6-a343-a45180acd2e3 Creator: Person: Anonymous () Creator: Organization: Anonymous () Creator: Tool: reuse-6.1.0 Created: 2026-09-21T08:07:09Z CreatorComment: This document was created automatically using available reuse information consistent with REUSE. Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7c3bd1be5a28a444073bd0d0ddc4d03c Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-fed27ff18820a3c95ef772605fd8c9f9 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-44d9af8ae2f34bb1b377b2e669aa754e Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b49f0ff43d9ee886c1ed79a0b6333fa9 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2618daf6c1b188ef2aabaefcdaf9fbda Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-789456ee9a61dd43ced62b96f568ecea Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-63a8888e8c4a78bba1d48a1f7b94fe54 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-74417567ca725854f7527524e764ad6f Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-caf1fd7d1b66b5a9039a86d0c660eceb Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d8a12865a7dc4323f58a5c1ef9bacd3a Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d8136f5ab7c51a02ab747e312483db16 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4f4c4b8445c44ce632d28011ce137cf6 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-641b36924224f89f45e83f232a35c22b Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a0cd9b94a20ef697fc2ee82b9bace7c3 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-bdd62ea8e40306076b481711b4f3dc5b Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-77d81cfa4c5b0981e12c62ac9794a292 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1cfe36e25500975dea96bb62f8aeffb2 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4fea6f37c8e506da1b861809dcae82ba Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-39bc61e47c6be61fa59936413d42d52f Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4135115f48712a9111d89d4a4fa07289 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-94cd6d143c065c6bf5d31b7033b5536d Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-9cd883bca38f3c1aaa37bc02035c958d Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e5763819056b3413970373e16ac72162 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8a3aeac40569500d56e9dceec6686284 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0ff208dd189b0f89a1975a9c5f92556c Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-5ba3e4713503ee4361c1d5e232f2dfb0 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-68da929404dc2459f4024ec4af444193 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8138901ce2d29c10d4762d30f7a00012 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1ec729a853d520393098037e26285c83 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b1b3ed48a9464faa1b614925b8756e1b Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-6f62000933f51308477ef8d6ec2fed62 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-9c42a8f9d992135ce1dbefc0320c8a94 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-20056c48dd4f395af60649ff790da013 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4ed8b2fd07a34fe22d6e6128f3beb87f FileName: ./.commitlintrc.yml SPDXID: SPDXRef-7c3bd1be5a28a444073bd0d0ddc4d03c FileChecksum: SHA1: a072396159fd2894f7b3a15eea70d75ee2698712 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/ISSUE_TEMPLATE/bug.md SPDXID: SPDXRef-fed27ff18820a3c95ef772605fd8c9f9 FileChecksum: SHA1: 827e620ad72476748967b3fe49028f8dc1114b31 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/ISSUE_TEMPLATE/config.yml SPDXID: SPDXRef-44d9af8ae2f34bb1b377b2e669aa754e FileChecksum: SHA1: 045f1bef6857bd8f8146fa15dd645a3236cefe35 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/ISSUE_TEMPLATE/documentation.md SPDXID: SPDXRef-b49f0ff43d9ee886c1ed79a0b6333fa9 FileChecksum: SHA1: 3c1de60eda8fd8669cfdac1e2967b56692fe191f LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/ISSUE_TEMPLATE/feature.md SPDXID: SPDXRef-2618daf6c1b188ef2aabaefcdaf9fbda FileChecksum: SHA1: 7e74cc462f36f9dd5ccb5ff102e298710659f12e LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/ISSUE_TEMPLATE/refactor.md SPDXID: SPDXRef-789456ee9a61dd43ced62b96f568ecea FileChecksum: SHA1: e32fba82a6a48a9e1d743bcfee05bc0c804e3f5c LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/PULL_REQUEST_TEMPLATE.md SPDXID: SPDXRef-63a8888e8c4a78bba1d48a1f7b94fe54 FileChecksum: SHA1: 10367905a81d96c9d78aac84005cdf4595f530bb LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/aptu.yml SPDXID: SPDXRef-74417567ca725854f7527524e764ad6f FileChecksum: SHA1: e1598b5362ad23ba47bcf5ea0e30dc86f6a11764 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/instructions/pr-review.md SPDXID: SPDXRef-caf1fd7d1b66b5a9039a86d0c660eceb FileChecksum: SHA1: 5515f14bb767e9771e1568a7145288b5fe57d689 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/scorecard-policy.yml SPDXID: SPDXRef-d8a12865a7dc4323f58a5c1ef9bacd3a FileChecksum: SHA1: 2e60ec3730ff5213db2b160ae4abd94165d0a1a3 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/workflows/aptu-review.yml SPDXID: SPDXRef-d8136f5ab7c51a02ab747e312483db16 FileChecksum: SHA1: 4ebc0358152ed08ada94d53d673ae0a0a0809654 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/workflows/aptu-scan-security.yml SPDXID: SPDXRef-4f4c4b8445c44ce632d28011ce137cf6 FileChecksum: SHA1: 1a776fe071d72d35675d8280dd62c85049487eef LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/workflows/aptu-triage.yml SPDXID: SPDXRef-641b36924224f89f45e83f232a35c22b FileChecksum: SHA1: 8ee31e2a6dff81ac5bcd36e88255a8986025a58a LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/workflows/ci.yml SPDXID: SPDXRef-a0cd9b94a20ef697fc2ee82b9bace7c3 FileChecksum: SHA1: 44778287faf157a684de47ebd4460641585f7551 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/workflows/publish.yml SPDXID: SPDXRef-bdd62ea8e40306076b481711b4f3dc5b FileChecksum: SHA1: a84d5fa75a5189b1d3c10f7a47a631f48f351e27 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/workflows/reuse.yml SPDXID: SPDXRef-77d81cfa4c5b0981e12c62ac9794a292 FileChecksum: SHA1: c48ddaa6e41548f22fe33b117e05fa0a279a4e0c LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/workflows/scorecard.yml SPDXID: SPDXRef-1cfe36e25500975dea96bb62f8aeffb2 FileChecksum: SHA1: fc082821eb61187a4f639cec4d578ba0cbbf18b9 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/workflows/security.yml SPDXID: SPDXRef-4fea6f37c8e506da1b861809dcae82ba FileChecksum: SHA1: 10ba4451ac7e00f80101c6ed1eaa1624ead9c184 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.github/zizmor.yml SPDXID: SPDXRef-39bc61e47c6be61fa59936413d42d52f FileChecksum: SHA1: aba7d43891ba46ad0a057fcb28cecaa8454cf37d LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.gitignore SPDXID: SPDXRef-4135115f48712a9111d89d4a4fa07289 FileChecksum: SHA1: 3ca0e72fdfd533e411cc95dc9c91c5ec59661f95 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./.markdownlint-cli2.jsonc SPDXID: SPDXRef-94cd6d143c065c6bf5d31b7033b5536d FileChecksum: SHA1: f4614b3a0e44df7a4bd610621b55e21803ebc4fc LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./AGENTS.md SPDXID: SPDXRef-9cd883bca38f3c1aaa37bc02035c958d FileChecksum: SHA1: e5cce596f199cfa4ae317a55e6f989488c7af7d9 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./AI_POLICY.md SPDXID: SPDXRef-e5763819056b3413970373e16ac72162 FileChecksum: SHA1: 5b3d771cb7e8a3470483871c4bacbff59d8cf927 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./CODE_OF_CONDUCT.md SPDXID: SPDXRef-8a3aeac40569500d56e9dceec6686284 FileChecksum: SHA1: a635c8e0070358cad7fac9a2808a98b8a6981b3b LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./CONTRIBUTING.md SPDXID: SPDXRef-0ff208dd189b0f89a1975a9c5f92556c FileChecksum: SHA1: 3fe6c4e59c62cc78aedbdc7eef85b3f65ce6351d LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./README.md SPDXID: SPDXRef-5ba3e4713503ee4361c1d5e232f2dfb0 FileChecksum: SHA1: 62d55c15d667b4ecb67ba4d33e2527c2b61a6087 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./SECURITY.md SPDXID: SPDXRef-68da929404dc2459f4024ec4af444193 FileChecksum: SHA1: 3ca3977b05f41f94c9c4bbcc739a36ba15f31973 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./docs/audit/2026-09-20-dependency-supply-chain.md SPDXID: SPDXRef-8138901ce2d29c10d4762d30f7a00012 FileChecksum: SHA1: 1ad9425ff52228c43f82b1c3006541037d56ae71 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./package-lock.json SPDXID: SPDXRef-1ec729a853d520393098037e26285c83 FileChecksum: SHA1: 527c6fc98facec1367d6a43f3f940c8a70be593e LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./package.json SPDXID: SPDXRef-b1b3ed48a9464faa1b614925b8756e1b FileChecksum: SHA1: d8f929bd4a5860c7f1af5eeb0ac7bad9932b6cd5 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./renovate.json SPDXID: SPDXRef-6f62000933f51308477ef8d6ec2fed62 FileChecksum: SHA1: 874ee7c2c0afd31f9d2daefcbd4f43cb0d577af2 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./scripts/smoke-judge.mjs SPDXID: SPDXRef-9c42a8f9d992135ce1dbefc0320c8a94 FileChecksum: SHA1: de69e57616af5229992c2acd0fa30568b5ea4d83 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./scripts/smoke.mjs SPDXID: SPDXRef-20056c48dd4f395af60649ff790da013 FileChecksum: SHA1: bb3ffdbe1336731b5ccf0b0db8805b86bfd465a4 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors FileName: ./server.mjs SPDXID: SPDXRef-4ed8b2fd07a34fe22d6e6128f3beb87f FileChecksum: SHA1: 8f9255cd18d5343066e6f7326ea3d9f423a981c1 LicenseConcluded: NOASSERTION LicenseInfoInFile: Apache-2.0 FileCopyrightText: SPDX-FileCopyrightText: 2026 clouatre-labs contributors