SPDXVersion: SPDX-2.1
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: project
DocumentNamespace: http://spdx.org/spdxdocs/spdx-v2.1-93942484-91ea-4911-baca-7e3cc785992b
Creator: Person: Anonymous ()
Creator: Organization: Anonymous ()
Creator: Tool: reuse-6.1.0
Created: 2026-09-21T12:59:59Z
CreatorComment: This document was created automatically using available reuse information consistent with REUSE.
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e20e7871084ba5ee428bcbd058c5a69c
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-843d99580b3751a21c290a5d13a53f81
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-540d04bd91ddf6ab64bf676dc2e14426
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8b879075fcefe92fcd4ad4d148e3dac8
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-82f4bab2ba7839a5ae568e34b4265825
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e068bfdc3086b248c162466a3958a13a
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-af795bf8c9edde810bbd60bcc3b6379d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2edffef8001852d78ab68ea407e65f22
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e65901b4d2cc28d2731b290a6c275596
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-aa86eba248f3926108875a33270e00e5
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-66734543241c26c3b3d2fc3596864bfe
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7dafe4e298124168c65b113e08d64bc5
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-9591c4ca34c4e2f8af5bbf64601a0f98
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-103792b78a7b1cb36907374c4c902e4c
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-604c7132e2ec35cd3660dad64baf87e9
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-04071189a5882d44c08b36290aa27702
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-faf2d0f38836a48d072729c93ca26d7f
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-feead01680d355708ee841fe5fa9e684
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-68a05593db3e6d6aa29863dde975d102
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2fd85f2a303a14070e2bf53ebc123df4
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-69070afeabb39f21955ce85c47cbda8d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-589478ab202657b3c9ad9bcd3b2334c3
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0020d77dc4870596fb6e905bf33b52c1
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b6b8c7cf2d0b67a045f0a05abb958e0e
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7e0a9f49f74d66546d11aa0cc84609c6
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ee26ff0c9c37e4d903a687fe093980f5
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a96b7c90d443f57fe632930d6d4117bf
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-926b74212505e96ac68f1e91d88aa860
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e6c2e58720f5eee201ef098686972c64
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2e758087a8422caec8d2a5048b918122
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c39a0b6302d7b2350ed94e2aad76b888
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-eb0f4edf15cfe758acd97aef4627b5ad
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-5e04b0375ae27b414e8e080c276c1663
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-58b01b992d8a5750477a66709ebdbde5
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-89a72bfcccd55ac307fd899588188414
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-77bc0db3c4e110c45569c11237e42d5a
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d2435ba1a44219f2464479af11131fb4
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-98574b7450eb5401ac07df095097e2f2
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-12251866631b5c8cb23623c6617906eb
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0f8ebbc6d1ba4e39da6c86dc1bf907db
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-5ba3380ddcb994b3a2d925795595c0c2
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7aa93fcd76c0e12ecbc0e1037d5b7b73
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c6677f9bff3bae5ca2023d031d46169b
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c44dcec9943a97ad567cc6625d359226
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e87b5af7804ca8ee95c64c5812c55e40
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1201697e7cf6d2127190951a6d2b9cbd
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1c27a1315a8ad03648fe31ec5fbc6856
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-edff67f4a42bc9de1b517673c729fb3a
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-f2e5843fa3431255600c82de3bcfcdd5
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e28e8692aa06f261f09f2acf2810fc36
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-80f865c9e3bc2b6912dfff8712203c6a
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-289126dddef4fba40c25ab8ae6fb48e9
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-df82ea6090346a10a65a801ad3fbb786
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-78885022ea5f4eeaf016db4648c9bc9c
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-949dd4ab13a6bea45693d0c8b448be40
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7c22806ce493d8b41d0b6af7afd5d693
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-92128deecc28f21f685ea1b9f7a879fc
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-498b4467e5d1505eaedeff6c1c6f934e
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1ee2027e9571bde3fb8b7760b36f6022
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-bc719747ea52aa939b508404192e4275
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ca778a7a8c434513a87dd9854ca2d59c
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4528e8c276615b89c6e8df629c113acb
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-01ff11f062678eac9373db6f3bb89897
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b875bcadb2dd34926d8de30d69e86e6f
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-81e018fa349956f0f6ed2734e9e734f4
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-87f84e507078df33606ff917f2f17d1f
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-15ef8ae6c2e8ac96b70004693440b352
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0f7f432890bd80a412d63d5397cea544
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7f067edeb2fb1df17f0a00ed3e3b1b42
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-48886a2c27e900d731bbe2c4273bfe19
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8a2b3f49757ba534bb071761ccc83884
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-28c17bfde75db4bee789b5b2350dda8e
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-5303fc14b684032f0836fff17e229afa
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2adb27de6416698b57068f21fae3c694
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d87d6fcbff8639bcbbafe80769ba1c8a
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c216e607d22cda495d1fdbb2bf2af6f2
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4e31514e165d1ad612d948c0ada1e2dc
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3033ab475c567fca4517b913a935b402
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b2352bbb328403057d4e052cc567ecd9
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-34187d8a687d25a7be9a119bc56ade05
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d84be29cbdf7014a93b7437f3e023201
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b6e6f4e2cb2bcd01f25c5bcbbb35e18a
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-490272d1a37800af053ffced55cf3f06
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-30fee9cb9529de98855b12bf102c5fcd
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3d741efe4fc32141a816c109bda38994
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-6ce64371ef392f9f374974c3e71c21a7
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ab643331b7ecae7d0eff102b5d41a64d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4450a7a64919fb5bd5dc1c5bb1f19a30
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-16f274fc0921a949c286071a4f46b102
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-efa7e9daef8ae7687e28bf6b172a8477
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1490139dee8d337f0ade5c3ffb8db007
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-f7339b540c11d32f7412c3f61cd64ca5
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-271419d11904c177e32dc1b11bf59199
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8d26aa4bac0b936ec1862c7538c8a309
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8d256e5a3c977feaf89db8d1757ca04e
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3a705f6c3c5c3f899bff67f803afba96
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4f0bba2897d9484816958a1cde805d3a
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-17c32c23c2410b8efaf07f0873917c5d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-9ea9430c2812eed4efe5b6cbae8b251e
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1a91614fffabf570fdb3b8e74072d6d5
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-02523263e969dd2e77d099066ca0bc31
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2d3c7ba98ee841a19669bef6cd70b0f6
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b1df5a21ce173a2c454a7cc0bc752004
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b75dd6ca703ce73f7c94f11497605561
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-8ecc56c6e0ec59d6583d1132b4f47730
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a10a340996d3e89c273319efb52d3c10
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-fa2ef22957b254e3dc19f47321d2d391
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c69d308cbedca49dea585fe3f5532316
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3d28542f4a1a8f372c408ea5cd687537
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-43dae7184d9e75f59220bfa096bf2363
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-573cff28d11fd5b5bd238143b5e43206
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-09c76c24d7b4e77d17ecb4109ae0c759
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d349a9e977edc86b0e50b17c76123f67
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-21505966a4c3836b09d8b7eb4ae3ed9a
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b8a0f1036a82f95fc87e2095d4394a54
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-55da8742152a4d855f55777d065e20e1
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-5f050fc1d629e7c760021839c6ad45fb
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3aa6e56b3943b414ee0915c4fe3a6f03
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2130501e04b7f3c422d2a9da6bbb7945
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4b7db352c8d3356fcdb3e7c8e0877317
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-2c12afe6dc52fc9998639b50b4d4e887
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ced907ee5539a04299af8704dc6711ad
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ed41963154806b36136864267a8e8906
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-86f2a82c705cd91f38cda359d08af232
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d738ee5d66522d0bd38b2cb94c69d7dc
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-909de6247c89256fd34e0cd42b8d476e
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-86f7a53a6017cc47f0ea92742298882b
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-74df0aa7fd05ba7c38e997573d456067
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-f96241d656e884eea37195dc33de6f38
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-6a475e1b77b2feeaca359ba75826fc17
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-73f607a4696f78f75addc390461d1a3b
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4782b84722d8544665a01d79e439be78
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-92471d8d7b001a261980c73065b640b7
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-47900bbe00b56932428e2d195a2222fb
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a2b079eb50a0baaeb5920bfba1a08c9c
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-713ad4227fa90411b6ce8b937905d2ab
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-4befaa486b15768d0253ae9553b6e0d1
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e3973747aad55a801a9104d2292448a7
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-041997c9b392fa0b23a36c5ef44fb8de
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-33428e458e931193704996dc5722d5b0
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-12af8aa63456d811be792e0e5ec48fa4
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-ea1d26ce7ef312e2e84a060238efde4c
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1f238bd143e072acff3f34f98a2ba658
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-e47e5ab0742774d9d5fc1e0ebf3ad631
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-fbf01914d5618ade193c5335b5262fb2
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-bb61ddcba191174c00d6043414036183
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-3cd2705490fa7bbdf153a8212e3b04d4
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-b7c3838846754ec10d0482744a6fac1a
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-526ecb5f83951357bc3f6ee7f7af1ccd
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a2520e11687761198196f52d6edaf325
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-fc6bdafc026e2f9d2b44f8ee3550e08b
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-7c2524f229be4ff9fea5862b2fd708c8
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-d607a6166af74616abe0155fba91179b
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-94be09fe245bba5380c819cbc4b03382
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-0ee79714f36b79ab4f5e2faa0bbb096c
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-20e1851ea965bdfce46753e017fc3694
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-31e7b54c8fea6dab42bdac17b50850c3
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-25816df3a8eaf26a25c0ba6a56c3663d
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-250a2918fb7a6e4770d97079d29b67fd
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-c6ce15908038124312bf90993e8a83b7
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-a3d3747a4c34045eff0783103b660ee5
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1895658ec4e6047f2deb33abbba5f67f
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-1478407ae68e45019be7affe0c932195
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-9a03bc0370bb46b4ca5e5b8cfcc3bed2
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-91bbdd2112d36e0b7ffa120ec2adf92c
FileName: ./.editorconfig
SPDXID: SPDXRef-e20e7871084ba5ee428bcbd058c5a69c
FileChecksum: SHA1: bb23f65f3d7418bb271c85040cfdcd618a51e4d9
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/ISSUE_TEMPLATE/bug_report.yml
SPDXID: SPDXRef-843d99580b3751a21c290a5d13a53f81
FileChecksum: SHA1: bfdc36e9e1b283fdf5e8bbdbd88cce3bf23bc47c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/ISSUE_TEMPLATE/feature_request.yml
SPDXID: SPDXRef-540d04bd91ddf6ab64bf676dc2e14426
FileChecksum: SHA1: 37a15123450e5737df48d05851a7ce653bf45b09
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/PULL_REQUEST_TEMPLATE.md
SPDXID: SPDXRef-8b879075fcefe92fcd4ad4d148e3dac8
FileChecksum: SHA1: d23f050d613c504af558a3425199f2e77f0fcea3
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/dependabot.yml
SPDXID: SPDXRef-82f4bab2ba7839a5ae568e34b4265825
FileChecksum: SHA1: d6466c0efafc605eb89e42937524b0eb638c731c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/release.yml
SPDXID: SPDXRef-e068bfdc3086b248c162466a3958a13a
FileChecksum: SHA1: f0279ae93b98aab401fb86354fbd9f2082b83f6f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/workflows/ci.yml
SPDXID: SPDXRef-af795bf8c9edde810bbd60bcc3b6379d
FileChecksum: SHA1: 012ab7cdaffc858c60b31039544b7ac0751c5c1f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/workflows/codeql.yml
SPDXID: SPDXRef-2edffef8001852d78ab68ea407e65f22
FileChecksum: SHA1: ba862186b830f6634655365eb0135ad3b6c74432
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/workflows/conformance.yml
SPDXID: SPDXRef-e65901b4d2cc28d2731b290a6c275596
FileChecksum: SHA1: 9a890eefbb7e98cc771869de0cf2f1053d81c9af
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/workflows/fuzz.yml
SPDXID: SPDXRef-aa86eba248f3926108875a33270e00e5
FileChecksum: SHA1: 7789672e9111bfea8492c6d1d2d828ef72cbf5b9
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/workflows/release.yml
SPDXID: SPDXRef-66734543241c26c3b3d2fc3596864bfe
FileChecksum: SHA1: 8e2607c3ed14b805fa8b7da66c58963bc17acccc
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.github/workflows/scorecard.yml
SPDXID: SPDXRef-7dafe4e298124168c65b113e08d64bc5
FileChecksum: SHA1: ce06ae32e2dd40a7fa517fe1aa43cee9b1e25e12
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.gitignore
SPDXID: SPDXRef-9591c4ca34c4e2f8af5bbf64601a0f98
FileChecksum: SHA1: 800e817fb447a583420ce429ce55d2261af0cf7d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.lefthook.yml
SPDXID: SPDXRef-103792b78a7b1cb36907374c4c902e4c
FileChecksum: SHA1: 157538ff55d9cc7b9ea47d67d654464fb650342f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.lefthook/pre-push/gates.sh
SPDXID: SPDXRef-604c7132e2ec35cd3660dad64baf87e9
FileChecksum: SHA1: 44ecf12f7082b6a2d2868d6857a540ba5452f424
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./.tmuxp.yml
SPDXID: SPDXRef-04071189a5882d44c08b36290aa27702
FileChecksum: SHA1: 254c1e71f9b8476776854028bdd20f01b7e0dc94
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./CHANGELOG.md
SPDXID: SPDXRef-faf2d0f38836a48d072729c93ca26d7f
FileChecksum: SHA1: c2520d18d39c1c0d9b32ff04ab2a3de26b059353
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./CLAUDE.md
SPDXID: SPDXRef-feead01680d355708ee841fe5fa9e684
FileChecksum: SHA1: 0d89fa71f195e9785aabccd80907cfc6e64765ad
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./CODE_OF_CONDUCT.md
SPDXID: SPDXRef-68a05593db3e6d6aa29863dde975d102
FileChecksum: SHA1: e1c5829670b7053f74cc92975cab0b8475c272ec
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
© Organization for Ethical Source) and none for the
FileName: ./CONTRIBUTING.md
SPDXID: SPDXRef-2fd85f2a303a14070e2bf53ebc123df4
FileChecksum: SHA1: a297073fa40fd9cb2c4e1cf99b4b70775c51cf8c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./README.md
SPDXID: SPDXRef-69070afeabb39f21955ce85c47cbda8d
FileChecksum: SHA1: 2055dce1e9c9f284defbae4f1a721629d7cef6cf
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./SECURITY.md
SPDXID: SPDXRef-589478ab202657b3c9ad9bcd3b2334c3
FileChecksum: SHA1: 5b6894bcadeaf4d359f3148fff3e65d3f4d5644e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./cmd/bomdive/main.go
SPDXID: SPDXRef-0020d77dc4870596fb6e905bf33b52c1
FileChecksum: SHA1: 71bd8f8442c301bcf74ce30b20065305bd52a386
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0001-record-architecture-decisions.md
SPDXID: SPDXRef-b6b8c7cf2d0b67a045f0a05abb958e0e
FileChecksum: SHA1: aefc388db3f2286ba6bfd6bc716c1e1dbabbceec
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0002-adopt-development-best-practices.md
SPDXID: SPDXRef-7e0a9f49f74d66546d11aa0cc84609c6
FileChecksum: SHA1: 5bfb7246c3a22f0b6876d261671ef53bb7f66028
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0003-go-with-cyclonedx-go.md
SPDXID: SPDXRef-ee26ff0c9c37e4d903a687fe093980f5
FileChecksum: SHA1: 212963a4939d089223f292b972d0468818857701
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0004-the-dependency-graph-is-a-dag.md
SPDXID: SPDXRef-a96b7c90d443f57fe632930d6d4117bf
FileChecksum: SHA1: 0f971d171a2668bdf8230ca5508e0eb65bebd123
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0005-engines-behind-build-tags.md
SPDXID: SPDXRef-926b74212505e96ac68f1e91d88aa860
FileChecksum: SHA1: eda7b3a3aa2150c58dc802c798c3d93cd8cecd24
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0006-column-view-as-a-first-class-renderer.md
SPDXID: SPDXRef-e6c2e58720f5eee201ef098686972c64
FileChecksum: SHA1: 25c6f49c97f62b4f25cb72734641f09ac2bc5776
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0007-column-view-open-questions.md
SPDXID: SPDXRef-2e758087a8422caec8d2a5048b918122
FileChecksum: SHA1: ced5e28ebf94aaa51ae47e84f03cce5d3c0421df
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0008-adopt-bdd-and-align-audiences.md
SPDXID: SPDXRef-c39a0b6302d7b2350ed94e2aad76b888
FileChecksum: SHA1: 209ed868119fca43802c56a5e8b746748a425159
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0009-browse-a-standalone-vex.md
SPDXID: SPDXRef-eb0f4edf15cfe758acd97aef4627b5ad
FileChecksum: SHA1: 36125cdd4980b701313e485bbc43bcb11857d3ea
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0010-rename-the-tool-to-bomdive.md
SPDXID: SPDXRef-5e04b0375ae27b414e8e080c276c1663
FileChecksum: SHA1: b66b19f8744420265a5ef2bff8fcfe20a9b16b8f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0011-go-public-under-apache-2.md
SPDXID: SPDXRef-58b01b992d8a5750477a66709ebdbde5
FileChecksum: SHA1: 0f7ce1ba720d6e0377dc4a0a55e4244e731f9ed8
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/0012-ship-signed-release-artifacts.md
SPDXID: SPDXRef-89a72bfcccd55ac307fd899588188414
FileChecksum: SHA1: 5f2e9e9a876a5c307a5cf1b72b9a893b6587d164
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/adr/index.yml
SPDXID: SPDXRef-77bc0db3c4e110c45569c11237e42d5a
FileChecksum: SHA1: 1bc32c95e2569911ede5093095e04d6d647e3a7b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/README.md
SPDXID: SPDXRef-d2435ba1a44219f2464479af11131fb4
FileChecksum: SHA1: fda0a205b2d3f2bcb0f46a3689177aeaa28d0e4b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/bom-graph-shape.py
SPDXID: SPDXRef-98574b7450eb5401ac07df095097e2f2
FileChecksum: SHA1: 560b2535d382d8c400f4da07468f58659173067c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/measurements-2026-09-10.json
SPDXID: SPDXRef-12251866631b5c8cb23623c6617906eb
FileChecksum: SHA1: 6aaca9229f320a382c251dcc9bc391f2afe7e736
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc10-documents-without-components.py
SPDXID: SPDXRef-0f8ebbc6d1ba4e39da6c86dc1bf907db
FileChecksum: SHA1: f74de201c49d9843e41f5492029c494ac62dd79e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc10-empty-documents-2026-09-11.md
SPDXID: SPDXRef-5ba3380ddcb994b3a2d925795595c0c2
FileChecksum: SHA1: b22c7cadf3a17b137582ed448f786e95e03e74bd
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc11-vex-navigability-2026-09-11.md
SPDXID: SPDXRef-7aa93fcd76c0e12ecbc0e1037d5b7b73
FileChecksum: SHA1: a0596bf0b25f643e33244a63ce1e9f6ed5be3b81
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc11-vex-navigability.py
SPDXID: SPDXRef-c6677f9bff3bae5ca2023d031d46169b
FileChecksum: SHA1: b9a6616ec98306fe1e445e492fd69b9ebd9578d6
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc2-bom-corpus-2026-09-10.json
SPDXID: SPDXRef-c44dcec9943a97ad567cc6625d359226
FileChecksum: SHA1: e686438ec894e3c27d8efbbfb106ab5d2ca60e84
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc2-corpus-shape.py
SPDXID: SPDXRef-e87b5af7804ca8ee95c64c5812c55e40
FileChecksum: SHA1: 9d43d2af6475a24ce271fe356611ea33c8b4b46c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc5-cgo-linking-2026-09-10.md
SPDXID: SPDXRef-1201697e7cf6d2127190951a6d2b9cbd
FileChecksum: SHA1: 2d40d7d3347d275b2a73bfef7b030ad7c204616f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc5-ladybug-linking.go.txt
SPDXID: SPDXRef-1c27a1315a8ad03648fe31ec5fbc6856
FileChecksum: SHA1: 184d0b2d32542b0fc56a3bfbe1c4f1abb89bfdb1
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-backend-survey-2026-09-10.md
SPDXID: SPDXRef-edff67f4a42bc9de1b517673c729fb3a
FileChecksum: SHA1: 4bdfbd2ecb8ffa940dda2bb3d6779d40042a40f3
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-cycle-semantics.sh
SPDXID: SPDXRef-f2e5843fa3431255600c82de3bcfcdd5
FileChecksum: SHA1: cabb53cc5ff7e67b91f481d1fb41b659424a0054
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-duckdb-corpus.sql
SPDXID: SPDXRef-e28e8692aa06f261f09f2acf2810fc36
FileChecksum: SHA1: bde05c34c00e0d6652adb7e7bab8b49cf08c95c0
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-ladybug-duckdb-bridge.sh
SPDXID: SPDXRef-80f865c9e3bc2b6912dfff8712203c6a
FileChecksum: SHA1: dd920979b47e13e995520eeb387daa07e8b30aa9
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-src/cycle-semantics.go.txt
SPDXID: SPDXRef-289126dddef4fba40c25ab8ae6fb48e9
FileChecksum: SHA1: c628c19b7f67fd039030c6dccd298e3fb47f6484
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-src/duckdb-embed.go.txt
SPDXID: SPDXRef-df82ea6090346a10a65a801ad3fbb786
FileChecksum: SHA1: 89e956033ea95629e28e57f1a18e761117f7f953
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-src/sqlite-cte.go.txt
SPDXID: SPDXRef-78885022ea5f4eeaf016db4648c9bc9c
FileChecksum: SHA1: a6a1527066383b5ed1a6ced6c53bc8734a7c8fc9
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-src/tagdemo-backend_ladybug.go.txt
SPDXID: SPDXRef-949dd4ab13a6bea45693d0c8b448be40
FileChecksum: SHA1: e65d173627e9ca47ae02fa7d78e4813ec5347dd6
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-src/tagdemo-backend_stub.go.txt
SPDXID: SPDXRef-7c22806ce493d8b41d0b6af7afd5d693
FileChecksum: SHA1: 3a28532d75b58c431ebfb02d4778bdcbd74b52ff
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-src/tagdemo-main.go.txt
SPDXID: SPDXRef-92128deecc28f21f685ea1b9f7a879fc
FileChecksum: SHA1: 26812c13f0e9a498ffaa2a48f9ddb118bf5f0ff4
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc6-src/zigcross.go.txt
SPDXID: SPDXRef-498b4467e5d1505eaedeff6c1c6f934e
FileChecksum: SHA1: e4ce09ef5c3733b9308d32ed07f38abb066a4a0e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc7-bom-identity-2026-09-10.md
SPDXID: SPDXRef-1ee2027e9571bde3fb8b7760b36f6022
FileChecksum: SHA1: eb6d9a25edf02958f2ffcf783398e23f405a8977
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc7-bom-type-discriminator.py
SPDXID: SPDXRef-bc719747ea52aa939b508404192e4275
FileChecksum: SHA1: 814adf7781914f20c1874d323b3c2679047d09e8
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc8-merged-host-view-2026-09-10.md
SPDXID: SPDXRef-ca778a7a8c434513a87dd9854ca2d59c
FileChecksum: SHA1: a547507793dc80420da8249dd8868ed4f4f41bb5
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc9-reverse-edges-2026-09-11.md
SPDXID: SPDXRef-4528e8c276615b89c6e8df629c113acb
FileChecksum: SHA1: b74b29c9b5c2c05cd49204e991fde7d0b978c07a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/evidence/poc9-root-outside-components.py
SPDXID: SPDXRef-01ff11f062678eac9373db6f3bb89897
FileChecksum: SHA1: 5e4bf27272ca09804d33d6c0a23f5f2cae53935e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/inception/spark-analysis.md
SPDXID: SPDXRef-b875bcadb2dd34926d8de30d69e86e6f
FileChecksum: SHA1: 721816e078d56c1b2904af83b1c730c90f69bb05
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/reference/audience-registry.md
SPDXID: SPDXRef-81e018fa349956f0f6ed2734e9e734f4
FileChecksum: SHA1: ff4fb2d16cd1e237b141f7984b806aa5551ad2ae
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/reference/quality-configuration.md
SPDXID: SPDXRef-87f84e507078df33606ff917f2f17d1f
FileChecksum: SHA1: 0c47816b8675d64ac85e050a2726bbc7fea5f010
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/roadmap/roadmap.md
SPDXID: SPDXRef-15ef8ae6c2e8ac96b70004693440b352
FileChecksum: SHA1: 39c7061c386bad83c42a649220125088d4b6357c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./docs/roadmap/watched-pglite-age.md
SPDXID: SPDXRef-0f7f432890bd80a412d63d5397cea544
FileChecksum: SHA1: e0af6170579377eff93bfbc3f2d0f850790f6b9b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./features/api_json.feature
SPDXID: SPDXRef-7f067edeb2fb1df17f0a00ed3e3b1b42
FileChecksum: SHA1: c7fe64a3114ed0ec60f98c06be990e087f316298
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./features/steps/browse_steps_test.go
SPDXID: SPDXRef-48886a2c27e900d731bbe2c4273bfe19
FileChecksum: SHA1: a77a4e9ecaccddb44c53fd1900fde460e0508272
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./features/steps/steps_test.go
SPDXID: SPDXRef-8a2b3f49757ba534bb071761ccc83884
FileChecksum: SHA1: bebd598b45b6a59bd1503238c42df4ae8b307104
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./features/user_browse.feature
SPDXID: SPDXRef-28c17bfde75db4bee789b5b2350dda8e
FileChecksum: SHA1: f75ec96447fec3e60c8ec3a72708296646d34a86
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./features/user_ls.feature
SPDXID: SPDXRef-5303fc14b684032f0836fff17e229afa
FileChecksum: SHA1: e97b5a6b08700bbc73badaf163ba0e20c38f1bb6
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./features/user_tree.feature
SPDXID: SPDXRef-2adb27de6416698b57068f21fae3c694
FileChecksum: SHA1: a922fb79175c345f4bd88054031cd659ac81a389
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./go.mod
SPDXID: SPDXRef-d87d6fcbff8639bcbbafe80769ba1c8a
FileChecksum: SHA1: 3ce0351d2fff2881c4a7f2b4e27e9ce6421b9e3a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./go.sum
SPDXID: SPDXRef-c216e607d22cda495d1fdbb2bf2af6f2
FileChecksum: SHA1: 18b9e51af5e4b59c4a3dac4b3e38a872ac4ec47c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/bench_test.go
SPDXID: SPDXRef-4e31514e165d1ad612d948c0ada1e2dc
FileChecksum: SHA1: 57d9a9ee85cfbe019df50a9f0acb1f66d11be3da
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/fuzz_test.go
SPDXID: SPDXRef-3033ab475c567fca4517b913a935b402
FileChecksum: SHA1: 442cd59b3fe429f30a721339b8ade2d3ff4dc0b2
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/graph.go
SPDXID: SPDXRef-b2352bbb328403057d4e052cc567ecd9
FileChecksum: SHA1: 37eaa63135e3ad87eafdbe8df4108d01e8086ea2
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/graph_test.go
SPDXID: SPDXRef-34187d8a687d25a7be9a119bc56ade05
FileChecksum: SHA1: 8c9723c63405b0ff6d66e36df700e9e41e7201fc
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/kind.go
SPDXID: SPDXRef-d84be29cbdf7014a93b7437f3e023201
FileChecksum: SHA1: c16ae399183b2f56209de4a5f9fc390b1e48cf9c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/members.go
SPDXID: SPDXRef-b6e6f4e2cb2bcd01f25c5bcbbb35e18a
FileChecksum: SHA1: 1344677c51b871fc55a0c57b5d58e93dd7770758
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/members_test.go
SPDXID: SPDXRef-490272d1a37800af053ffced55cf3f06
FileChecksum: SHA1: 72a2e2cfd8a34179100c6f1f6e7f204384168b7a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/set.go
SPDXID: SPDXRef-30fee9cb9529de98855b12bf102c5fcd
FileChecksum: SHA1: f1efc0d2efa34a46d05e2c914e7879437a409c1f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/set_test.go
SPDXID: SPDXRef-3d741efe4fc32141a816c109bda38994
FileChecksum: SHA1: b3c3e2daf4e402fb5fd78fe4f3efc9d5e8e1eefb
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/vuln.go
SPDXID: SPDXRef-6ce64371ef392f9f374974c3e71c21a7
FileChecksum: SHA1: 9c9a3b33b860bc5f337d7e935ce2a3c7275d09b2
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/vuln_test.go
SPDXID: SPDXRef-ab643331b7ecae7d0eff102b5d41a64d
FileChecksum: SHA1: 04f21c544595ca919ee01b45f11a6d8497f172b7
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/walk.go
SPDXID: SPDXRef-4450a7a64919fb5bd5dc1c5bb1f19a30
FileChecksum: SHA1: f3993460b8b4912a7f4471a1e0dbf8296b2b090b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/bom/walk_test.go
SPDXID: SPDXRef-16f274fc0921a949c286071a4f46b102
FileChecksum: SHA1: e75d3c55a1d1417099331c0074d2a3ac1f8a094d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/cli/browse.go
SPDXID: SPDXRef-efa7e9daef8ae7687e28bf6b172a8477
FileChecksum: SHA1: 3859961cd0a84bb72111ccf331265540a89795a4
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/cli/cli_test.go
SPDXID: SPDXRef-1490139dee8d337f0ade5c3ffb8db007
FileChecksum: SHA1: 7894cbc660e25835b8d0cb2042ef9571defae9dd
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/cli/dir_test.go
SPDXID: SPDXRef-f7339b540c11d32f7412c3f61cd64ca5
FileChecksum: SHA1: 672f7b4056d476be99b65ef400d0389bb96478b5
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/cli/ls.go
SPDXID: SPDXRef-271419d11904c177e32dc1b11bf59199
FileChecksum: SHA1: 5048c86b1863c80cdba4664c9771f7214476678c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/cli/root.go
SPDXID: SPDXRef-8d26aa4bac0b936ec1862c7538c8a309
FileChecksum: SHA1: 2346e50fc1361393ea591e150d50f2a003b5884b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/cli/tree.go
SPDXID: SPDXRef-8d256e5a3c977feaf89db8d1757ca04e
FileChecksum: SHA1: c20183f3a3841d86c248a839fa59d113eb03c385
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/columns/dir_test.go
SPDXID: SPDXRef-3a705f6c3c5c3f899bff67f803afba96
FileChecksum: SHA1: e9f144080b414ff8b4c673f2b71d944c203a448e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/columns/model.go
SPDXID: SPDXRef-4f0bba2897d9484816958a1cde805d3a
FileChecksum: SHA1: 35b3c06f77ad9ac53388be9b754b3bf54a72c16a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/columns/model_test.go
SPDXID: SPDXRef-17c32c23c2410b8efaf07f0873917c5d
FileChecksum: SHA1: d343d497e027d08d3a7847ad07771e0adbd14386
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/columns/multi_test.go
SPDXID: SPDXRef-9ea9430c2812eed4efe5b6cbae8b251e
FileChecksum: SHA1: d5dcfc4cacaf0b89aaba2a3b9021e48150652b0b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/columns/truncate.go
SPDXID: SPDXRef-1a91614fffabf570fdb3b8e74072d6d5
FileChecksum: SHA1: 45c0be3695aee9d53ef3402b19f8cfff15cf825f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/columns/truncate_test.go
SPDXID: SPDXRef-02523263e969dd2e77d099066ca0bc31
FileChecksum: SHA1: a11995f6c321a846a899061fcfdd9fdd622315b7
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/columns/vulns.go
SPDXID: SPDXRef-2d3c7ba98ee841a19669bef6cd70b0f6
FileChecksum: SHA1: eba68dda8ee21f4efb7295b2480a9eb9419e139b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/columns/vulns_test.go
SPDXID: SPDXRef-b1df5a21ce173a2c454a7cc0bc752004
FileChecksum: SHA1: a1a9524d9b5c0ec745ec05dcc553dae653ae1a4b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/render/json.go
SPDXID: SPDXRef-b75dd6ca703ce73f7c94f11497605561
FileChecksum: SHA1: 53b32055cb48d2da1833ff309dd23f2efe8eec0f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/render/list.go
SPDXID: SPDXRef-8ecc56c6e0ec59d6583d1132b4f47730
FileChecksum: SHA1: dae86de46d818fe3c67dce6b8ccb59626720a7eb
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/render/render_test.go
SPDXID: SPDXRef-a10a340996d3e89c273319efb52d3c10
FileChecksum: SHA1: 3ab5110b28b120850d6d3cdf5ac29ff53564bfae
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/render/result.go
SPDXID: SPDXRef-fa2ef22957b254e3dc19f47321d2d391
FileChecksum: SHA1: 75d74cb336592f2cea090fd58b0af002755f0ff9
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/render/text.go
SPDXID: SPDXRef-c69d308cbedca49dea585fe3f5532316
FileChecksum: SHA1: e8a3bbef671f91e3816276e71e32f834f3b666b6
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/render/tree.go
SPDXID: SPDXRef-3d28542f4a1a8f372c408ea5cd687537
FileChecksum: SHA1: ece133dbcde9fac97293ba0df15454c82b1b10cf
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/tui/app.go
SPDXID: SPDXRef-43dae7184d9e75f59220bfa096bf2363
FileChecksum: SHA1: d3f308193a379f9a13930b4babca7ba1f975b08c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/tui/app_test.go
SPDXID: SPDXRef-573cff28d11fd5b5bd238143b5e43206
FileChecksum: SHA1: 3be5da2648cd1acf80bf69858475867c73906a1a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/tui/dir_test.go
SPDXID: SPDXRef-09c76c24d7b4e77d17ecb4109ae0c759
FileChecksum: SHA1: 39d4b1f1a0378b0a652161abd4990aed08dfe5e0
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./internal/tui/vulns.go
SPDXID: SPDXRef-d349a9e977edc86b0e50b17c76123f67
FileChecksum: SHA1: 8cc81ab867ab7518be808d392af47e4dc83a8885
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./scripts/check-audience-tags.py
SPDXID: SPDXRef-21505966a4c3836b09d8b7eb4ae3ed9a
FileChecksum: SHA1: d51d170b33efeb78c80f310137e452b737f9a927
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./scripts/check-conformance.sh
SPDXID: SPDXRef-b8a0f1036a82f95fc87e2095d4394a54
FileChecksum: SHA1: d0dab5996775094838ec6c0f1c5cbc126144797b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./scripts/check-corpora.sh
SPDXID: SPDXRef-55da8742152a4d855f55777d065e20e1
FileChecksum: SHA1: fdd02058919c7454ef2705bd8cd6be74ed7ba7b9
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./scripts/check-coverage.sh
SPDXID: SPDXRef-5f050fc1d629e7c760021839c6ad45fb
FileChecksum: SHA1: 283a90c2d2a67e142782503bb0a6d38c6b2c1d44
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./scripts/check-evidence-refs.py
SPDXID: SPDXRef-3aa6e56b3943b414ee0915c4fe3a6f03
FileChecksum: SHA1: b2672f1d18f9461ca672bf5d3fad9984e2f2f41c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./scripts/check-pglite-trigger.py
SPDXID: SPDXRef-2130501e04b7f3c422d2a9da6bbb7945
FileChecksum: SHA1: 57c447463c0a9157ca2088a4e506171de5380a26
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/README.md
SPDXID: SPDXRef-4b7db352c8d3356fcdb3e7c8e0877317
FileChecksum: SHA1: ee012a7e9db2092ddd0fba8b26ef2aa82539460e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/attestation-only.cdx.json
SPDXID: SPDXRef-2c12afe6dc52fc9998639b50b4d4e887
FileChecksum: SHA1: c4f8eb767c76dff5976f25c2759658b231dd03a5
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/cycle-deep.cdx.json
SPDXID: SPDXRef-ced907ee5539a04299af8704dc6711ad
FileChecksum: SHA1: 83464d45ccbd1a2854cda51e5179077f0d0ddf7f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/cycle-direct.cdx.json
SPDXID: SPDXRef-ed41963154806b36136864267a8e8906
FileChecksum: SHA1: 680d1344f6b7b1c2c8603088c1803d3c6bc17dd1
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/cycle-self.cdx.json
SPDXID: SPDXRef-86f2a82c705cd91f38cda359d08af232
FileChecksum: SHA1: bce8d7593e9b9f42df9d62d31a86b0f180362b5d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/cycle-semantics.cdx.json
SPDXID: SPDXRef-d738ee5d66522d0bd38b2cb94c69d7dc
FileChecksum: SHA1: f10b1c0c37f12687305649001f6c00006a6c286e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/dangling-ref.cdx.json
SPDXID: SPDXRef-909de6247c89256fd34e0cd42b8d476e
FileChecksum: SHA1: 7181d855ff2d955f6fbcd9d8bd6cdf06d2000874
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/definitions-only.cdx.json
SPDXID: SPDXRef-86f7a53a6017cc47f0ea92742298882b
FileChecksum: SHA1: 531bec74c01ebf1c0d3037db1bee11c32cdfc4d4
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/diamond.cdx.json
SPDXID: SPDXRef-74df0aa7fd05ba7c38e997573d456067
FileChecksum: SHA1: 41f695c238040e0dd69865cdd75db6964ce31d07
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/duplicate-names.cdx.json
SPDXID: SPDXRef-f96241d656e884eea37195dc33de6f38
FileChecksum: SHA1: 08f1f9a59c8668e75f7e309776a63d1e65446e82
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/generate.py
SPDXID: SPDXRef-6a475e1b77b2feeaca359ba75826fc17
FileChecksum: SHA1: 9b7ce39c5d8b56a9d9fd1acb7d95618a2b817c91
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/hbom-depth1.cdx.json
SPDXID: SPDXRef-73f607a4696f78f75addc390461d1a3b
FileChecksum: SHA1: 79844d877cdf1f8bf66a9b4c240118fb35e8d042
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/link-sbom-copy.cdx.json
SPDXID: SPDXRef-4782b84722d8544665a01d79e439be78
FileChecksum: SHA1: 14ee624ed1521a905e77d83bcbaf7575c02783b0
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/link-sbom-other.cdx.json
SPDXID: SPDXRef-92471d8d7b001a261980c73065b640b7
FileChecksum: SHA1: 877c225b7a0312f5685fcb846d7031b3299dfc69
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/link-sbom-v2.cdx.json
SPDXID: SPDXRef-47900bbe00b56932428e2d195a2222fb
FileChecksum: SHA1: aca77422a25e75432fe276200a272e424c86b08c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/link-sbom.cdx.json
SPDXID: SPDXRef-a2b079eb50a0baaeb5920bfba1a08c9c
FileChecksum: SHA1: 14ee624ed1521a905e77d83bcbaf7575c02783b0
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/link-vex.cdx.json
SPDXID: SPDXRef-713ad4227fa90411b6ce8b937905d2ab
FileChecksum: SHA1: 7dc1897d7230914fc3cc3eb9ffc9315128cc1621
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/long-values.cdx.json
SPDXID: SPDXRef-4befaa486b15768d0253ae9553b6e0d1
FileChecksum: SHA1: a18f559978db1f916f70ab7a5d11aa4285038164
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/manifest.json
SPDXID: SPDXRef-e3973747aad55a801a9104d2292448a7
FileChecksum: SHA1: e58087f1f9691810160d353f96fe9aef5283c9a5
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/many-properties.cdx.json
SPDXID: SPDXRef-041997c9b392fa0b23a36c5ef44fb8de
FileChecksum: SHA1: 72bac5c88062e49b3a58b0221df9e55d85ffc40e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/metadata-only.cdx.json
SPDXID: SPDXRef-33428e458e931193704996dc5722d5b0
FileChecksum: SHA1: 5552beeb68d23c629a3741c21185633cf8468e34
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/multi-root.cdx.json
SPDXID: SPDXRef-12af8aa63456d811be792e0e5ec48fa4
FileChecksum: SHA1: 34f379f734076c004c642ee3376cf7779c452657
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/no-dependencies-absent.cdx.json
SPDXID: SPDXRef-ea1d26ce7ef312e2e84a060238efde4c
FileChecksum: SHA1: 155cea202c2f3684a2843938cc2f41b7988bdd1c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/no-dependencies-empty.cdx.json
SPDXID: SPDXRef-1f238bd143e072acff3f34f98a2ba658
FileChecksum: SHA1: 4ad8d1f90649fc67d25de59b23aca4359139fd65
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/obom-categories.cdx.json
SPDXID: SPDXRef-e47e5ab0742774d9d5fc1e0ebf3ad631
FileChecksum: SHA1: 45a7b343b9cefaf3cf9366e6f78c272d6bb68bfc
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/partial-coverage.cdx.json
SPDXID: SPDXRef-fbf01914d5618ade193c5335b5262fb2
FileChecksum: SHA1: 3fcf8244554f9b040b4fe23a2e0411fcffe9b393
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/purl-less.cdx.json
SPDXID: SPDXRef-bb61ddcba191174c00d6043414036183
FileChecksum: SHA1: 32215657512056ded116941eb9e917eaff0af140
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/root-outside-components.cdx.json
SPDXID: SPDXRef-3cd2705490fa7bbdf153a8212e3b04d4
FileChecksum: SHA1: 509cd0395bfb33cf03733150dc836b551999f2c3
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/rootless.cdx.json
SPDXID: SPDXRef-b7c3838846754ec10d0482744a6fac1a
FileChecksum: SHA1: 41bb2f29001a11b9e4441e14e23bf8d3a5badd1c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/sbom-with-vex.cdx.json
SPDXID: SPDXRef-526ecb5f83951357bc3f6ee7f7af1ccd
FileChecksum: SHA1: 7db73ce7683082ea404eb083047f3a9d0aa59d36
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/services-only.cdx.json
SPDXID: SPDXRef-a2520e11687761198196f52d6edaf325
FileChecksum: SHA1: 2f0fc64d1cf1aa81ebf3ed6c6d107d9c004557db
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/spec-14.cdx.json
SPDXID: SPDXRef-fc6bdafc026e2f9d2b44f8ee3550e08b
FileChecksum: SHA1: c1c213d9d6af8cc9ee390715d3286279dbd39d51
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/spec-15.cdx.json
SPDXID: SPDXRef-7c2524f229be4ff9fea5862b2fd708c8
FileChecksum: SHA1: 0af85eaf25737c777c9b082a1a1d83e0823171e2
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/spec-17.cdx.json
SPDXID: SPDXRef-d607a6166af74616abe0155fba91179b
FileChecksum: SHA1: 4fc14d2c3866369de723afd57ec85e0c0e937182
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/tree-simple.cdx.json
SPDXID: SPDXRef-94be09fe245bba5380c819cbc4b03382
FileChecksum: SHA1: cefe9c55493b5b58e4743bdba2190144c95a6ce2
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/validate-schema.py
SPDXID: SPDXRef-0ee79714f36b79ab4f5e2faa0bbb096c
FileChecksum: SHA1: b9168c49b7cf62b291aabcb76d9d146785fb7d16
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/verify.py
SPDXID: SPDXRef-20e1851ea965bdfce46753e017fc3694
FileChecksum: SHA1: af2e56fb8eae02a64f3980f3bed89173f5e9ffdf
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/vex-embedded-states.cdx.json
SPDXID: SPDXRef-31e7b54c8fea6dab42bdac17b50850c3
FileChecksum: SHA1: 84fc4295239e9f1a3bcf7cfd871948a29bb21fdd
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/vex-embedded-untriaged.cdx.json
SPDXID: SPDXRef-25816df3a8eaf26a25c0ba6a56c3663d
FileChecksum: SHA1: e64eb679df16244a8d52d2e6996cdadd7333c943
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/vex-out-of-schema.cdx.json
SPDXID: SPDXRef-250a2918fb7a6e4770d97079d29b67fd
FileChecksum: SHA1: f1fcd81dbc07424eb469543c55c500a00b0b8b16
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/vex-refs.cdx.json
SPDXID: SPDXRef-c6ce15908038124312bf90993e8a83b7
FileChecksum: SHA1: 2b2238cf3d933a8ce8bb966b36336696bcb2aaf4
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/vex-shared-ids.cdx.json
SPDXID: SPDXRef-a3d3747a4c34045eff0783103b660ee5
FileChecksum: SHA1: a4be43239a3552594eba13ff2908202c4f28e69d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/vex-standalone.cdx.json
SPDXID: SPDXRef-1895658ec4e6047f2deb33abbba5f67f
FileChecksum: SHA1: 703a6a900220a283b799cca9244e154a8627399c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/vex-uniform.cdx.json
SPDXID: SPDXRef-1478407ae68e45019be7affe0c932195
FileChecksum: SHA1: aae3911732e0260722aa09eb1df8093a83b96687
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/xml-no-metadata.cdx.xml
SPDXID: SPDXRef-9a03bc0370bb46b4ca5e5b8cfcc3bed2
FileChecksum: SHA1: a788bb042e10c7b794121145d92ba9d581d79ee2
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin
FileName: ./testdata/xml-simple.cdx.xml
SPDXID: SPDXRef-91bbdd2112d36e0b7ffa120ec2adf92c
FileChecksum: SHA1: dbfed5693a3bcf552541336f9797cfd80c673696
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Apache-2.0
FileCopyrightText: SPDX-FileCopyrightText: 2026 Georges Martin