SPDXVersion: SPDX-2.1 DataLicense: CC0-1.0 SPDXID: SPDXRef-DOCUMENT DocumentName: project DocumentNamespace: http://spdx.org/spdxdocs/spdx-v2.1-8e3a4df6-cbea-4d2e-9125-fca4a1e5226b Creator: Person: Anonymous () Creator: Organization: Anonymous () Creator: Tool: reuse-5.0.2 Created: 2025-08-05T19:09:42Z CreatorComment: This document was created automatically using available reuse information consistent with REUSE. Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-071b1f5864466580346ae06d8c4c0879 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ff372015f250202dca1c7f65e8f44c3d Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-6ae179b5f3bbaf389c2bb05f5e7b8118 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7817e23b3c4d4548b0a8dd59be577b59 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-9eadb58e46447590809ea8b97200b222 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-de3d8cf9d59db1e7d26c0b2994c62418 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3492e4cfa60ebf24671dd2d58787660d Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ef584b1804d2d4861cf8e1ae9390e350 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4629487ce340e4a8368eab45e2f14572 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-193bb354d5eb98db87bf877f77bb9430 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e39d2f1755dbebfb5c2a81d26bc2c4d2 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8678a8a16163a38aa7699a97dca666f8 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-19359cce80a0e80d96c87dce87580a4a Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0ef58501742ac2af49cc7764e8557eaf Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0bc0f781347e878f79ab7b25fdb701b8 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-850a0ac47eb5b3d04af1b26356014970 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8df933afa9415808dcbf4766b4c22730 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-632056f7d98092ca17005114644a4836 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c5e985c9d1f59847ebcc371a410e06fd Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-938d10fafbffb969b35976af99601de2 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a3ba82c372ec2d94caa654733157e4fa Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-49eda9efe4415d0c57af4bc2a6bcf712 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8b503dad6b8992cbb43fea5ece4a6992 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e572105a4c2c7f9c207fe29d06e100f7 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-22850ab47886c23c7b1b38df9c9a973c Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-39e96d64b90398be896218fcd98f35b1 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-6171211488fa62e6d6c701b3aa09ce7e Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a938c88a04593c21543fa4f2de6b2a6d Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-82df09251c27c40001a5da2b1e652dcb Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4a9d2b9ea4cfca952d364a2cc075f3fc Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-601b0ca806a484339156210519480e1c Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-03e33e057b87a3ad09acb67134b45996 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-83cacf6e8b5335ea71bf0dc2f502ea51 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d9fb630ec59ad2d0de1f5b8bbfbd766d Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-9a7f8fb8f5a02dbceab154b40536f4cc Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-9dc956d8ba877fef629cc567951fa57f Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7fe5fe9289beb728b993756d7cff18b2 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-72d7922f06fe38ab16ed8137d87e817b Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b5293c03c28fc90ac692b350f7cde228 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c5df00e20a61a04d33dd26ea317163f7 FileName: ./.github/workflows/build.yml SPDXID: SPDXRef-071b1f5864466580346ae06d8c4c0879 FileChecksum: SHA1: 23a8c0cfda3e0a654419979c9527448fd1c51546 LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: Ics inc. FileName: ./.gitignore SPDXID: SPDXRef-ff372015f250202dca1c7f65e8f44c3d FileChecksum: SHA1: 6df380ca7e68519d7b0810e1f86a6f2bd02cbb6a LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: Ics inc. FileName: ./README.md SPDXID: SPDXRef-6ae179b5f3bbaf389c2bb05f5e7b8118 FileChecksum: SHA1: f5050195600fc2073cf0e1fef3e42ec4daf1b954 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC-BY-SA-4.0 FileCopyrightText: SPDX-FileCopyrightText: 2024 ICS inc. FileName: ./ics_sbom_libs/__init__.py SPDXID: SPDXRef-7817e23b3c4d4548b0a8dd59be577b59 FileChecksum: SHA1: ff06c34954a76901dad6411f14c8a49c2e0977ea LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: Copyright 2024 Ics inc. FileName: ./ics_sbom_libs/common/__init__.py SPDXID: SPDXRef-9eadb58e46447590809ea8b97200b222 FileChecksum: SHA1: b8ff525c9af04e976d230d5b6074870925de880d LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: Copyright 2024 Ics inc. FileName: ./ics_sbom_libs/common/console_output.py SPDXID: SPDXRef-de3d8cf9d59db1e7d26c0b2994c62418 FileChecksum: SHA1: 079605865987465c72881c9707c098758debab9c LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/common/dbproperties.py SPDXID: SPDXRef-3492e4cfa60ebf24671dd2d58787660d FileChecksum: SHA1: cd42928a0db3fcfee016ee931fdbd3b986f69e36 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/common/logging_setup.py SPDXID: SPDXRef-ef584b1804d2d4861cf8e1ae9390e350 FileChecksum: SHA1: 8c25cf8554746120fc21894d83d0be29e6492d00 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/common/ratelimiter.py SPDXID: SPDXRef-4629487ce340e4a8368eab45e2f14572 FileChecksum: SHA1: 1e301942bb8a41512f0285172c787c7fee3181c5 LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: 2018 Quentin Pradet https://gist.github.com/pquentin/5d8f5408cdad73e589d85ba509091741 FileName: ./ics_sbom_libs/common/tests/test_dbproperties.py SPDXID: SPDXRef-193bb354d5eb98db87bf877f77bb9430 FileChecksum: SHA1: dbe1f8fad5ed5126914d5f43d9ad979049f57fdc LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/common/tests/test_logging_setup.py SPDXID: SPDXRef-e39d2f1755dbebfb5c2a81d26bc2c4d2 FileChecksum: SHA1: 5c54bb112420fabcb059d6edcc38c316982f1a5e LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/common/vulnerability.py SPDXID: SPDXRef-8678a8a16163a38aa7699a97dca666f8 FileChecksum: SHA1: 78381ae5d712c66ee726f69de4ba150b6d1117c8 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_fetch/__init__.py SPDXID: SPDXRef-19359cce80a0e80d96c87dce87580a4a FileChecksum: SHA1: 89637af6b42684b7e58de1056553c6aafd078e2e LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: Copyright 2024 Ics inc. FileName: ./ics_sbom_libs/cve_fetch/cve_schema.sql SPDXID: SPDXRef-0ef58501742ac2af49cc7764e8557eaf FileChecksum: SHA1: 225193dd8639cedb853da92766fe9f38942b4818 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_fetch/vulnerabilitydatabase.py SPDXID: SPDXRef-0bc0f781347e878f79ab7b25fdb701b8 FileChecksum: SHA1: b4fee42d2e9ab38b9042a2aaf248f20893dbf6e3 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/__init__.py SPDXID: SPDXRef-850a0ac47eb5b3d04af1b26356014970 FileChecksum: SHA1: 5111d56b37b6b6b525fc79a0148cd62dc4b386cf LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: Copyright 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/cpe_match_results.py SPDXID: SPDXRef-8df933afa9415808dcbf4766b4c22730 FileChecksum: SHA1: c7ada0014fe8a3d6f0c0385af62cecf66f4c6d08 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/cvematcher.py SPDXID: SPDXRef-632056f7d98092ca17005114644a4836 FileChecksum: SHA1: fe816099d463e5d86e37220df2234ed85c216991 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/matchresult.py SPDXID: SPDXRef-c5e985c9d1f59847ebcc371a410e06fd FileChecksum: SHA1: caad9f38c1ac252078ded8e469783732231d2ff3 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/package_matching/__init__.py SPDXID: SPDXRef-938d10fafbffb969b35976af99601de2 FileChecksum: SHA1: d8897c8e9f1319f0acefd0908718338c7cace18b LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: Copyright 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/package_matching/base.py SPDXID: SPDXRef-a3ba82c372ec2d94caa654733157e4fa FileChecksum: SHA1: c72f9e57716cf3e09cae5cb4df7c031065fed437 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/package_matching/buildversion.py SPDXID: SPDXRef-49eda9efe4415d0c57af4bc2a6bcf712 FileChecksum: SHA1: dcb4397322e1d828cd84b58886a71bbd48128c30 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/package_matching/handlers/__init__.py SPDXID: SPDXRef-8b503dad6b8992cbb43fea5ece4a6992 FileChecksum: SHA1: a59d558cc40ea29ef930bebb8eb1dfd61dc51e4d LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: Copyright 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/package_matching/handlers/default.py SPDXID: SPDXRef-e572105a4c2c7f9c207fe29d06e100f7 FileChecksum: SHA1: 137dd120710b42340cb537b74ccae82c5a80aadf LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/package_matching/handlers/linux_kernel.py SPDXID: SPDXRef-22850ab47886c23c7b1b38df9c9a973c FileChecksum: SHA1: feffa39192140be59da012355ced7265d111f48c LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/package_matching/handlers/openssh.py SPDXID: SPDXRef-39e96d64b90398be896218fcd98f35b1 FileChecksum: SHA1: aea3d14c8bf632e1d433344b06e0bd0544da188d LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/package_matching/handlers/openssl.py SPDXID: SPDXRef-6171211488fa62e6d6c701b3aa09ce7e FileChecksum: SHA1: 7582d5b5ed71cb25a2e67f33295ea05dc9ae2b8e LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/cve_match/package_matching/versionfactory.py SPDXID: SPDXRef-a938c88a04593c21543fa4f2de6b2a6d FileChecksum: SHA1: dec5708d535ced6adf5c6b29dcaa6c1c0576339d LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/sbom_import/FilterSpec.md SPDXID: SPDXRef-82df09251c27c40001a5da2b1e652dcb FileChecksum: SHA1: 994f50bc6dd1ed0048084305fa9a8ff906338a64 LicenseConcluded: NOASSERTION LicenseInfoInFile: CC-BY-SA-4.0 FileCopyrightText: SPDX-FileCopyrightText: 2025 ICS inc. FileName: ./ics_sbom_libs/sbom_import/__init__.py SPDXID: SPDXRef-4a9d2b9ea4cfca952d364a2cc075f3fc FileChecksum: SHA1: e972a9d9ccd78b91c448ad922d894a83e6904972 LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: Copyright 2024 Ics inc. FileName: ./ics_sbom_libs/sbom_import/filter_schema.json SPDXID: SPDXRef-601b0ca806a484339156210519480e1c FileChecksum: SHA1: a6b1a565d56453e328ab391d06bc3cf6490edc3e LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/sbom_import/parse_anything.py SPDXID: SPDXRef-03e33e057b87a3ad09acb67134b45996 FileChecksum: SHA1: 1f2d0a106fdaf2f3972336d43cdb793c0c8cb827 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/sbom_import/spdx_json/__init__.py SPDXID: SPDXRef-83cacf6e8b5335ea71bf0dc2f502ea51 FileChecksum: SHA1: 0ee1d71f9ac5e420a4f7e371226575b4bf442e1f LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: Copyright 2024 Ics inc. FileName: ./ics_sbom_libs/sbom_import/spdx_json/parse.py SPDXID: SPDXRef-d9fb630ec59ad2d0de1f5b8bbfbd766d FileChecksum: SHA1: 22a3adb2bbf2640f307ed10ae104dde767d31559 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/sbom_import/spdx_tag_value/__init__.py SPDXID: SPDXRef-9a7f8fb8f5a02dbceab154b40536f4cc FileChecksum: SHA1: 5640e73a3ee7f50448259d7f7331bba93eb931b1 LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: SPDX-FileCopyrightText: Copyright 2024 Ics inc. FileName: ./ics_sbom_libs/sbom_import/spdx_tag_value/filter_lexers.py SPDXID: SPDXRef-9dc956d8ba877fef629cc567951fa57f FileChecksum: SHA1: 399ef49580aef12ba3cf423426accc0fb6e44b19 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/sbom_import/spdx_tag_value/parse.py SPDXID: SPDXRef-7fe5fe9289beb728b993756d7cff18b2 FileChecksum: SHA1: b8be9872c9653d7ec139de7ef3b64ca89c7f7b45 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./ics_sbom_libs/sbom_import/spdx_tag_value/progress_lexer.py SPDXID: SPDXRef-72d7922f06fe38ab16ed8137d87e817b FileChecksum: SHA1: bc4a8d98a37ac5d98cc8b64076a51bfac1adc3f1 LicenseConcluded: NOASSERTION LicenseInfoInFile: LGPL-2.0-or-later FileCopyrightText: SPDX-FileCopyrightText: 2024 Ics inc. FileName: ./poetry.toml SPDXID: SPDXRef-b5293c03c28fc90ac692b350f7cde228 FileChecksum: SHA1: d2bbda9c93e5a1bf94a78d713fc30e9fdebf6ab4 LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: Ics inc. FileName: ./pyproject.toml SPDXID: SPDXRef-c5df00e20a61a04d33dd26ea317163f7 FileChecksum: SHA1: 70622267535affb8183d74cb83a1cf4b89ad0a41 LicenseConcluded: NOASSERTION LicenseInfoInFile: MIT FileCopyrightText: Ics inc.