bom.json

{"bomFormat":"CycloneDX","specVersion":"1.6","serialNumber":"urn:uuid:e8ff0656-1822-4282-b903-fc29db2d11e0","version":1,"metadata":{"timestamp":"2025-03-04T20:32:21Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"11.2.0","purl":"pkg:npm/%40cyclonedx/cdxgen@11.2.0","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@11.2.0","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"group":"","name":"mega-foss-Trust-Worthy","version":"latest","type":"application","bom-ref":"pkg:pypi/mega-foss-trust-worthy@latest","purl":"pkg:pypi/mega-foss-trust-worthy@latest"},"properties":[{"name":"cdx:bom:componentTypes","value":"pypi"},{"name":"cdx:bom:componentSrcFiles","value":"../../../../../tmp/cdxgen-venv-NN6ht5\\nrequirements.txt"}]},"components":[{"group":"","name":"motor","version":"3.7.0","purl":"pkg:pypi/motor@3.7.0","type":"library","bom-ref":"pkg:pypi/motor@3.7.0","properties":[{"name":"SrcFile","value":"requirements.txt"},{"name":"SrcFile"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"instrumentation","confidence":1,"value":"/tmp/cdxgen-venv-NN6ht5"}],"concludedValue":"/tmp/cdxgen-venv-NN6ht5"}]}},{"group":"","name":"pymongo","version":"4.11.2","purl":"pkg:pypi/pymongo@4.11.2","type":"library","bom-ref":"pkg:pypi/pymongo@4.11.2","properties":[{"name":"SrcFile","value":"requirements.txt"}],"evidence":{"identity":[{"field":"purl","confidence":0.8,"methods":[{"technique":"manifest-analysis","confidence":0.8,"value":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}],"concludedValue":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}]}},{"group":"","name":"dnspython","version":"2.7.0","purl":"pkg:pypi/dnspython@2.7.0","type":"library","bom-ref":"pkg:pypi/dnspython@2.7.0","properties":[{"name":"SrcFile","value":"requirements.txt"}],"evidence":{"identity":[{"field":"purl","confidence":0.8,"methods":[{"technique":"manifest-analysis","confidence":0.8,"value":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}],"concludedValue":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}]}},{"group":"","name":"orjson","version":"3.10.15","purl":"pkg:pypi/orjson@3.10.15","type":"library","bom-ref":"pkg:pypi/orjson@3.10.15","properties":[{"name":"SrcFile","value":"requirements.txt"},{"name":"SrcFile"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"instrumentation","confidence":1,"value":"/tmp/cdxgen-venv-NN6ht5"}],"concludedValue":"/tmp/cdxgen-venv-NN6ht5"}]}},{"group":"","name":"requests","version":"2.32.3","purl":"pkg:pypi/requests@2.32.3","type":"library","bom-ref":"pkg:pypi/requests@2.32.3","properties":[{"name":"SrcFile","value":"requirements.txt"},{"name":"SrcFile"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"instrumentation","confidence":1,"value":"/tmp/cdxgen-venv-NN6ht5"}],"concludedValue":"/tmp/cdxgen-venv-NN6ht5"}]}},{"group":"","name":"charset-normalizer","version":"3.4.1","purl":"pkg:pypi/charset-normalizer@3.4.1","type":"library","bom-ref":"pkg:pypi/charset-normalizer@3.4.1","properties":[{"name":"SrcFile","value":"requirements.txt"}],"evidence":{"identity":[{"field":"purl","confidence":0.8,"methods":[{"technique":"manifest-analysis","confidence":0.8,"value":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}],"concludedValue":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}]}},{"group":"","name":"idna","version":"3.10","purl":"pkg:pypi/idna@3.10","type":"library","bom-ref":"pkg:pypi/idna@3.10","properties":[{"name":"SrcFile","value":"requirements.txt"}],"evidence":{"identity":[{"field":"purl","confidence":0.8,"methods":[{"technique":"manifest-analysis","confidence":0.8,"value":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}],"concludedValue":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}]}},{"group":"","name":"urllib3","version":"2.3.0","purl":"pkg:pypi/urllib3@2.3.0","type":"library","bom-ref":"pkg:pypi/urllib3@2.3.0","properties":[{"name":"SrcFile","value":"requirements.txt"}],"evidence":{"identity":[{"field":"purl","confidence":0.8,"methods":[{"technique":"manifest-analysis","confidence":0.8,"value":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}],"concludedValue":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}]}},{"group":"","name":"certifi","version":"2025.1.31","purl":"pkg:pypi/certifi@2025.1.31","type":"library","bom-ref":"pkg:pypi/certifi@2025.1.31","properties":[{"name":"SrcFile","value":"requirements.txt"}],"evidence":{"identity":[{"field":"purl","confidence":0.8,"methods":[{"technique":"manifest-analysis","confidence":0.8,"value":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}],"concludedValue":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}]}},{"group":"","name":"scipy","version":"1.14.0","purl":"pkg:pypi/scipy@1.14.0","type":"framework","bom-ref":"pkg:pypi/scipy@1.14.0","properties":[{"name":"SrcFile","value":"requirements.txt"},{"name":"SrcFile"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"instrumentation","confidence":1,"value":"/tmp/cdxgen-venv-NN6ht5"}],"concludedValue":"/tmp/cdxgen-venv-NN6ht5"}]},"tags":["framework"]},{"group":"","name":"numpy","version":"2.2.3","purl":"pkg:pypi/numpy@2.2.3","type":"framework","bom-ref":"pkg:pypi/numpy@2.2.3","properties":[{"name":"SrcFile","value":"requirements.txt"}],"evidence":{"identity":[{"field":"purl","confidence":0.8,"methods":[{"technique":"manifest-analysis","confidence":0.8,"value":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}],"concludedValue":"/home/culmination/code-projects/remote-repos/mega-foss-Trust-Worthy/requirements.txt"}]},"tags":["framework"]},{"group":"","name":"tqdm","version":"4.66.5","purl":"pkg:pypi/tqdm@4.66.5","type":"library","bom-ref":"pkg:pypi/tqdm@4.66.5","properties":[{"name":"SrcFile","value":"requirements.txt"},{"name":"SrcFile"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"instrumentation","confidence":1,"value":"/tmp/cdxgen-venv-NN6ht5"}],"concludedValue":"/tmp/cdxgen-venv-NN6ht5"}]}}],"dependencies":[{"ref":"pkg:pypi/mega-foss-trust-worthy@latest","dependsOn":["pkg:pypi/motor@3.7.0","pkg:pypi/orjson@3.10.15","pkg:pypi/requests@2.32.3","pkg:pypi/scipy@1.14.0","pkg:pypi/tqdm@4.66.5"]},{"ref":"pkg:pypi/pymongo@4.11.2","dependsOn":["pkg:pypi/dnspython@2.7.0"]},{"ref":"pkg:pypi/dnspython@2.7.0","dependsOn":[]},{"ref":"pkg:pypi/motor@3.7.0","dependsOn":["pkg:pypi/pymongo@4.11.2"]},{"ref":"pkg:pypi/orjson@3.10.15","dependsOn":[]},{"ref":"pkg:pypi/charset-normalizer@3.4.1","dependsOn":[]},{"ref":"pkg:pypi/idna@3.10","dependsOn":[]},{"ref":"pkg:pypi/urllib3@2.3.0","dependsOn":[]},{"ref":"pkg:pypi/certifi@2025.1.31","dependsOn":[]},{"ref":"pkg:pypi/requests@2.32.3","dependsOn":["pkg:pypi/certifi@2025.1.31","pkg:pypi/charset-normalizer@3.4.1","pkg:pypi/idna@3.10","pkg:pypi/urllib3@2.3.0"]},{"ref":"pkg:pypi/numpy@2.2.3","dependsOn":[]},{"ref":"pkg:pypi/scipy@1.14.0","dependsOn":["pkg:pypi/numpy@2.2.3"]},{"ref":"pkg:pypi/tqdm@4.66.5","dependsOn":[]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:pypi/mega-foss-trust-worthy@latest"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"11.2.0","purl":"pkg:npm/%40cyclonedx/cdxgen@11.2.0","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@11.2.0","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2025-03-04T20:32:21Z","text":"This Software Bill-of-Materials (SBOM) document was created on Tuesday, March 4, 2025 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'mega-foss-Trust-Worthy'. There are 12 components."}]}