@cdxgen/cdxgen-plugins-bin-linux-riscv64 2.4.0 → 2.5.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cdxgen/cdxgen-plugins-bin-linux-riscv64",
-  "version": "2.4.0",
+  "version": "2.5.1",
   "description": "RISC-V 64 binary plugins to supercharge @cdxgen/cdxgen npm package",
   "main": "index.js",
   "repository": {

package/plugins/cdxui/cdxui-linux-riscv64.sha256

@@ -0,0 +1 @@
+86939e7ca82404c58f91537fb88173c17c76156ed88d9ddf524dee7acab086e6  plugins/cdxui/cdxui-linux-riscv64

package/plugins/cdxui/sbom-cdxui-postbuild.cdx.json

@@ -0,0 +1 @@
+{"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:53c08bc2-8ff6-4b06-aa66-84cd815707b6","version":1,"metadata":{"timestamp":"2026-06-13T22:01:30Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.5.1","purl":"pkg:npm/%40cyclonedx/cdxgen@12.5.1","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.5.1","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"group":"","name":"cdxui","version":"2.5.1","purl":"pkg:cargo/cdxui@2.5.1","bom-ref":"pkg:cargo/cdxui@2.5.1","type":"application","licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT"}}],"externalReferences":[{"type":"vcs","url":"https://github.com/CycloneDX/cdxgen-plugins-bin"}]},"properties":[{"name":"cdx:bom:componentTypes","value":"cargo"},{"name":"cdx:bom:componentSrcFiles","value":"Cargo.lock"}]},"components":[{"group":"","name":"allocator-api2","version":"0.2.21","hashes":[{"alg":"SHA-256","content":"683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"}],"purl":"pkg:cargo/allocator-api2@0.2.21","type":"library","bom-ref":"pkg:cargo/allocator-api2@0.2.21","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"anstream","version":"1.0.0","hashes":[{"alg":"SHA-256","content":"824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"}],"purl":"pkg:cargo/anstream@1.0.0","type":"library","bom-ref":"pkg:cargo/anstream@1.0.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"anstyle","version":"1.0.14","hashes":[{"alg":"SHA-256","content":"940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"}],"purl":"pkg:cargo/anstyle@1.0.14","type":"library","bom-ref":"pkg:cargo/anstyle@1.0.14","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"anstyle-parse","version":"1.0.0","hashes":[{"alg":"SHA-256","content":"52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"}],"purl":"pkg:cargo/anstyle-parse@1.0.0","type":"library","bom-ref":"pkg:cargo/anstyle-parse@1.0.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"anstyle-query","version":"1.1.5","hashes":[{"alg":"SHA-256","content":"40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"}],"purl":"pkg:cargo/anstyle-query@1.1.5","type":"library","bom-ref":"pkg:cargo/anstyle-query@1.1.5","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"anstyle-wincon","version":"3.0.11","hashes":[{"alg":"SHA-256","content":"291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"}],"purl":"pkg:cargo/anstyle-wincon@3.0.11","type":"library","bom-ref":"pkg:cargo/anstyle-wincon@3.0.11","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"anyhow","version":"1.0.102","hashes":[{"alg":"SHA-256","content":"7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"}],"purl":"pkg:cargo/anyhow@1.0.102","type":"library","bom-ref":"pkg:cargo/anyhow@1.0.102","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"bitflags","version":"2.13.0","hashes":[{"alg":"SHA-256","content":"b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8"}],"purl":"pkg:cargo/bitflags@2.13.0","type":"library","bom-ref":"pkg:cargo/bitflags@2.13.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"cassowary","version":"0.3.0","hashes":[{"alg":"SHA-256","content":"df8670b8c7b9dae1793364eafadf7239c40d669904660c5960d74cfd80b46a53"}],"purl":"pkg:cargo/cassowary@0.3.0","type":"library","bom-ref":"pkg:cargo/cassowary@0.3.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"castaway","version":"0.2.4","hashes":[{"alg":"SHA-256","content":"dec551ab6e7578819132c713a93c022a05d60159dc86e7a7050223577484c55a"}],"purl":"pkg:cargo/castaway@0.2.4","type":"library","bom-ref":"pkg:cargo/castaway@0.2.4","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"cdxui","version":"2.5.1","purl":"pkg:cargo/cdxui@2.5.1","type":"library","bom-ref":"pkg:cargo/cdxui@2.5.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"cfg-if","version":"1.0.4","hashes":[{"alg":"SHA-256","content":"9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"}],"purl":"pkg:cargo/cfg-if@1.0.4","type":"library","bom-ref":"pkg:cargo/cfg-if@1.0.4","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"clap","version":"4.6.1","hashes":[{"alg":"SHA-256","content":"1ddb117e43bbf7dacf0a4190fef4d345b9bad68dfc649cb349e7d17d28428e51"}],"purl":"pkg:cargo/clap@4.6.1","type":"library","bom-ref":"pkg:cargo/clap@4.6.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"clap_builder","version":"4.6.0","hashes":[{"alg":"SHA-256","content":"714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"}],"purl":"pkg:cargo/clap_builder@4.6.0","type":"library","bom-ref":"pkg:cargo/clap_builder@4.6.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"clap_derive","version":"4.6.1","hashes":[{"alg":"SHA-256","content":"f2ce8604710f6733aa641a2b3731eaa1e8b3d9973d5e3565da11800813f997a9"}],"purl":"pkg:cargo/clap_derive@4.6.1","type":"library","bom-ref":"pkg:cargo/clap_derive@4.6.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"clap_lex","version":"1.1.0","hashes":[{"alg":"SHA-256","content":"c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"}],"purl":"pkg:cargo/clap_lex@1.1.0","type":"library","bom-ref":"pkg:cargo/clap_lex@1.1.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"colorchoice","version":"1.0.5","hashes":[{"alg":"SHA-256","content":"1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"}],"purl":"pkg:cargo/colorchoice@1.0.5","type":"library","bom-ref":"pkg:cargo/colorchoice@1.0.5","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"compact_str","version":"0.8.2","hashes":[{"alg":"SHA-256","content":"7fd622ebbb56a5b2ccb651b32b911cdeb2a9b4b11776b2473bf26a26a286244e"}],"purl":"pkg:cargo/compact_str@0.8.2","type":"library","bom-ref":"pkg:cargo/compact_str@0.8.2","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"crossterm","version":"0.28.1","hashes":[{"alg":"SHA-256","content":"829d955a0bb380ef178a640b91779e3987da38c9aea133b20614cfed8cdea9c6"}],"purl":"pkg:cargo/crossterm@0.28.1","type":"library","bom-ref":"pkg:cargo/crossterm@0.28.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"crossterm_winapi","version":"0.9.1","hashes":[{"alg":"SHA-256","content":"acdd7c62a3665c7f6830a51635d9ac9b23ed385797f70a83bb8bafe9c572ab2b"}],"purl":"pkg:cargo/crossterm_winapi@0.9.1","type":"library","bom-ref":"pkg:cargo/crossterm_winapi@0.9.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"darling","version":"0.23.0","hashes":[{"alg":"SHA-256","content":"25ae13da2f202d56bd7f91c25fba009e7717a1e4a1cc98a76d844b65ae912e9d"}],"purl":"pkg:cargo/darling@0.23.0","type":"library","bom-ref":"pkg:cargo/darling@0.23.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"darling_core","version":"0.23.0","hashes":[{"alg":"SHA-256","content":"9865a50f7c335f53564bb694ef660825eb8610e0a53d3e11bf1b0d3df31e03b0"}],"purl":"pkg:cargo/darling_core@0.23.0","type":"library","bom-ref":"pkg:cargo/darling_core@0.23.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"darling_macro","version":"0.23.0","hashes":[{"alg":"SHA-256","content":"ac3984ec7bd6cfa798e62b4a642426a5be0e68f9401cfc2a01e3fa9ea2fcdb8d"}],"purl":"pkg:cargo/darling_macro@0.23.0","type":"library","bom-ref":"pkg:cargo/darling_macro@0.23.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"either","version":"1.16.0","hashes":[{"alg":"SHA-256","content":"91622ff5e7162018101f2fea40d6ebf4a78bbe5a49736a2020649edf9693679e"}],"purl":"pkg:cargo/either@1.16.0","type":"library","bom-ref":"pkg:cargo/either@1.16.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"equivalent","version":"1.0.2","hashes":[{"alg":"SHA-256","content":"877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"}],"purl":"pkg:cargo/equivalent@1.0.2","type":"library","bom-ref":"pkg:cargo/equivalent@1.0.2","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"errno","version":"0.3.14","hashes":[{"alg":"SHA-256","content":"39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"}],"purl":"pkg:cargo/errno@0.3.14","type":"library","bom-ref":"pkg:cargo/errno@0.3.14","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"fastrand","version":"2.4.1","hashes":[{"alg":"SHA-256","content":"9f1f227452a390804cdb637b74a86990f2a7d7ba4b7d5693aac9b4dd6defd8d6"}],"purl":"pkg:cargo/fastrand@2.4.1","type":"library","bom-ref":"pkg:cargo/fastrand@2.4.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"foldhash","version":"0.1.5","hashes":[{"alg":"SHA-256","content":"d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"}],"purl":"pkg:cargo/foldhash@0.1.5","type":"library","bom-ref":"pkg:cargo/foldhash@0.1.5","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"getrandom","version":"0.4.2","hashes":[{"alg":"SHA-256","content":"0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"}],"purl":"pkg:cargo/getrandom@0.4.2","type":"library","bom-ref":"pkg:cargo/getrandom@0.4.2","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"hashbrown","version":"0.15.5","hashes":[{"alg":"SHA-256","content":"9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"}],"purl":"pkg:cargo/hashbrown@0.15.5","type":"library","bom-ref":"pkg:cargo/hashbrown@0.15.5","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"hashbrown","version":"0.17.1","hashes":[{"alg":"SHA-256","content":"ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"}],"purl":"pkg:cargo/hashbrown@0.17.1","type":"library","bom-ref":"pkg:cargo/hashbrown@0.17.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"heck","version":"0.5.0","hashes":[{"alg":"SHA-256","content":"2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"}],"purl":"pkg:cargo/heck@0.5.0","type":"library","bom-ref":"pkg:cargo/heck@0.5.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"id-arena","version":"2.3.0","hashes":[{"alg":"SHA-256","content":"3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"}],"purl":"pkg:cargo/id-arena@2.3.0","type":"library","bom-ref":"pkg:cargo/id-arena@2.3.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"ident_case","version":"1.0.1","hashes":[{"alg":"SHA-256","content":"b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"}],"purl":"pkg:cargo/ident_case@1.0.1","type":"library","bom-ref":"pkg:cargo/ident_case@1.0.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"indexmap","version":"2.14.0","hashes":[{"alg":"SHA-256","content":"d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"}],"purl":"pkg:cargo/indexmap@2.14.0","type":"library","bom-ref":"pkg:cargo/indexmap@2.14.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"indoc","version":"2.0.7","hashes":[{"alg":"SHA-256","content":"79cf5c93f93228cf8efb3ba362535fb11199ac548a09ce117c9b1adc3030d706"}],"purl":"pkg:cargo/indoc@2.0.7","type":"library","bom-ref":"pkg:cargo/indoc@2.0.7","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"instability","version":"0.3.12","hashes":[{"alg":"SHA-256","content":"5eb2d60ef19920a3a9193c3e371f726ec1dafc045dac788d0fb3704272458971"}],"purl":"pkg:cargo/instability@0.3.12","type":"library","bom-ref":"pkg:cargo/instability@0.3.12","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"is_terminal_polyfill","version":"1.70.2","hashes":[{"alg":"SHA-256","content":"a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"}],"purl":"pkg:cargo/is_terminal_polyfill@1.70.2","type":"library","bom-ref":"pkg:cargo/is_terminal_polyfill@1.70.2","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"itertools","version":"0.13.0","hashes":[{"alg":"SHA-256","content":"413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186"}],"purl":"pkg:cargo/itertools@0.13.0","type":"library","bom-ref":"pkg:cargo/itertools@0.13.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"itoa","version":"1.0.18","hashes":[{"alg":"SHA-256","content":"8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"}],"purl":"pkg:cargo/itoa@1.0.18","type":"library","bom-ref":"pkg:cargo/itoa@1.0.18","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"leb128fmt","version":"0.1.0","hashes":[{"alg":"SHA-256","content":"09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"}],"purl":"pkg:cargo/leb128fmt@0.1.0","type":"library","bom-ref":"pkg:cargo/leb128fmt@0.1.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"libc","version":"0.2.186","hashes":[{"alg":"SHA-256","content":"68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"}],"purl":"pkg:cargo/libc@0.2.186","type":"library","bom-ref":"pkg:cargo/libc@0.2.186","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"linux-raw-sys","version":"0.4.15","hashes":[{"alg":"SHA-256","content":"d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"}],"purl":"pkg:cargo/linux-raw-sys@0.4.15","type":"library","bom-ref":"pkg:cargo/linux-raw-sys@0.4.15","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"linux-raw-sys","version":"0.12.1","hashes":[{"alg":"SHA-256","content":"32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"}],"purl":"pkg:cargo/linux-raw-sys@0.12.1","type":"library","bom-ref":"pkg:cargo/linux-raw-sys@0.12.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"lock_api","version":"0.4.14","hashes":[{"alg":"SHA-256","content":"224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"}],"purl":"pkg:cargo/lock_api@0.4.14","type":"library","bom-ref":"pkg:cargo/lock_api@0.4.14","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"log","version":"0.4.32","hashes":[{"alg":"SHA-256","content":"953f07c43838f8e6f9758cab68bf5bed85465e7587ebe0b823f1bcd81978ad3a"}],"purl":"pkg:cargo/log@0.4.32","type":"library","bom-ref":"pkg:cargo/log@0.4.32","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"lru","version":"0.12.5","hashes":[{"alg":"SHA-256","content":"234cf4f4a04dc1f57e24b96cc0cd600cf2af460d4161ac5ecdd0af8e1f3b2a38"}],"purl":"pkg:cargo/lru@0.12.5","type":"library","bom-ref":"pkg:cargo/lru@0.12.5","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"memchr","version":"2.8.2","hashes":[{"alg":"SHA-256","content":"88904434abc2901f197fe8cc55f0445e7ded921dba5911dad2e2b39b48e663c4"}],"purl":"pkg:cargo/memchr@2.8.2","type":"library","bom-ref":"pkg:cargo/memchr@2.8.2","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"mio","version":"1.2.1","hashes":[{"alg":"SHA-256","content":"02bd0af71c67b473010cbbc60715ee815645a4dc942899111f494b4b737d6fda"}],"purl":"pkg:cargo/mio@1.2.1","type":"library","bom-ref":"pkg:cargo/mio@1.2.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"once_cell","version":"1.21.4","hashes":[{"alg":"SHA-256","content":"9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"}],"purl":"pkg:cargo/once_cell@1.21.4","type":"library","bom-ref":"pkg:cargo/once_cell@1.21.4","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"once_cell_polyfill","version":"1.70.2","hashes":[{"alg":"SHA-256","content":"384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"}],"purl":"pkg:cargo/once_cell_polyfill@1.70.2","type":"library","bom-ref":"pkg:cargo/once_cell_polyfill@1.70.2","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"parking_lot","version":"0.12.5","hashes":[{"alg":"SHA-256","content":"93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"}],"purl":"pkg:cargo/parking_lot@0.12.5","type":"library","bom-ref":"pkg:cargo/parking_lot@0.12.5","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"parking_lot_core","version":"0.9.12","hashes":[{"alg":"SHA-256","content":"2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"}],"purl":"pkg:cargo/parking_lot_core@0.9.12","type":"library","bom-ref":"pkg:cargo/parking_lot_core@0.9.12","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"paste","version":"1.0.15","hashes":[{"alg":"SHA-256","content":"57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"}],"purl":"pkg:cargo/paste@1.0.15","type":"library","bom-ref":"pkg:cargo/paste@1.0.15","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"prettyplease","version":"0.2.37","hashes":[{"alg":"SHA-256","content":"479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"}],"purl":"pkg:cargo/prettyplease@0.2.37","type":"library","bom-ref":"pkg:cargo/prettyplease@0.2.37","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"proc-macro2","version":"1.0.106","hashes":[{"alg":"SHA-256","content":"8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"}],"purl":"pkg:cargo/proc-macro2@1.0.106","type":"library","bom-ref":"pkg:cargo/proc-macro2@1.0.106","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"quote","version":"1.0.45","hashes":[{"alg":"SHA-256","content":"41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"}],"purl":"pkg:cargo/quote@1.0.45","type":"library","bom-ref":"pkg:cargo/quote@1.0.45","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"r-efi","version":"6.0.0","hashes":[{"alg":"SHA-256","content":"f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"}],"purl":"pkg:cargo/r-efi@6.0.0","type":"library","bom-ref":"pkg:cargo/r-efi@6.0.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"ratatui","version":"0.29.0","hashes":[{"alg":"SHA-256","content":"eabd94c2f37801c20583fc49dd5cd6b0ba68c716787c2dd6ed18571e1e63117b"}],"purl":"pkg:cargo/ratatui@0.29.0","type":"library","bom-ref":"pkg:cargo/ratatui@0.29.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"redox_syscall","version":"0.5.18","hashes":[{"alg":"SHA-256","content":"ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"}],"purl":"pkg:cargo/redox_syscall@0.5.18","type":"library","bom-ref":"pkg:cargo/redox_syscall@0.5.18","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"rustix","version":"0.38.44","hashes":[{"alg":"SHA-256","content":"fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"}],"purl":"pkg:cargo/rustix@0.38.44","type":"library","bom-ref":"pkg:cargo/rustix@0.38.44","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"rustix","version":"1.1.4","hashes":[{"alg":"SHA-256","content":"b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"}],"purl":"pkg:cargo/rustix@1.1.4","type":"library","bom-ref":"pkg:cargo/rustix@1.1.4","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"rustversion","version":"1.0.22","hashes":[{"alg":"SHA-256","content":"b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"}],"purl":"pkg:cargo/rustversion@1.0.22","type":"library","bom-ref":"pkg:cargo/rustversion@1.0.22","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"ryu","version":"1.0.23","hashes":[{"alg":"SHA-256","content":"9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"}],"purl":"pkg:cargo/ryu@1.0.23","type":"library","bom-ref":"pkg:cargo/ryu@1.0.23","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"scopeguard","version":"1.2.0","hashes":[{"alg":"SHA-256","content":"94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"}],"purl":"pkg:cargo/scopeguard@1.2.0","type":"library","bom-ref":"pkg:cargo/scopeguard@1.2.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"semver","version":"1.0.28","hashes":[{"alg":"SHA-256","content":"8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"}],"purl":"pkg:cargo/semver@1.0.28","type":"library","bom-ref":"pkg:cargo/semver@1.0.28","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"serde","version":"1.0.228","hashes":[{"alg":"SHA-256","content":"9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"}],"purl":"pkg:cargo/serde@1.0.228","type":"library","bom-ref":"pkg:cargo/serde@1.0.228","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"serde_core","version":"1.0.228","hashes":[{"alg":"SHA-256","content":"41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"}],"purl":"pkg:cargo/serde_core@1.0.228","type":"library","bom-ref":"pkg:cargo/serde_core@1.0.228","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"serde_derive","version":"1.0.228","hashes":[{"alg":"SHA-256","content":"d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"}],"purl":"pkg:cargo/serde_derive@1.0.228","type":"library","bom-ref":"pkg:cargo/serde_derive@1.0.228","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"serde_json","version":"1.0.150","hashes":[{"alg":"SHA-256","content":"e8014e44b4736ed0538adeecded0fce2a272f22dc9578a7eb6b2d9993c74cfb9"}],"purl":"pkg:cargo/serde_json@1.0.150","type":"library","bom-ref":"pkg:cargo/serde_json@1.0.150","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"signal-hook","version":"0.3.18","hashes":[{"alg":"SHA-256","content":"d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"}],"purl":"pkg:cargo/signal-hook@0.3.18","type":"library","bom-ref":"pkg:cargo/signal-hook@0.3.18","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"signal-hook-mio","version":"0.2.5","hashes":[{"alg":"SHA-256","content":"b75a19a7a740b25bc7944bdee6172368f988763b744e3d4dfe753f6b4ece40cc"}],"purl":"pkg:cargo/signal-hook-mio@0.2.5","type":"library","bom-ref":"pkg:cargo/signal-hook-mio@0.2.5","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"signal-hook-registry","version":"1.4.8","hashes":[{"alg":"SHA-256","content":"c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"}],"purl":"pkg:cargo/signal-hook-registry@1.4.8","type":"library","bom-ref":"pkg:cargo/signal-hook-registry@1.4.8","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"smallvec","version":"1.15.2","hashes":[{"alg":"SHA-256","content":"8ed6a63f02c8539c91a8685a86f4099661ba3da017932f6ebbea6de3f0fa7c90"}],"purl":"pkg:cargo/smallvec@1.15.2","type":"library","bom-ref":"pkg:cargo/smallvec@1.15.2","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"static_assertions","version":"1.1.0","hashes":[{"alg":"SHA-256","content":"a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"}],"purl":"pkg:cargo/static_assertions@1.1.0","type":"library","bom-ref":"pkg:cargo/static_assertions@1.1.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"strip-ansi-escapes","version":"0.2.1","hashes":[{"alg":"SHA-256","content":"2a8f8038e7e7969abb3f1b7c2a811225e9296da208539e0f79c5251d6cac0025"}],"purl":"pkg:cargo/strip-ansi-escapes@0.2.1","type":"library","bom-ref":"pkg:cargo/strip-ansi-escapes@0.2.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"strsim","version":"0.11.1","hashes":[{"alg":"SHA-256","content":"7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"}],"purl":"pkg:cargo/strsim@0.11.1","type":"library","bom-ref":"pkg:cargo/strsim@0.11.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"strum","version":"0.26.3","hashes":[{"alg":"SHA-256","content":"8fec0f0aef304996cf250b31b5a10dee7980c85da9d759361292b8bca5a18f06"}],"purl":"pkg:cargo/strum@0.26.3","type":"library","bom-ref":"pkg:cargo/strum@0.26.3","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"strum_macros","version":"0.26.4","hashes":[{"alg":"SHA-256","content":"4c6bee85a5a24955dc440386795aa378cd9cf82acd5f764469152d2270e581be"}],"purl":"pkg:cargo/strum_macros@0.26.4","type":"library","bom-ref":"pkg:cargo/strum_macros@0.26.4","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"syn","version":"2.0.117","hashes":[{"alg":"SHA-256","content":"e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"}],"purl":"pkg:cargo/syn@2.0.117","type":"library","bom-ref":"pkg:cargo/syn@2.0.117","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"tempfile","version":"3.27.0","hashes":[{"alg":"SHA-256","content":"32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"}],"purl":"pkg:cargo/tempfile@3.27.0","type":"library","bom-ref":"pkg:cargo/tempfile@3.27.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"thiserror","version":"2.0.18","hashes":[{"alg":"SHA-256","content":"4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"}],"purl":"pkg:cargo/thiserror@2.0.18","type":"library","bom-ref":"pkg:cargo/thiserror@2.0.18","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"thiserror-impl","version":"2.0.18","hashes":[{"alg":"SHA-256","content":"ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"}],"purl":"pkg:cargo/thiserror-impl@2.0.18","type":"library","bom-ref":"pkg:cargo/thiserror-impl@2.0.18","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"unicode-ident","version":"1.0.24","hashes":[{"alg":"SHA-256","content":"e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"}],"purl":"pkg:cargo/unicode-ident@1.0.24","type":"library","bom-ref":"pkg:cargo/unicode-ident@1.0.24","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"unicode-segmentation","version":"1.13.3","hashes":[{"alg":"SHA-256","content":"c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"}],"purl":"pkg:cargo/unicode-segmentation@1.13.3","type":"library","bom-ref":"pkg:cargo/unicode-segmentation@1.13.3","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"unicode-truncate","version":"1.1.0","hashes":[{"alg":"SHA-256","content":"b3644627a5af5fa321c95b9b235a72fd24cd29c648c2c379431e6628655627bf"}],"purl":"pkg:cargo/unicode-truncate@1.1.0","type":"library","bom-ref":"pkg:cargo/unicode-truncate@1.1.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"unicode-width","version":"0.1.14","hashes":[{"alg":"SHA-256","content":"7dd6e30e90baa6f72411720665d41d89b9a3d039dc45b8faea1ddd07f617f6af"}],"purl":"pkg:cargo/unicode-width@0.1.14","type":"library","bom-ref":"pkg:cargo/unicode-width@0.1.14","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"unicode-width","version":"0.2.0","hashes":[{"alg":"SHA-256","content":"1fc81956842c57dac11422a97c3b8195a1ff727f06e85c84ed2e8aa277c9a0fd"}],"purl":"pkg:cargo/unicode-width@0.2.0","type":"library","bom-ref":"pkg:cargo/unicode-width@0.2.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"unicode-xid","version":"0.2.6","hashes":[{"alg":"SHA-256","content":"ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"}],"purl":"pkg:cargo/unicode-xid@0.2.6","type":"library","bom-ref":"pkg:cargo/unicode-xid@0.2.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"utf8parse","version":"0.2.2","hashes":[{"alg":"SHA-256","content":"06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"}],"purl":"pkg:cargo/utf8parse@0.2.2","type":"library","bom-ref":"pkg:cargo/utf8parse@0.2.2","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"vte","version":"0.14.1","hashes":[{"alg":"SHA-256","content":"231fdcd7ef3037e8330d8e17e61011a2c244126acc0a982f4040ac3f9f0bc077"}],"purl":"pkg:cargo/vte@0.14.1","type":"library","bom-ref":"pkg:cargo/vte@0.14.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wasi","version":"0.11.1+wasi-snapshot-preview1","hashes":[{"alg":"SHA-256","content":"ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"}],"purl":"pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1","type":"library","bom-ref":"pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wasip2","version":"1.0.4+wasi-0.2.12","hashes":[{"alg":"SHA-256","content":"b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"}],"purl":"pkg:cargo/wasip2@1.0.4%2Bwasi-0.2.12","type":"library","bom-ref":"pkg:cargo/wasip2@1.0.4%2Bwasi-0.2.12","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wasip3","version":"0.4.0+wasi-0.3.0-rc-2026-01-06","hashes":[{"alg":"SHA-256","content":"5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"}],"purl":"pkg:cargo/wasip3@0.4.0%2Bwasi-0.3.0-rc-2026-01-06","type":"library","bom-ref":"pkg:cargo/wasip3@0.4.0%2Bwasi-0.3.0-rc-2026-01-06","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wasm-encoder","version":"0.244.0","hashes":[{"alg":"SHA-256","content":"990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"}],"purl":"pkg:cargo/wasm-encoder@0.244.0","type":"library","bom-ref":"pkg:cargo/wasm-encoder@0.244.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wasm-metadata","version":"0.244.0","hashes":[{"alg":"SHA-256","content":"bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"}],"purl":"pkg:cargo/wasm-metadata@0.244.0","type":"library","bom-ref":"pkg:cargo/wasm-metadata@0.244.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wasmparser","version":"0.244.0","hashes":[{"alg":"SHA-256","content":"47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"}],"purl":"pkg:cargo/wasmparser@0.244.0","type":"library","bom-ref":"pkg:cargo/wasmparser@0.244.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]},"tags":["parse"]},{"group":"","name":"winapi","version":"0.3.9","hashes":[{"alg":"SHA-256","content":"5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"}],"purl":"pkg:cargo/winapi@0.3.9","type":"library","bom-ref":"pkg:cargo/winapi@0.3.9","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"winapi-i686-pc-windows-gnu","version":"0.4.0","hashes":[{"alg":"SHA-256","content":"ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"}],"purl":"pkg:cargo/winapi-i686-pc-windows-gnu@0.4.0","type":"library","bom-ref":"pkg:cargo/winapi-i686-pc-windows-gnu@0.4.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"winapi-x86_64-pc-windows-gnu","version":"0.4.0","hashes":[{"alg":"SHA-256","content":"712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"}],"purl":"pkg:cargo/winapi-x86_64-pc-windows-gnu@0.4.0","type":"library","bom-ref":"pkg:cargo/winapi-x86_64-pc-windows-gnu@0.4.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows-link","version":"0.2.1","hashes":[{"alg":"SHA-256","content":"f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"}],"purl":"pkg:cargo/windows-link@0.2.1","type":"library","bom-ref":"pkg:cargo/windows-link@0.2.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows-sys","version":"0.59.0","hashes":[{"alg":"SHA-256","content":"1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"}],"purl":"pkg:cargo/windows-sys@0.59.0","type":"library","bom-ref":"pkg:cargo/windows-sys@0.59.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows-sys","version":"0.61.2","hashes":[{"alg":"SHA-256","content":"ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"}],"purl":"pkg:cargo/windows-sys@0.61.2","type":"library","bom-ref":"pkg:cargo/windows-sys@0.61.2","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows-targets","version":"0.52.6","hashes":[{"alg":"SHA-256","content":"9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"}],"purl":"pkg:cargo/windows-targets@0.52.6","type":"library","bom-ref":"pkg:cargo/windows-targets@0.52.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows_aarch64_gnullvm","version":"0.52.6","hashes":[{"alg":"SHA-256","content":"32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"}],"purl":"pkg:cargo/windows_aarch64_gnullvm@0.52.6","type":"library","bom-ref":"pkg:cargo/windows_aarch64_gnullvm@0.52.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows_aarch64_msvc","version":"0.52.6","hashes":[{"alg":"SHA-256","content":"09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"}],"purl":"pkg:cargo/windows_aarch64_msvc@0.52.6","type":"library","bom-ref":"pkg:cargo/windows_aarch64_msvc@0.52.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows_i686_gnu","version":"0.52.6","hashes":[{"alg":"SHA-256","content":"8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"}],"purl":"pkg:cargo/windows_i686_gnu@0.52.6","type":"library","bom-ref":"pkg:cargo/windows_i686_gnu@0.52.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows_i686_gnullvm","version":"0.52.6","hashes":[{"alg":"SHA-256","content":"0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"}],"purl":"pkg:cargo/windows_i686_gnullvm@0.52.6","type":"library","bom-ref":"pkg:cargo/windows_i686_gnullvm@0.52.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows_i686_msvc","version":"0.52.6","hashes":[{"alg":"SHA-256","content":"240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"}],"purl":"pkg:cargo/windows_i686_msvc@0.52.6","type":"library","bom-ref":"pkg:cargo/windows_i686_msvc@0.52.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows_x86_64_gnu","version":"0.52.6","hashes":[{"alg":"SHA-256","content":"147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"}],"purl":"pkg:cargo/windows_x86_64_gnu@0.52.6","type":"library","bom-ref":"pkg:cargo/windows_x86_64_gnu@0.52.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows_x86_64_gnullvm","version":"0.52.6","hashes":[{"alg":"SHA-256","content":"24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"}],"purl":"pkg:cargo/windows_x86_64_gnullvm@0.52.6","type":"library","bom-ref":"pkg:cargo/windows_x86_64_gnullvm@0.52.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"windows_x86_64_msvc","version":"0.52.6","hashes":[{"alg":"SHA-256","content":"589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"}],"purl":"pkg:cargo/windows_x86_64_msvc@0.52.6","type":"library","bom-ref":"pkg:cargo/windows_x86_64_msvc@0.52.6","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wit-bindgen","version":"0.51.0","hashes":[{"alg":"SHA-256","content":"d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"}],"purl":"pkg:cargo/wit-bindgen@0.51.0","type":"library","bom-ref":"pkg:cargo/wit-bindgen@0.51.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wit-bindgen","version":"0.57.1","hashes":[{"alg":"SHA-256","content":"1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"}],"purl":"pkg:cargo/wit-bindgen@0.57.1","type":"library","bom-ref":"pkg:cargo/wit-bindgen@0.57.1","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wit-bindgen-core","version":"0.51.0","hashes":[{"alg":"SHA-256","content":"ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"}],"purl":"pkg:cargo/wit-bindgen-core@0.51.0","type":"library","bom-ref":"pkg:cargo/wit-bindgen-core@0.51.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wit-bindgen-rust","version":"0.51.0","hashes":[{"alg":"SHA-256","content":"b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"}],"purl":"pkg:cargo/wit-bindgen-rust@0.51.0","type":"library","bom-ref":"pkg:cargo/wit-bindgen-rust@0.51.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wit-bindgen-rust-macro","version":"0.51.0","hashes":[{"alg":"SHA-256","content":"0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"}],"purl":"pkg:cargo/wit-bindgen-rust-macro@0.51.0","type":"library","bom-ref":"pkg:cargo/wit-bindgen-rust-macro@0.51.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wit-component","version":"0.244.0","hashes":[{"alg":"SHA-256","content":"9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"}],"purl":"pkg:cargo/wit-component@0.244.0","type":"library","bom-ref":"pkg:cargo/wit-component@0.244.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}},{"group":"","name":"wit-parser","version":"0.244.0","hashes":[{"alg":"SHA-256","content":"ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"}],"purl":"pkg:cargo/wit-parser@0.244.0","type":"library","bom-ref":"pkg:cargo/wit-parser@0.244.0","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]},"tags":["parse"]},{"group":"","name":"zmij","version":"1.0.21","hashes":[{"alg":"SHA-256","content":"b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"}],"purl":"pkg:cargo/zmij@1.0.21","type":"library","bom-ref":"pkg:cargo/zmij@1.0.21","properties":[{"name":"SrcFile","value":"Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"Cargo.lock"}],"concludedValue":"Cargo.lock"}]}}],"dependencies":[{"ref":"pkg:cargo/allocator-api2@0.2.21","dependsOn":[]},{"ref":"pkg:cargo/anstream@1.0.0","dependsOn":["pkg:cargo/anstyle-parse@1.0.0","pkg:cargo/anstyle-query@1.1.5","pkg:cargo/anstyle-wincon@3.0.11","pkg:cargo/anstyle@1.0.14","pkg:cargo/colorchoice@1.0.5","pkg:cargo/is_terminal_polyfill@1.70.2","pkg:cargo/utf8parse@0.2.2"]},{"ref":"pkg:cargo/anstyle@1.0.14","dependsOn":[]},{"ref":"pkg:cargo/anstyle-parse@1.0.0","dependsOn":["pkg:cargo/utf8parse@0.2.2"]},{"ref":"pkg:cargo/anstyle-query@1.1.5","dependsOn":["pkg:cargo/windows-sys@0.61.2"]},{"ref":"pkg:cargo/anstyle-wincon@3.0.11","dependsOn":["pkg:cargo/anstyle@1.0.14","pkg:cargo/once_cell_polyfill@1.70.2","pkg:cargo/windows-sys@0.61.2"]},{"ref":"pkg:cargo/anyhow@1.0.102","dependsOn":[]},{"ref":"pkg:cargo/bitflags@2.13.0","dependsOn":[]},{"ref":"pkg:cargo/cassowary@0.3.0","dependsOn":[]},{"ref":"pkg:cargo/castaway@0.2.4","dependsOn":["pkg:cargo/rustversion@1.0.22"]},{"ref":"pkg:cargo/cdxui@2.5.1","dependsOn":["pkg:cargo/clap@4.6.1","pkg:cargo/crossterm@0.28.1","pkg:cargo/ratatui@0.29.0","pkg:cargo/serde@1.0.228","pkg:cargo/serde_json@1.0.150","pkg:cargo/strip-ansi-escapes@0.2.1","pkg:cargo/tempfile@3.27.0","pkg:cargo/thiserror@2.0.18","pkg:cargo/unicode-width@0.2.0"]},{"ref":"pkg:cargo/cfg-if@1.0.4","dependsOn":[]},{"ref":"pkg:cargo/clap@4.6.1","dependsOn":["pkg:cargo/clap_builder@4.6.0","pkg:cargo/clap_derive@4.6.1"]},{"ref":"pkg:cargo/clap_builder@4.6.0","dependsOn":["pkg:cargo/anstream@1.0.0","pkg:cargo/anstyle@1.0.14","pkg:cargo/clap_lex@1.1.0","pkg:cargo/strsim@0.11.1"]},{"ref":"pkg:cargo/clap_derive@4.6.1","dependsOn":["pkg:cargo/heck@0.5.0","pkg:cargo/proc-macro2@1.0.106","pkg:cargo/quote@1.0.45","pkg:cargo/syn@2.0.117"]},{"ref":"pkg:cargo/clap_lex@1.1.0","dependsOn":[]},{"ref":"pkg:cargo/colorchoice@1.0.5","dependsOn":[]},{"ref":"pkg:cargo/compact_str@0.8.2","dependsOn":["pkg:cargo/castaway@0.2.4","pkg:cargo/cfg-if@1.0.4","pkg:cargo/itoa@1.0.18","pkg:cargo/rustversion@1.0.22","pkg:cargo/ryu@1.0.23","pkg:cargo/static_assertions@1.1.0"]},{"ref":"pkg:cargo/crossterm@0.28.1","dependsOn":["pkg:cargo/bitflags@2.13.0","pkg:cargo/crossterm_winapi@0.9.1","pkg:cargo/mio@1.2.1","pkg:cargo/parking_lot@0.12.5","pkg:cargo/rustix@0.38.44","pkg:cargo/signal-hook-mio@0.2.5","pkg:cargo/signal-hook@0.3.18","pkg:cargo/winapi@0.3.9"]},{"ref":"pkg:cargo/crossterm_winapi@0.9.1","dependsOn":["pkg:cargo/winapi@0.3.9"]},{"ref":"pkg:cargo/darling@0.23.0","dependsOn":["pkg:cargo/darling_core@0.23.0","pkg:cargo/darling_macro@0.23.0"]},{"ref":"pkg:cargo/darling_core@0.23.0","dependsOn":["pkg:cargo/ident_case@1.0.1","pkg:cargo/proc-macro2@1.0.106","pkg:cargo/quote@1.0.45","pkg:cargo/strsim@0.11.1","pkg:cargo/syn@2.0.117"]},{"ref":"pkg:cargo/darling_macro@0.23.0","dependsOn":["pkg:cargo/darling_core@0.23.0","pkg:cargo/quote@1.0.45","pkg:cargo/syn@2.0.117"]},{"ref":"pkg:cargo/either@1.16.0","dependsOn":[]},{"ref":"pkg:cargo/equivalent@1.0.2","dependsOn":[]},{"ref":"pkg:cargo/errno@0.3.14","dependsOn":["pkg:cargo/libc@0.2.186","pkg:cargo/windows-sys@0.61.2"]},{"ref":"pkg:cargo/fastrand@2.4.1","dependsOn":[]},{"ref":"pkg:cargo/foldhash@0.1.5","dependsOn":[]},{"ref":"pkg:cargo/getrandom@0.4.2","dependsOn":["pkg:cargo/cfg-if@1.0.4","pkg:cargo/libc@0.2.186","pkg:cargo/r-efi@6.0.0"]},{"ref":"pkg:cargo/hashbrown@0.17.1","dependsOn":[]},{"ref":"pkg:cargo/heck@0.5.0","dependsOn":[]},{"ref":"pkg:cargo/id-arena@2.3.0","dependsOn":[]},{"ref":"pkg:cargo/ident_case@1.0.1","dependsOn":[]},{"ref":"pkg:cargo/indexmap@2.14.0","dependsOn":["pkg:cargo/equivalent@1.0.2","pkg:cargo/hashbrown@0.17.1","pkg:cargo/serde@1.0.228","pkg:cargo/serde_core@1.0.228"]},{"ref":"pkg:cargo/indoc@2.0.7","dependsOn":["pkg:cargo/rustversion@1.0.22"]},{"ref":"pkg:cargo/instability@0.3.12","dependsOn":["pkg:cargo/darling@0.23.0","pkg:cargo/indoc@2.0.7","pkg:cargo/proc-macro2@1.0.106","pkg:cargo/quote@1.0.45","pkg:cargo/syn@2.0.117"]},{"ref":"pkg:cargo/is_terminal_polyfill@1.70.2","dependsOn":[]},{"ref":"pkg:cargo/itertools@0.13.0","dependsOn":["pkg:cargo/either@1.16.0"]},{"ref":"pkg:cargo/itoa@1.0.18","dependsOn":[]},{"ref":"pkg:cargo/leb128fmt@0.1.0","dependsOn":[]},{"ref":"pkg:cargo/libc@0.2.186","dependsOn":[]},{"ref":"pkg:cargo/linux-raw-sys@0.12.1","dependsOn":[]},{"ref":"pkg:cargo/lock_api@0.4.14","dependsOn":["pkg:cargo/scopeguard@1.2.0"]},{"ref":"pkg:cargo/log@0.4.32","dependsOn":[]},{"ref":"pkg:cargo/lru@0.12.5","dependsOn":["pkg:cargo/hashbrown@0.15.5"]},{"ref":"pkg:cargo/memchr@2.8.2","dependsOn":[]},{"ref":"pkg:cargo/mio@1.2.1","dependsOn":["pkg:cargo/libc@0.2.186","pkg:cargo/log@0.4.32","pkg:cargo/windows-sys@0.61.2"]},{"ref":"pkg:cargo/once_cell@1.21.4","dependsOn":[]},{"ref":"pkg:cargo/once_cell_polyfill@1.70.2","dependsOn":[]},{"ref":"pkg:cargo/parking_lot@0.12.5","dependsOn":["pkg:cargo/lock_api@0.4.14","pkg:cargo/parking_lot_core@0.9.12"]},{"ref":"pkg:cargo/parking_lot_core@0.9.12","dependsOn":["pkg:cargo/cfg-if@1.0.4","pkg:cargo/libc@0.2.186","pkg:cargo/redox_syscall@0.5.18","pkg:cargo/smallvec@1.15.2","pkg:cargo/windows-link@0.2.1"]},{"ref":"pkg:cargo/paste@1.0.15","dependsOn":[]},{"ref":"pkg:cargo/prettyplease@0.2.37","dependsOn":["pkg:cargo/proc-macro2@1.0.106","pkg:cargo/syn@2.0.117"]},{"ref":"pkg:cargo/proc-macro2@1.0.106","dependsOn":["pkg:cargo/unicode-ident@1.0.24"]},{"ref":"pkg:cargo/quote@1.0.45","dependsOn":["pkg:cargo/proc-macro2@1.0.106"]},{"ref":"pkg:cargo/r-efi@6.0.0","dependsOn":[]},{"ref":"pkg:cargo/ratatui@0.29.0","dependsOn":["pkg:cargo/bitflags@2.13.0","pkg:cargo/cassowary@0.3.0","pkg:cargo/compact_str@0.8.2","pkg:cargo/crossterm@0.28.1","pkg:cargo/indoc@2.0.7","pkg:cargo/instability@0.3.12","pkg:cargo/itertools@0.13.0","pkg:cargo/lru@0.12.5","pkg:cargo/paste@1.0.15","pkg:cargo/strum@0.26.3","pkg:cargo/unicode-segmentation@1.13.3","pkg:cargo/unicode-truncate@1.1.0","pkg:cargo/unicode-width@0.2.0"]},{"ref":"pkg:cargo/redox_syscall@0.5.18","dependsOn":["pkg:cargo/bitflags@2.13.0"]},{"ref":"pkg:cargo/rustix@1.1.4","dependsOn":["pkg:cargo/bitflags@2.13.0","pkg:cargo/errno@0.3.14","pkg:cargo/libc@0.2.186","pkg:cargo/linux-raw-sys@0.12.1","pkg:cargo/windows-sys@0.61.2"]},{"ref":"pkg:cargo/rustversion@1.0.22","dependsOn":[]},{"ref":"pkg:cargo/ryu@1.0.23","dependsOn":[]},{"ref":"pkg:cargo/scopeguard@1.2.0","dependsOn":[]},{"ref":"pkg:cargo/semver@1.0.28","dependsOn":[]},{"ref":"pkg:cargo/serde@1.0.228","dependsOn":["pkg:cargo/serde_core@1.0.228","pkg:cargo/serde_derive@1.0.228"]},{"ref":"pkg:cargo/serde_core@1.0.228","dependsOn":["pkg:cargo/serde_derive@1.0.228"]},{"ref":"pkg:cargo/serde_derive@1.0.228","dependsOn":["pkg:cargo/proc-macro2@1.0.106","pkg:cargo/quote@1.0.45","pkg:cargo/syn@2.0.117"]},{"ref":"pkg:cargo/serde_json@1.0.150","dependsOn":["pkg:cargo/itoa@1.0.18","pkg:cargo/memchr@2.8.2","pkg:cargo/serde@1.0.228","pkg:cargo/serde_core@1.0.228","pkg:cargo/zmij@1.0.21"]},{"ref":"pkg:cargo/signal-hook@0.3.18","dependsOn":["pkg:cargo/libc@0.2.186","pkg:cargo/signal-hook-registry@1.4.8"]},{"ref":"pkg:cargo/signal-hook-mio@0.2.5","dependsOn":["pkg:cargo/libc@0.2.186","pkg:cargo/mio@1.2.1","pkg:cargo/signal-hook@0.3.18"]},{"ref":"pkg:cargo/signal-hook-registry@1.4.8","dependsOn":["pkg:cargo/errno@0.3.14","pkg:cargo/libc@0.2.186"]},{"ref":"pkg:cargo/smallvec@1.15.2","dependsOn":[]},{"ref":"pkg:cargo/static_assertions@1.1.0","dependsOn":[]},{"ref":"pkg:cargo/strip-ansi-escapes@0.2.1","dependsOn":["pkg:cargo/vte@0.14.1"]},{"ref":"pkg:cargo/strsim@0.11.1","dependsOn":[]},{"ref":"pkg:cargo/strum@0.26.3","dependsOn":["pkg:cargo/strum_macros@0.26.4"]},{"ref":"pkg:cargo/strum_macros@0.26.4","dependsOn":["pkg:cargo/heck@0.5.0","pkg:cargo/proc-macro2@1.0.106","pkg:cargo/quote@1.0.45","pkg:cargo/rustversion@1.0.22","pkg:cargo/syn@2.0.117"]},{"ref":"pkg:cargo/syn@2.0.117","dependsOn":["pkg:cargo/proc-macro2@1.0.106","pkg:cargo/quote@1.0.45","pkg:cargo/unicode-ident@1.0.24"]},{"ref":"pkg:cargo/tempfile@3.27.0","dependsOn":["pkg:cargo/fastrand@2.4.1","pkg:cargo/getrandom@0.4.2","pkg:cargo/once_cell@1.21.4","pkg:cargo/rustix@1.1.4","pkg:cargo/windows-sys@0.61.2"]},{"ref":"pkg:cargo/thiserror@2.0.18","dependsOn":["pkg:cargo/thiserror-impl@2.0.18"]},{"ref":"pkg:cargo/thiserror-impl@2.0.18","dependsOn":["pkg:cargo/proc-macro2@1.0.106","pkg:cargo/quote@1.0.45","pkg:cargo/syn@2.0.117"]},{"ref":"pkg:cargo/unicode-ident@1.0.24","dependsOn":[]},{"ref":"pkg:cargo/unicode-segmentation@1.13.3","dependsOn":[]},{"ref":"pkg:cargo/unicode-truncate@1.1.0","dependsOn":["pkg:cargo/itertools@0.13.0","pkg:cargo/unicode-segmentation@1.13.3","pkg:cargo/unicode-width@0.1.14"]},{"ref":"pkg:cargo/unicode-width@0.2.0","dependsOn":[]},{"ref":"pkg:cargo/unicode-xid@0.2.6","dependsOn":[]},{"ref":"pkg:cargo/utf8parse@0.2.2","dependsOn":[]},{"ref":"pkg:cargo/vte@0.14.1","dependsOn":["pkg:cargo/memchr@2.8.2"]},{"ref":"pkg:cargo/wasm-encoder@0.244.0","dependsOn":["pkg:cargo/leb128fmt@0.1.0","pkg:cargo/wasmparser@0.244.0"]},{"ref":"pkg:cargo/wasm-metadata@0.244.0","dependsOn":["pkg:cargo/anyhow@1.0.102","pkg:cargo/indexmap@2.14.0","pkg:cargo/wasm-encoder@0.244.0","pkg:cargo/wasmparser@0.244.0"]},{"ref":"pkg:cargo/wasmparser@0.244.0","dependsOn":["pkg:cargo/bitflags@2.13.0","pkg:cargo/hashbrown@0.15.5","pkg:cargo/indexmap@2.14.0","pkg:cargo/semver@1.0.28"]},{"ref":"pkg:cargo/winapi@0.3.9","dependsOn":["pkg:cargo/winapi-i686-pc-windows-gnu@0.4.0","pkg:cargo/winapi-x86_64-pc-windows-gnu@0.4.0"]},{"ref":"pkg:cargo/winapi-i686-pc-windows-gnu@0.4.0","dependsOn":[]},{"ref":"pkg:cargo/winapi-x86_64-pc-windows-gnu@0.4.0","dependsOn":[]},{"ref":"pkg:cargo/windows-link@0.2.1","dependsOn":[]},{"ref":"pkg:cargo/windows-sys@0.61.2","dependsOn":["pkg:cargo/windows-link@0.2.1"]},{"ref":"pkg:cargo/windows-targets@0.52.6","dependsOn":["pkg:cargo/windows_aarch64_gnullvm@0.52.6","pkg:cargo/windows_aarch64_msvc@0.52.6","pkg:cargo/windows_i686_gnu@0.52.6","pkg:cargo/windows_i686_gnullvm@0.52.6","pkg:cargo/windows_i686_msvc@0.52.6","pkg:cargo/windows_x86_64_gnu@0.52.6","pkg:cargo/windows_x86_64_gnullvm@0.52.6","pkg:cargo/windows_x86_64_msvc@0.52.6"]},{"ref":"pkg:cargo/windows_aarch64_gnullvm@0.52.6","dependsOn":[]},{"ref":"pkg:cargo/windows_aarch64_msvc@0.52.6","dependsOn":[]},{"ref":"pkg:cargo/windows_i686_gnu@0.52.6","dependsOn":[]},{"ref":"pkg:cargo/windows_i686_gnullvm@0.52.6","dependsOn":[]},{"ref":"pkg:cargo/windows_i686_msvc@0.52.6","dependsOn":[]},{"ref":"pkg:cargo/windows_x86_64_gnu@0.52.6","dependsOn":[]},{"ref":"pkg:cargo/windows_x86_64_gnullvm@0.52.6","dependsOn":[]},{"ref":"pkg:cargo/windows_x86_64_msvc@0.52.6","dependsOn":[]},{"ref":"pkg:cargo/wit-bindgen@0.57.1","dependsOn":[]},{"ref":"pkg:cargo/wit-bindgen-core@0.51.0","dependsOn":["pkg:cargo/anyhow@1.0.102","pkg:cargo/heck@0.5.0","pkg:cargo/wit-parser@0.244.0"]},{"ref":"pkg:cargo/wit-bindgen-rust@0.51.0","dependsOn":["pkg:cargo/anyhow@1.0.102","pkg:cargo/heck@0.5.0","pkg:cargo/indexmap@2.14.0","pkg:cargo/prettyplease@0.2.37","pkg:cargo/syn@2.0.117","pkg:cargo/wasm-metadata@0.244.0","pkg:cargo/wit-bindgen-core@0.51.0","pkg:cargo/wit-component@0.244.0"]},{"ref":"pkg:cargo/wit-bindgen-rust-macro@0.51.0","dependsOn":["pkg:cargo/anyhow@1.0.102","pkg:cargo/prettyplease@0.2.37","pkg:cargo/proc-macro2@1.0.106","pkg:cargo/quote@1.0.45","pkg:cargo/syn@2.0.117","pkg:cargo/wit-bindgen-core@0.51.0","pkg:cargo/wit-bindgen-rust@0.51.0"]},{"ref":"pkg:cargo/wit-component@0.244.0","dependsOn":["pkg:cargo/anyhow@1.0.102","pkg:cargo/bitflags@2.13.0","pkg:cargo/indexmap@2.14.0","pkg:cargo/log@0.4.32","pkg:cargo/serde@1.0.228","pkg:cargo/serde_derive@1.0.228","pkg:cargo/serde_json@1.0.150","pkg:cargo/wasm-encoder@0.244.0","pkg:cargo/wasm-metadata@0.244.0","pkg:cargo/wasmparser@0.244.0","pkg:cargo/wit-parser@0.244.0"]},{"ref":"pkg:cargo/wit-parser@0.244.0","dependsOn":["pkg:cargo/anyhow@1.0.102","pkg:cargo/id-arena@2.3.0","pkg:cargo/indexmap@2.14.0","pkg:cargo/log@0.4.32","pkg:cargo/semver@1.0.28","pkg:cargo/serde@1.0.228","pkg:cargo/serde_derive@1.0.228","pkg:cargo/serde_json@1.0.150","pkg:cargo/unicode-xid@0.2.6","pkg:cargo/wasmparser@0.244.0"]},{"ref":"pkg:cargo/zmij@1.0.21","dependsOn":[]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:cargo/cdxui@2.5.1"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.5.1","purl":"pkg:npm/%40cyclonedx/cdxgen@12.5.1","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.5.1","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-06-13T22:01:30Z","text":"This Software Bill-of-Materials (SBOM) document was created on Saturday, June 13, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'cdxui' with version '2.5.1'."}]}

package/plugins/golem/golem-linux-riscv64.sha256

@@ -1 +1 @@
-c1cab98a1737f912826dae7fdb1590fb16208a2b11014ad394dab10af5899054  plugins/golem/golem-linux-riscv64
+29f01a43d4aba39f0249f4e21f18cb789d3212d524804a5cfc7f098b40960c5e  plugins/golem/golem-linux-riscv64

package/plugins/golem/sbom-golem-postbuild.cdx.json

@@ -1 +1 @@
-{"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:bbd1c44b-fe4f-41f5-9fae-ebd9456408d3","version":1,"metadata":{"timestamp":"2026-06-06T15:03:05Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.5.1","purl":"pkg:npm/%40cyclonedx/cdxgen@12.5.1","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.5.1","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"group":"","name":"github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","version":"","purl":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","bom-ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","scope":"required","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem"}],"type":"application","components":[{"group":"","name":"example.com/golem/simple","version":"","scope":"required","purl":"pkg:golang/example.com/golem/simple","type":"library","bom-ref":"pkg:golang/example.com/golem/simple","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple"}]},{"group":"","name":"example.com/golem/security","version":"","scope":"required","purl":"pkg:golang/example.com/golem/security","type":"library","bom-ref":"pkg:golang/example.com/golem/security","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security"}]},{"group":"","name":"example.com/golem/rta","version":"","scope":"required","purl":"pkg:golang/example.com/golem/rta","type":"library","bom-ref":"pkg:golang/example.com/golem/rta","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta"}]},{"group":"","name":"example.com/golem/dep","version":"","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"}}}],"purl":"pkg:golang/example.com/golem/dep","type":"library","bom-ref":"pkg:golang/example.com/golem/dep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"}]},{"group":"","name":"example.com/golem/dataflow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/dataflow","type":"library","bom-ref":"pkg:golang/example.com/golem/dataflow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow"}]},{"group":"","name":"example.com/golem/advanced","version":"","scope":"required","purl":"pkg:golang/example.com/golem/advanced","type":"library","bom-ref":"pkg:golang/example.com/golem/advanced","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced"}]},{"group":"","name":"github.com/spf13/cobra","version":"","scope":"required","purl":"pkg:golang/github.com/spf13/cobra","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]}]},"properties":[{"name":"cdx:bom:componentTypes","value":"golang"},{"name":"cdx:bom:componentNamespaces","value":"example.com/golem\\ngithub.com/spf13\\ngolang.org/x"},{"name":"cdx:bom:componentSrcFiles","value":"go.mod"}]},"components":[{"group":"","name":"golang.org/x/mod","version":"v0.30.0","scope":"required","hashes":[{"alg":"SHA-256","content":"940b1fe4ed84bc979214c881c570e48bbb02800c4451c6475e85cc293e0624a7"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"}}}],"purl":"pkg:golang/golang.org/x/mod@v0.30.0","type":"library","bom-ref":"pkg:golang/golang.org/x/mod@v0.30.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/mod/@v/v0.30.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2025-11-11 15:05:13 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/mod@v0.30.0"},{"name":"SrcFile","value":"go.mod"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/sync","version":"v0.18.0","scope":"optional","hashes":[{"alg":"SHA-256","content":"f4a4c75e64a7a06aee2e9c058d5497d2534d03be42ca488c1026e8bcd4d9a862"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"}}}],"purl":"pkg:golang/golang.org/x/sync@v0.18.0","type":"library","bom-ref":"pkg:golang/golang.org/x/sync@v0.18.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/sync/@v/v0.18.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"true"},{"name":"cdx:go:creation_time","value":"2025-10-21 17:44:11 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/sync@v0.18.0"},{"name":"SrcFile","value":"go.mod"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/tools","version":"v0.39.0","scope":"required","hashes":[{"alg":"SHA-256","content":"26779f6e40cfc83f14536908e5fb9ff195f8ff251e87d5bcefb65e04e37152a4"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"}}}],"purl":"pkg:golang/golang.org/x/tools@v0.39.0","type":"library","bom-ref":"pkg:golang/golang.org/x/tools@v0.39.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/tools/@v/v0.39.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2025-11-12 22:16:42 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/tools@v0.39.0"},{"name":"SrcFile","value":"go.mod"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"github.com/spf13/cobra","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/spf13/cobra@v0.0.0","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]},{"group":"","name":"example.com/golem/dep","version":"v0.0.0","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"}}}],"purl":"pkg:golang/example.com/golem/dep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/dep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"}]}],"dependencies":[{"ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","dependsOn":["pkg:golang/golang.org/x/mod@v0.30.0","pkg:golang/golang.org/x/tools@v0.39.0"]},{"ref":"pkg:golang/golang.org/x/mod@v0.30.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/sync@v0.18.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/tools@v0.39.0","dependsOn":["pkg:golang/golang.org/x/mod@v0.30.0","pkg:golang/golang.org/x/sync@v0.18.0"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.5.1","purl":"pkg:npm/%40cyclonedx/cdxgen@12.5.1","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.5.1","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-06-06T15:03:05Z","text":"This Software Bill-of-Materials (SBOM) document was created on Saturday, June 6, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem'. The application also has 7 child modules/components. The package type in this SBOM is golang with 3 purl namespaces described under components. The components were identified from the source files: go.mod."}]}
+{"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:b8a4a3f0-9960-44c9-89b6-b606657111b1","version":1,"metadata":{"timestamp":"2026-06-13T22:01:28Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.5.1","purl":"pkg:npm/%40cyclonedx/cdxgen@12.5.1","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.5.1","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"group":"","name":"github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","version":"","purl":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","bom-ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","scope":"required","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem"}],"type":"application","components":[{"group":"","name":"example.com/golem/simple","version":"","scope":"required","purl":"pkg:golang/example.com/golem/simple","type":"library","bom-ref":"pkg:golang/example.com/golem/simple","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple"}]},{"group":"","name":"example.com/golem/security","version":"","scope":"required","purl":"pkg:golang/example.com/golem/security","type":"library","bom-ref":"pkg:golang/example.com/golem/security","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security"}]},{"group":"","name":"example.com/golem/rta","version":"","scope":"required","purl":"pkg:golang/example.com/golem/rta","type":"library","bom-ref":"pkg:golang/example.com/golem/rta","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta"}]},{"group":"","name":"example.com/golem/dep","version":"","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"}}}],"purl":"pkg:golang/example.com/golem/dep","type":"library","bom-ref":"pkg:golang/example.com/golem/dep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"}]},{"group":"","name":"example.com/golem/dataflow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/dataflow","type":"library","bom-ref":"pkg:golang/example.com/golem/dataflow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow"}]},{"group":"","name":"example.com/golem/advanced","version":"","scope":"required","purl":"pkg:golang/example.com/golem/advanced","type":"library","bom-ref":"pkg:golang/example.com/golem/advanced","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced"}]},{"group":"","name":"github.com/spf13/cobra","version":"","scope":"required","purl":"pkg:golang/github.com/spf13/cobra","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]}]},"properties":[{"name":"cdx:bom:componentTypes","value":"golang"},{"name":"cdx:bom:componentNamespaces","value":"example.com/golem\\ngithub.com/spf13\\ngolang.org/x"},{"name":"cdx:bom:componentSrcFiles","value":"go.mod"}]},"components":[{"group":"","name":"golang.org/x/mod","version":"v0.30.0","scope":"required","hashes":[{"alg":"SHA-256","content":"940b1fe4ed84bc979214c881c570e48bbb02800c4451c6475e85cc293e0624a7"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"}}}],"purl":"pkg:golang/golang.org/x/mod@v0.30.0","type":"library","bom-ref":"pkg:golang/golang.org/x/mod@v0.30.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/mod/@v/v0.30.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2025-11-11 15:05:13 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/mod@v0.30.0"},{"name":"SrcFile","value":"go.mod"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/sync","version":"v0.18.0","scope":"optional","hashes":[{"alg":"SHA-256","content":"f4a4c75e64a7a06aee2e9c058d5497d2534d03be42ca488c1026e8bcd4d9a862"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"}}}],"purl":"pkg:golang/golang.org/x/sync@v0.18.0","type":"library","bom-ref":"pkg:golang/golang.org/x/sync@v0.18.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/sync/@v/v0.18.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"true"},{"name":"cdx:go:creation_time","value":"2025-10-21 17:44:11 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/sync@v0.18.0"},{"name":"SrcFile","value":"go.mod"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/tools","version":"v0.39.0","scope":"required","hashes":[{"alg":"SHA-256","content":"26779f6e40cfc83f14536908e5fb9ff195f8ff251e87d5bcefb65e04e37152a4"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"}}}],"purl":"pkg:golang/golang.org/x/tools@v0.39.0","type":"library","bom-ref":"pkg:golang/golang.org/x/tools@v0.39.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/tools/@v/v0.39.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2025-11-12 22:16:42 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/tools@v0.39.0"},{"name":"SrcFile","value":"go.mod"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"github.com/spf13/cobra","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/spf13/cobra@v0.0.0","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]},{"group":"","name":"example.com/golem/dep","version":"v0.0.0","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"}}}],"purl":"pkg:golang/example.com/golem/dep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/dep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"}]}],"dependencies":[{"ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","dependsOn":["pkg:golang/golang.org/x/mod@v0.30.0","pkg:golang/golang.org/x/tools@v0.39.0"]},{"ref":"pkg:golang/golang.org/x/mod@v0.30.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/sync@v0.18.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/tools@v0.39.0","dependsOn":["pkg:golang/golang.org/x/mod@v0.30.0","pkg:golang/golang.org/x/sync@v0.18.0"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.5.1","purl":"pkg:npm/%40cyclonedx/cdxgen@12.5.1","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.5.1","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-06-13T22:01:28Z","text":"This Software Bill-of-Materials (SBOM) document was created on Saturday, June 13, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem'. The application also has 7 child modules/components. The package type in this SBOM is golang with 3 purl namespaces described under components. The components were identified from the source files: go.mod."}]}

package/plugins/plugins-manifest.json

@@ -1,8 +1,8 @@
 {
-  "generatedAt": "2026-06-06T15:11:43.051Z",
+  "generatedAt": "2026-06-13T22:10:30.896Z",
   "package": {
     "name": "@cdxgen/cdxgen-plugins-bin",
-    "version": "2.4.0",
+    "version": "2.5.1",
     "repository": "git+https://github.com/cdxgen/cdxgen-plugins-bin.git",
     "homepage": "https://github.com/cdxgen/cdxgen-plugins-bin#readme"
   },
@@ -11,7 +11,7 @@
       "name": "trivy",
       "version": "v0.68.2",
       "binaryPath": "plugins/trivy/trivy-cdxgen-linux-riscv64",
-      "sha256": "94a925b26a54d7585cd9459efa18ed3de4765c8a8097e658fb4d1db294022c10",
+      "sha256": "e6b493c90a11c54f26bca936fe3b3a186999776115adb4308158f33ee381d8a5",
       "sbomFile": "plugins/trivy/sbom-trivy-postbuild.cdx.json",
       "component": {
         "type": "application",
@@ -64,24 +64,24 @@
         "hashes": [
           {
             "alg": "SHA-256",
-            "content": "94a925b26a54d7585cd9459efa18ed3de4765c8a8097e658fb4d1db294022c10"
+            "content": "e6b493c90a11c54f26bca936fe3b3a186999776115adb4308158f33ee381d8a5"
           }
         ]
       }
     },
     {
       "name": "trustinspector",
-      "version": "2.4.0",
+      "version": "2.5.1",
       "binaryPath": "plugins/trustinspector/trustinspector-cdxgen-linux-riscv64",
-      "sha256": "cf8fbaaba09354cd61933047004af1dd3028dcbeed7a6bdab48d3b6a2fdc8d6c",
+      "sha256": "e46028da0b63d8e413b0f0b2af14e2609fcda67b0342df73ec015a58e0eedc14",
       "sbomFile": "plugins/trustinspector/sbom-trustinspector-postbuild.cdx.json",
       "component": {
         "type": "application",
         "name": "trustinspector",
-        "version": "2.4.0",
+        "version": "2.5.1",
         "description": "cdxgen trust-material inspection helper for repository keys, certificate stores, macOS code-signing, notarization, and Windows trust policy inventory.",
-        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@2.4.0",
-        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@2.4.0",
+        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@2.5.1",
+        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@2.5.1",
         "licenses": [
           {
             "license": {
@@ -126,24 +126,24 @@
         "hashes": [
           {
             "alg": "SHA-256",
-            "content": "cf8fbaaba09354cd61933047004af1dd3028dcbeed7a6bdab48d3b6a2fdc8d6c"
+            "content": "e46028da0b63d8e413b0f0b2af14e2609fcda67b0342df73ec015a58e0eedc14"
           }
         ]
       }
     },
     {
       "name": "golem",
-      "version": "2.4.0",
+      "version": "2.5.1",
       "binaryPath": "plugins/golem/golem-linux-riscv64",
-      "sha256": "c1cab98a1737f912826dae7fdb1590fb16208a2b11014ad394dab10af5899054",
+      "sha256": "29f01a43d4aba39f0249f4e21f18cb789d3212d524804a5cfc7f098b40960c5e",
       "sbomFile": "plugins/golem/sbom-golem-postbuild.cdx.json",
       "component": {
         "type": "application",
         "name": "golem",
-        "version": "2.4.0",
+        "version": "2.5.1",
         "description": "Go Library Evidence Mapper (golem) extracts semantic Go source evidence and optional call graphs for cdxgen.",
-        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/golem@2.4.0",
-        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/golem@2.4.0",
+        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/golem@2.5.1",
+        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/golem@2.5.1",
         "licenses": [
           {
             "license": {
@@ -188,24 +188,24 @@
         "hashes": [
           {
             "alg": "SHA-256",
-            "content": "c1cab98a1737f912826dae7fdb1590fb16208a2b11014ad394dab10af5899054"
+            "content": "29f01a43d4aba39f0249f4e21f18cb789d3212d524804a5cfc7f098b40960c5e"
           }
         ]
       }
     },
     {
       "name": "rusi",
-      "version": "2.4.0",
+      "version": "2.5.1",
       "binaryPath": "plugins/rusi/rusi-linux-riscv64",
-      "sha256": "8f743a878f7745c4f92c70e3abb6128bdd5dd59f50c2f20151873e0a8a105bf9",
+      "sha256": "e5d1636597b8014630fd0c8529e30258a0e5b10820c151fdcb277c51c5c1e07e",
       "sbomFile": "plugins/rusi/sbom-rusi-postbuild.cdx.json",
       "component": {
         "type": "application",
         "name": "rusi",
-        "version": "2.4.0",
+        "version": "2.5.1",
         "description": "Rust Source Inspector (rusi) extracts semantic Rust source evidence, call graphs, and optional data-flow findings for cdxgen.",
-        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/rusi@2.4.0",
-        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/rusi@2.4.0",
+        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/rusi@2.5.1",
+        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/rusi@2.5.1",
         "licenses": [
           {
             "license": {
@@ -250,7 +250,7 @@
         "hashes": [
           {
             "alg": "SHA-256",
-            "content": "8f743a878f7745c4f92c70e3abb6128bdd5dd59f50c2f20151873e0a8a105bf9"
+            "content": "e5d1636597b8014630fd0c8529e30258a0e5b10820c151fdcb277c51c5c1e07e"
           }
         ]
       }

package/plugins/rusi/rusi-linux-riscv64.sha256

@@ -1 +1 @@
-8f743a878f7745c4f92c70e3abb6128bdd5dd59f50c2f20151873e0a8a105bf9  plugins/rusi/rusi-linux-riscv64
+e5d1636597b8014630fd0c8529e30258a0e5b10820c151fdcb277c51c5c1e07e  plugins/rusi/rusi-linux-riscv64