SPDXVersion: SPDX-2.1 DataLicense: CC0-1.0 SPDXID: SPDXRef-DOCUMENT DocumentName: project DocumentNamespace: http://spdx.org/spdxdocs/spdx-v2.1-4a18527c-f162-46a1-9337-4046b07be0da Creator: Person: Anonymous () Creator: Organization: Anonymous () Creator: Tool: reuse-6.1.0 Created: 2025-12-22T12:23:01Z CreatorComment: This document was created automatically using available reuse information consistent with REUSE. Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-f52c047db77ca882e09a95d50437a631 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c7463caf25ac344db2d3262021cefb40 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-f64ee38d7fe72fef43ce9b8d38bf602f Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-743d8530ca7af73c972175388438c3cf Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ed69cb849b654481b24b3d4adce4f071 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-60042a24283db5ca86f6612f4b21d965 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d29ff7ff298c08590f5c26bcd8971a72 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c32727701f64cd2094ec443bce8c371e Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-dacbdbddcfea3272644229497ab584ce Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8519b071bf2e6a3a82d3c932562ca098 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0eeaaecaf087ceec31ea76db5f08ba3d Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e8869b869311793661f0075ce038ffa5 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-74e90ca4dc5f1673f1d24648a2dde397 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3665bfee9f77ca8256f9c6014966f620 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-025ab42849b2cb48a53a3016a721d970 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0ae95604e79847095bc577411b4e5b8f Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-6f34741b63c0f59fb1665e636b1b14d8 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ea9b8746f908d9f2db0e453fb399e85f Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-91c96d94bfa3607e6ec211d3091aa0ac Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7712e2c174b81933976d9909190c64bc Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e34bca38e38c8b1a85eb64447f1bf65f Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-83567617475a4f75f977c993c7c3a4be Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7db4e7e1ed81879e1d248af1078f524b Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a033fda0a9487d6f5a4d271835880220 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0e2a25494d1e9210631a5b6ee7a43bf3 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c3d32a47cdde3ec7f469fbb3133fd670 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d5ba1bafe7baa497f804ad43e0cb458c Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c99c8b89ec55363c0a5cea4c22f5b5e4 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a4521198727041331caed70a3a66dd22 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-5fdcdb3489d117d9ca1693614eebf630 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-f7da56c574b291ece24c95cad8f31dc6 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-418063ca1884e94654581c72724062e1 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e790bae9d8bcdc4aa57831a0ed71efd8 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-edc9db405b8496d6475bda22857ff4cc Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-f2959aeafe04efac5e4193005cf0676c Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ec10f3c07703595cd3a0312012191742 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-5a5d397e539ed9bc93f367fdfdc4ca2d Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-709037dab1439f33b4d20110cf9b7002 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-49e1b3f2d9414634132270a54ee5f899 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c5d04f3618af6a23eb73abc9ffcf9011 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-22fc7de1044fbe7354411e8b658cd0c8 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7194fcfd3ae4fc1001c53fee2a3f4486 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ea8a1e16b08be5b7d549c2c057d42c9f Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8447571d959f663f8f0e16953d4de9b3 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-adb1cfe2a191bf1ddd17641e4539016c Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-30556d19cceedac42b70e2e2c3bbf5a7 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a5596c5c3dbd143e60523640fb7ecb2f Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c3f355e884bbc52c5b3b8e8b90c3811d Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2353431bdea24c00d3192cf6c6a7d1af Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4af3bab7af56a912b66a4957a8d203fb Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0f13ea7c2aba1113f426fe78b415b58c Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2a477e9eaa6dc8f6637366b6cc5950c9 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-80373ea58590785e247ec69ef7dbae6a Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-eb2f056ef191ef6b4d97734375c0e671 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e435a6dbb150de42dfcdcbefeb1f1473 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8fa31cba93653ae312b7f103ab3ec883 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-292a106f2a9c09dd9b6ab188d00ec912 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-25f35970b2e71e60b26a02174380a5ff FileName: ./.envrc SPDXID: SPDXRef-f52c047db77ca882e09a95d50437a631 FileChecksum: SHA1: 7bc6e7cf350352913e6ecf6c6c76907c4bfde834 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/CONTRIBUTING.md SPDXID: SPDXRef-c7463caf25ac344db2d3262021cefb40 FileChecksum: SHA1: ca540103b8f5867974877513ed0969f073ee341b LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/actions/setup-runtime-env/action.yml SPDXID: SPDXRef-f64ee38d7fe72fef43ce9b8d38bf602f FileChecksum: SHA1: e67185033e5ee11388e6cc1d5051e19f2ff90f35 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/actions/validate-cyclonedx-bom/action.yml SPDXID: SPDXRef-743d8530ca7af73c972175388438c3cf FileChecksum: SHA1: bbdfa834dd45a2c15af95c2a6f6984cdb80f1d7c LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/dependabot.yml SPDXID: SPDXRef-ed69cb849b654481b24b3d4adce4f071 FileChecksum: SHA1: 272c2c08dba3151e673579af34368525fff6b643 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/renovate.json SPDXID: SPDXRef-60042a24283db5ca86f6612f4b21d965 FileChecksum: SHA1: f469427134fcdafda61c8a5094976ac95fc80167 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/branch_main.yml SPDXID: SPDXRef-d29ff7ff298c08590f5c26bcd8971a72 FileChecksum: SHA1: 01f364dfa14126908625cc45ec1c6f23b2b1c863 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/part_build.yml SPDXID: SPDXRef-c32727701f64cd2094ec443bce8c371e FileChecksum: SHA1: 91ebf79bf754396d94753f1d26953c9d10796e32 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/part_docs.yml SPDXID: SPDXRef-dacbdbddcfea3272644229497ab584ce FileChecksum: SHA1: 1a0cef4dc3da7751847a06f1aab600401a7e3d36 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/part_licensing.yml SPDXID: SPDXRef-8519b071bf2e6a3a82d3c932562ca098 FileChecksum: SHA1: 67582b28d0a1454f8548672260b11d4c7996b124 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/part_publish.yml SPDXID: SPDXRef-0eeaaecaf087ceec31ea76db5f08ba3d FileChecksum: SHA1: 829bc33850930222c0780f0cdb5cbcd7fb86e317 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/part_release.yml SPDXID: SPDXRef-e8869b869311793661f0075ce038ffa5 FileChecksum: SHA1: 49685aec7e1b4f09a85a94db14deed9e1476d69f LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/part_smoke_test.yml SPDXID: SPDXRef-74e90ca4dc5f1673f1d24648a2dde397 FileChecksum: SHA1: ad68c7b91fd6e639439658f1ced8f1fbd76da6a0 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/part_test.yml SPDXID: SPDXRef-3665bfee9f77ca8256f9c6014966f620 FileChecksum: SHA1: 79c294fa7d5cce3f3a744cc04010ea222a8c3c19 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/pr.yml SPDXID: SPDXRef-025ab42849b2cb48a53a3016a721d970 FileChecksum: SHA1: 8b050ff8e00556781fd1d612dd5e8836f6210ffd LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/scorecards.yml SPDXID: SPDXRef-0ae95604e79847095bc577411b4e5b8f FileChecksum: SHA1: 08b197c2292f4a822b574336919decc42e379ebb LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/tag-stable.yml SPDXID: SPDXRef-6f34741b63c0f59fb1665e636b1b14d8 FileChecksum: SHA1: cfc1b02f18b30903ec92969b91aa0700973c6473 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.github/workflows/tag-unstable.yml SPDXID: SPDXRef-ea9b8746f908d9f2db0e453fb399e85f FileChecksum: SHA1: 77aade8ca061a3bb86fee659845421aafac1b08e LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.gitignore SPDXID: SPDXRef-91c96d94bfa3607e6ec211d3091aa0ac FileChecksum: SHA1: 07ea25ee7994a40258595449c74a36adff480633 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2019 Bram Verburg SPDX-FileCopyrightText: 2024 Stritzinger GmbH SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./.tool-versions SPDXID: SPDXRef-7712e2c174b81933976d9909190c64bc FileChecksum: SHA1: 04468c0764b5b8e82d659955e25573b251a30d2a LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./README.md SPDXID: SPDXRef-e34bca38e38c8b1a85eb64447f1bf65f FileChecksum: SHA1: 2ba665671af3d18cd41ed5d67d1de2331bef7c0d LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2019 Bram Verburg SPDX-FileCopyrightText: 2024 Stritzinger GmbH FileName: ./devenv.lock SPDXID: SPDXRef-83567617475a4f75f977c993c7c3a4be FileChecksum: SHA1: 234f24d646d798c6602441da655921e75a8343f6 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./devenv.nix SPDXID: SPDXRef-7db4e7e1ed81879e1d248af1078f524b FileChecksum: SHA1: ddd9052ccc95e1d7ad56b7529510a37a65a9a78f LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./devenv.yaml SPDXID: SPDXRef-a033fda0a9487d6f5a4d271835880220 FileChecksum: SHA1: 5a9ca1b8405834ccf50634805f60906acc2fcb1f LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./elvis.config SPDXID: SPDXRef-0e2a25494d1e9210631a5b6ee7a43bf3 FileChecksum: SHA1: dca454fca9c404e4fe8aa72b0ec65ba17b2fd2b4 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./include/rebar3_sbom.hrl SPDXID: SPDXRef-c3d32a47cdde3ec7f469fbb3133fd670 FileChecksum: SHA1: 85d75057a0a1394e60067ea5cad6f77ad248f4bd LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2024 Stritzinger GmbH FileName: ./rebar.config SPDXID: SPDXRef-d5ba1bafe7baa497f804ad43e0cb458c FileChecksum: SHA1: 34c5ac8f76160374c21d8a08569c16b3870db976 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2019 Bram Verburg SPDX-FileCopyrightText: 2024 Sebastian Strollo SPDX-FileCopyrightText: 2024 Stritzinger GmbH SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./rebar.lock SPDXID: SPDXRef-c99c8b89ec55363c0a5cea4c22f5b5e4 FileChecksum: SHA1: c79864e1cfc6a4775d3d15ad1b0f70f0dfb9caad LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./src/rebar3_sbom.app.src SPDXID: SPDXRef-a4521198727041331caed70a3a66dd22 FileChecksum: SHA1: 1d8f3c234ba972ed429a72acbd8c43016984413b LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2024 Bram Verburg FileName: ./src/rebar3_sbom.erl SPDXID: SPDXRef-5fdcdb3489d117d9ca1693614eebf630 FileChecksum: SHA1: 982ef48ac383a3f1e6a1e9909a9db1cac1f66ecb LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2019 Bram Verburg SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./src/rebar3_sbom_cpe.erl SPDXID: SPDXRef-f7da56c574b291ece24c95cad8f31dc6 FileChecksum: SHA1: 2a1b3014050826debcaa09ce9267b957ba514bb6 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Stritzinger GmbH FileName: ./src/rebar3_sbom_cyclonedx.erl SPDXID: SPDXRef-418063ca1884e94654581c72724062e1 FileChecksum: SHA1: 72e49c16edb040781e9cd3627b9cc2545e5b6d2c LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2019 Bram Verburg SPDX-FileCopyrightText: 2022 lafirest SPDX-FileCopyrightText: 2024 Stritzinger GmbH SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./src/rebar3_sbom_json.erl SPDXID: SPDXRef-e790bae9d8bcdc4aa57831a0ed71efd8 FileChecksum: SHA1: 3ee3b93d9cd5ca105aabe1649fcbe669bd261dbe LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2024 Stritzinger GmbH SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation FileName: ./src/rebar3_sbom_license.erl SPDXID: SPDXRef-edc9db405b8496d6475bda22857ff4cc FileChecksum: SHA1: 5ccd6a638e1f54264894bbaf6a5b95ff5e5d6ed6 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2019 Bram Verburg FileName: ./src/rebar3_sbom_prv.erl SPDXID: SPDXRef-f2959aeafe04efac5e4193005cf0676c FileChecksum: SHA1: 3659312dcb67bb02ac1161d26b4ce716f0472c4a LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2022 Bram Verburg SPDX-FileCopyrightText: 2022 lafirest SPDX-FileCopyrightText: 2024 Paulo F. Oliveira SPDX-FileCopyrightText: 2024 Sebastian Strollo SPDX-FileCopyrightText: 2024 Stritzinger GmbH FileName: ./src/rebar3_sbom_purl.erl SPDXID: SPDXRef-ec10f3c07703595cd3a0312012191742 FileChecksum: SHA1: f2a4b7e1017c575a184ba1b151535017e808ee3e LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2020 Andrew Mayorov SPDX-FileCopyrightText: 2022 Bram Verburg SPDX-FileCopyrightText: 2024 Sebastian Strollo SPDX-FileCopyrightText: 2025 Stritzinger GmbH FileName: ./src/rebar3_sbom_xml.erl SPDXID: SPDXRef-5a5d397e539ed9bc93f367fdfdc4ca2d FileChecksum: SHA1: 9f07c45bfa9e92c6b7ed6f9a60a53e843f4b3343 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2024 Stritzinger GmbH FileName: ./test/basic_app/.gitignore SPDXID: SPDXRef-709037dab1439f33b4d20110cf9b7002 FileChecksum: SHA1: c0d777eaf0698e6db3a9900e1b2acf119c2c5d82 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/basic_app/README.md SPDXID: SPDXRef-49e1b3f2d9414634132270a54ee5f899 FileChecksum: SHA1: a1a5c488e5fe894053afb54da814d5aeb861dbc2 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/basic_app/rebar.config SPDXID: SPDXRef-c5d04f3618af6a23eb73abc9ffcf9011 FileChecksum: SHA1: 96f79d3d9f7ac52180ae55425f1933fc74094dfd LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/basic_app/src/basic_app.app.src SPDXID: SPDXRef-22fc7de1044fbe7354411e8b658cd0c8 FileChecksum: SHA1: 9107bd4734417350687063029df87651e190d40c LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/basic_app/src/basic_app_app.erl SPDXID: SPDXRef-7194fcfd3ae4fc1001c53fee2a3f4486 FileChecksum: SHA1: 8b3f6207b2b13d1488e7556926de5f56191ef35d LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/basic_app/src/basic_app_sup.erl SPDXID: SPDXRef-ea8a1e16b08be5b7d549c2c057d42c9f FileChecksum: SHA1: 32c20b46b6cd1bc3b648f12a69ed00e0b10566b0 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/.gitignore SPDXID: SPDXRef-8447571d959f663f8f0e16953d4de9b3 FileChecksum: SHA1: c0d777eaf0698e6db3a9900e1b2acf119c2c5d82 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/README.md SPDXID: SPDXRef-adb1cfe2a191bf1ddd17641e4539016c FileChecksum: SHA1: 2315ff6217b1dc60fb22ff07b3bd4bba25a1eef7 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/_checkouts/checkout_app/rebar.config SPDXID: SPDXRef-30556d19cceedac42b70e2e2c3bbf5a7 FileChecksum: SHA1: 4f2d34c12f13f56aed7760f5a0d6c42530c0d46a LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/_checkouts/checkout_app/src/checkout_app.app.src SPDXID: SPDXRef-a5596c5c3dbd143e60523640fb7ecb2f FileChecksum: SHA1: fcb9af29f452b420feed3c9cf498486d9fb52c95 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/_checkouts/checkout_app/src/checkout_app_app.erl SPDXID: SPDXRef-c3f355e884bbc52c5b3b8e8b90c3811d FileChecksum: SHA1: ed1c55a9de05904071a1097e5509c6b0f879807a LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/_checkouts/checkout_app/src/checkout_app_sup.erl SPDXID: SPDXRef-2353431bdea24c00d3192cf6c6a7d1af FileChecksum: SHA1: 1d76e6940de0838d6257096492ecf2570ac3d973 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/rebar.config SPDXID: SPDXRef-4af3bab7af56a912b66a4957a8d203fb FileChecksum: SHA1: 00ef28ccf095d407b1b2bc3d03f030a1c30b4904 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/src/local_app.app.src SPDXID: SPDXRef-0f13ea7c2aba1113f426fe78b415b58c FileChecksum: SHA1: f6f692f4aef7d93857b621aa49cec99745a6d8a8 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/src/local_app_app.erl SPDXID: SPDXRef-2a477e9eaa6dc8f6637366b6cc5950c9 FileChecksum: SHA1: 10ba33155b3e2bb2baa7ee77205af1f25519cb3e LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/local_app/src/local_app_sup.erl SPDXID: SPDXRef-80373ea58590785e247ec69ef7dbae6a FileChecksum: SHA1: 189a29a6f6a9af4702dfcf5d4c1451960d620de8 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC0-1.0 FileCopyrightText: SPDX-FileCopyrightText: NONE FileName: ./test/rebar3_sbom_cpe_SUITE.erl SPDXID: SPDXRef-eb2f056ef191ef6b4d97734375c0e671 FileChecksum: SHA1: 55127161236b1825924c26537f6d7c7e2635cfb1 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Stritzinger GmbH FileName: ./test/rebar3_sbom_json_SUITE.erl SPDXID: SPDXRef-e435a6dbb150de42dfcdcbefeb1f1473 FileChecksum: SHA1: 6cffd75135526afdf88f432c3d8e642dde9cd801 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Stritzinger GmbH FileName: ./test/rebar3_sbom_purl_SUITE.erl SPDXID: SPDXRef-8fa31cba93653ae312b7f103ab3ec883 FileChecksum: SHA1: 98339825a00ccbbb19eb2ca770dc8934ef87baff LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Stritzinger GmbH FileName: ./test/rebar3_sbom_test_utils.erl SPDXID: SPDXRef-292a106f2a9c09dd9b6ab188d00ec912 FileChecksum: SHA1: b6b988557ff7d803fdd2206fe0fb46fa28a851aa LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Stritzinger GmbH FileName: ./test/rebar3_sbom_validation_SUITE.erl SPDXID: SPDXRef-25f35970b2e71e60b26a02174380a5ff FileChecksum: SHA1: ff201d3e3b2f7c0e6167b8e3db0c95e240628db6 LicenseConcluded: NOASSERTION LicenseInfoInFile: BSD-3-Clause FileCopyrightText: SPDX-FileCopyrightText: 2025 Stritzinger GmbH