@mobrowser/sdk-darwin-x64 2.16.0

package/sbom/chromium/mobrowser-2.16.0-chromium-151.0.7922.76-darwin-x64.spdx.json.sha256

@@ -0,0 +1 @@
+439c9516e1e2b1a70083df2fad46ec6b9b5b5cf6843b809a2cd8f79e59c02530  mobrowser-2.16.0-chromium-151.0.7922.76-darwin-x64.spdx.json

package/sbom/mobrowser-third-party/mobrowser-2.16.0-third-party-darwin-x64.spdx.json

@@ -0,0 +1,371 @@
+{
+    "SPDXID": "SPDXRef-DOCUMENT",
+    "creationInfo": {
+        "created": "2026-09-10T13:58:54Z",
+        "creators": [
+            "Tool: spdx.py-1.5"
+        ]
+    },
+    "dataLicense": "CC0-1.0",
+    "hasExtractedLicensingInfos": [
+        {
+            "extractedText": "LZMA SDK is placed in the public domain.\n\nAnyone is free to copy, modify, publish, use, compile, sell, or distribute the\noriginal LZMA SDK code, either in source code form or as a compiled binary,\nfor any purpose, commercial or non-commercial, and by any means.\n",
+            "licenseId": "LicenseRef-third-party-lzma-sdk-license",
+            "name": "LZMA SDK license"
+        }
+    ],
+    "name": "MoBrowser-third-party-darwin-x64",
+    "spdxVersion": "SPDX-2.3",
+    "documentNamespace": "urn:uuid:fb286548-3480-4d70-8b6b-6a1ca96bae54",
+    "packages": [
+        {
+            "SPDXID": "SPDXRef-Package-product",
+            "attributionTexts": [
+                "MoBrowser Source Path: .",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "comment": "Inventory root for dependencies not owned by the Chromium, Velopack, or npm producers.",
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "NOASSERTION",
+            "filesAnalyzed": false,
+            "homepage": "NOASSERTION",
+            "licenseConcluded": "NOASSERTION",
+            "licenseDeclared": "NOASSERTION",
+            "name": "MoBrowser",
+            "primaryPackagePurpose": "APPLICATION",
+            "sourceInfo": "MoBrowser source revision: df00b62a5ab17d94ad9ed66827c7a8da7eec17b5",
+            "supplier": "Organization: TeamDev",
+            "versionInfo": "2.16.0"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-tool-7zip",
+            "attributionTexts": [
+                "MoBrowser Source Path: bin/7zr-mac",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "checksums": [
+                {
+                    "algorithm": "SHA256",
+                    "checksumValue": "33be4345a69f195c9cca10a020b908315fa68ef59c45d56d620483ac06cd0ff6"
+                }
+            ],
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "https://www.7-zip.org/",
+            "filesAnalyzed": false,
+            "homepage": "https://www.7-zip.org/",
+            "licenseConcluded": "LicenseRef-third-party-lzma-sdk-license",
+            "licenseDeclared": "NOASSERTION",
+            "name": "7-Zip reduced command line tool",
+            "packageFileName": "bin/7zr-mac",
+            "primaryPackagePurpose": "APPLICATION",
+            "sourceInfo": "Bundled artifact SHA-256: 33be4345a69f195c9cca10a020b908315fa68ef59c45d56d620483ac06cd0ff6; Used by the CLI to extract the SDK runtime archive",
+            "supplier": "Organization: Igor Pavlov",
+            "versionInfo": "24.08"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-tool-create-dmg",
+            "attributionTexts": [
+                "MoBrowser Source Path: bin/dmg",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "checksums": [
+                {
+                    "algorithm": "SHA256",
+                    "checksumValue": "177c6ff54b272b8482787624383f22bd88511094bac0467cbf8c6f0263cad101"
+                }
+            ],
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "https://github.com/create-dmg/create-dmg",
+            "externalRefs": [
+                {
+                    "referenceCategory": "PACKAGE_MANAGER",
+                    "referenceLocator": "pkg:github/create-dmg/create-dmg@1.1.1",
+                    "referenceType": "purl"
+                }
+            ],
+            "filesAnalyzed": false,
+            "homepage": "https://github.com/create-dmg/create-dmg",
+            "licenseConcluded": "MIT",
+            "licenseDeclared": "MIT",
+            "name": "create-dmg",
+            "packageFileName": "bin/dmg",
+            "primaryPackagePurpose": "APPLICATION",
+            "sourceInfo": "Bundled artifact SHA-256: 177c6ff54b272b8482787624383f22bd88511094bac0467cbf8c6f0263cad101; Checksum covers the complete bundled create-dmg directory",
+            "supplier": "Organization: create-dmg contributors",
+            "versionInfo": "1.1.1"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-tool-ninja",
+            "attributionTexts": [
+                "MoBrowser Source Path: bin/ninja",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "checksums": [
+                {
+                    "algorithm": "SHA256",
+                    "checksumValue": "6367b48c1c7556e8821dffa9ffdb559c40d5cd6cce7aba59af56f11d18fa040f"
+                }
+            ],
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "https://github.com/ninja-build/ninja",
+            "externalRefs": [
+                {
+                    "referenceCategory": "PACKAGE_MANAGER",
+                    "referenceLocator": "pkg:github/ninja-build/ninja@1.12.1",
+                    "referenceType": "purl"
+                }
+            ],
+            "filesAnalyzed": false,
+            "homepage": "https://github.com/ninja-build/ninja",
+            "licenseConcluded": "Apache-2.0",
+            "licenseDeclared": "Apache-2.0",
+            "name": "Ninja",
+            "packageFileName": "bin/ninja",
+            "primaryPackagePurpose": "APPLICATION",
+            "sourceInfo": "Bundled artifact SHA-256: 6367b48c1c7556e8821dffa9ffdb559c40d5cd6cce7aba59af56f11d18fa040f",
+            "supplier": "Organization: Ninja contributors",
+            "versionInfo": "1.12.1"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-tool-protoc",
+            "attributionTexts": [
+                "MoBrowser Source Path: bin/protoc",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "checksums": [
+                {
+                    "algorithm": "SHA256",
+                    "checksumValue": "cd9ad46f7907a1ca3d77eb4bd9166d603e0efc8f0d6d2bdc086803ac8cf5ac98"
+                }
+            ],
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "https://github.com/protocolbuffers/protobuf",
+            "externalRefs": [
+                {
+                    "referenceCategory": "PACKAGE_MANAGER",
+                    "referenceLocator": "pkg:github/protocolbuffers/protobuf@33.2",
+                    "referenceType": "purl"
+                }
+            ],
+            "filesAnalyzed": false,
+            "homepage": "https://github.com/protocolbuffers/protobuf",
+            "licenseConcluded": "BSD-3-Clause",
+            "licenseDeclared": "BSD-3-Clause",
+            "name": "Protocol Buffers compiler",
+            "packageFileName": "bin/protoc",
+            "primaryPackagePurpose": "APPLICATION",
+            "sourceInfo": "Bundled artifact SHA-256: cd9ad46f7907a1ca3d77eb4bd9166d603e0efc8f0d6d2bdc086803ac8cf5ac98; Extracted from verified artifact darwin-x64-appleclang-17-libcxx (e980eb57af2ffee5815163ac9475026be76304af71fef627654b5f735c0e8d67); upstream revision 7ccf2060af4cd13c44a8659d0999be6c7a98fcc1",
+            "supplier": "Organization: Protocol Buffers authors",
+            "versionInfo": "33.2"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-native-protobuf-archive-darwin-x64-appleclang-17-libcxx",
+            "attributionTexts": [
+                "MoBrowser Source Path: downloads/protobuf/33.2/darwin/x64/darwin-x64-appleclang-17-libcxx.7z",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "checksums": [
+                {
+                    "algorithm": "SHA256",
+                    "checksumValue": "e980eb57af2ffee5815163ac9475026be76304af71fef627654b5f735c0e8d67"
+                }
+            ],
+            "comment": "Compatible prebuilt selected by the native module at configure time.",
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "https://storage.googleapis.com/mobrowser-runtime/downloads/protobuf/33.2/darwin/x64/darwin-x64-appleclang-17-libcxx.7z",
+            "filesAnalyzed": false,
+            "homepage": "https://storage.googleapis.com/mobrowser-runtime/downloads/protobuf/33.2/darwin/x64/darwin-x64-appleclang-17-libcxx.7z",
+            "licenseConcluded": "BSD-3-Clause AND Apache-2.0 AND MIT",
+            "licenseDeclared": "BSD-3-Clause AND Apache-2.0 AND MIT",
+            "name": "MoBrowser Protobuf prebuilt (darwin-x64-appleclang-17-libcxx)",
+            "packageFileName": "darwin-x64-appleclang-17-libcxx.7z",
+            "primaryPackagePurpose": "ARCHIVE",
+            "sourceInfo": "Verified prebuilt archive; upstream Protobuf revision: 7ccf2060af4cd13c44a8659d0999be6c7a98fcc1; size: 6137666 bytes",
+            "supplier": "Organization: TeamDev",
+            "versionInfo": "33.2"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-native",
+            "attributionTexts": [
+                "MoBrowser Source Path: npm/templates/@mobrowser/native",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "NOASSERTION",
+            "externalRefs": [
+                {
+                    "referenceCategory": "PACKAGE_MANAGER",
+                    "referenceLocator": "pkg:npm/%40mobrowser/native@2.16.0",
+                    "referenceType": "purl"
+                }
+            ],
+            "filesAnalyzed": false,
+            "homepage": "NOASSERTION",
+            "licenseConcluded": "NOASSERTION",
+            "licenseDeclared": "NOASSERTION",
+            "name": "@mobrowser/native",
+            "primaryPackagePurpose": "LIBRARY",
+            "sourceInfo": "MoBrowser source revision: df00b62a5ab17d94ad9ed66827c7a8da7eec17b5",
+            "supplier": "Organization: TeamDev",
+            "versionInfo": "2.16.0"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-native-protobuf",
+            "attributionTexts": [
+                "MoBrowser Source Path: npm/templates/@mobrowser/native/cmake/Protobuf.cmake",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "https://github.com/protocolbuffers/protobuf",
+            "externalRefs": [
+                {
+                    "referenceCategory": "PACKAGE_MANAGER",
+                    "referenceLocator": "pkg:github/protocolbuffers/protobuf@33.2",
+                    "referenceType": "purl"
+                }
+            ],
+            "filesAnalyzed": false,
+            "homepage": "https://github.com/protocolbuffers/protobuf",
+            "licenseConcluded": "BSD-3-Clause",
+            "licenseDeclared": "BSD-3-Clause",
+            "name": "Protocol Buffers",
+            "primaryPackagePurpose": "LIBRARY",
+            "sourceInfo": "Upstream revision: 7ccf2060af4cd13c44a8659d0999be6c7a98fcc1; license text verified against https://raw.githubusercontent.com/protocolbuffers/protobuf/7ccf2060af4cd13c44a8659d0999be6c7a98fcc1/LICENSE (6e5e117324afd944dcf67f36cf329843bc1a92229a8cd9bb573d7a83130fea7d)",
+            "supplier": "Organization: Protocol Buffers authors",
+            "versionInfo": "33.2"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-native-abseil",
+            "attributionTexts": [
+                "MoBrowser Source Path: npm/templates/@mobrowser/native/cmake/Protobuf.cmake",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "https://github.com/abseil/abseil-cpp",
+            "externalRefs": [
+                {
+                    "referenceCategory": "PACKAGE_MANAGER",
+                    "referenceLocator": "pkg:github/abseil/abseil-cpp@20250512.1",
+                    "referenceType": "purl"
+                }
+            ],
+            "filesAnalyzed": false,
+            "homepage": "https://github.com/abseil/abseil-cpp",
+            "licenseConcluded": "Apache-2.0",
+            "licenseDeclared": "Apache-2.0",
+            "name": "Abseil C++",
+            "primaryPackagePurpose": "LIBRARY",
+            "sourceInfo": "Dependency selected by Protobuf 33.2; license text verified against https://raw.githubusercontent.com/abseil/abseil-cpp/20250512.1/LICENSE (c79a7fea0e3cac04cd43f20e7b648e5a0ff8fa5344e644b0ee09ca1162b62747)",
+            "supplier": "Organization: The Abseil Authors",
+            "versionInfo": "20250512.1"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-native-utf8-range",
+            "attributionTexts": [
+                "MoBrowser Source Path: npm/templates/@mobrowser/native/cmake/Protobuf.cmake",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "https://github.com/protocolbuffers/protobuf/tree/v33.2/third_party/utf8_range",
+            "externalRefs": [
+                {
+                    "referenceCategory": "PACKAGE_MANAGER",
+                    "referenceLocator": "pkg:github/protocolbuffers/protobuf@14de70410dc4d9a34c95f01ae92a721254614b6a",
+                    "referenceType": "purl"
+                }
+            ],
+            "filesAnalyzed": false,
+            "homepage": "https://github.com/protocolbuffers/protobuf/tree/v33.2/third_party/utf8_range",
+            "licenseConcluded": "MIT",
+            "licenseDeclared": "MIT",
+            "name": "utf8_range",
+            "primaryPackagePurpose": "LIBRARY",
+            "sourceInfo": "Git tree selected by Protobuf 33.2; license text verified against https://raw.githubusercontent.com/protocolbuffers/protobuf/7ccf2060af4cd13c44a8659d0999be6c7a98fcc1/third_party/utf8_range/LICENSE (02de69b64fc36d9e938f418e52723e42f0b2b226d58a9cb3c8dcbdf7059f5074)",
+            "supplier": "Organization: Protocol Buffers authors",
+            "versionInfo": "14de70410dc4d9a34c95f01ae92a721254614b6a"
+        },
+        {
+            "SPDXID": "SPDXRef-Package-node",
+            "attributionTexts": [
+                "MoBrowser Source Path: third_party/mobrowser_node",
+                "MoBrowser Target: darwin-x64"
+            ],
+            "comment": "Node.js is statically integrated into the MoBrowser runtime.",
+            "copyrightText": "NOASSERTION",
+            "downloadLocation": "https://github.com/nodejs/node",
+            "externalRefs": [
+                {
+                    "referenceCategory": "PACKAGE_MANAGER",
+                    "referenceLocator": "pkg:github/nodejs/node@v24.18.0",
+                    "referenceType": "purl"
+                }
+            ],
+            "filesAnalyzed": false,
+            "homepage": "https://github.com/nodejs/node",
+            "licenseConcluded": "MIT",
+            "licenseDeclared": "MIT",
+            "name": "Node.js",
+            "primaryPackagePurpose": "FRAMEWORK",
+            "sourceInfo": "Upstream release revision: 20da4aeadabc5b0a01e3fcf520f91df8285c68a2; MoBrowser revision: df00b62a5ab17d94ad9ed66827c7a8da7eec17b5; MoBrowser Node patch set SHA-256: 50bcc16ce2d83916db6dda2afc4efa7358cb18ba654d7011f39e79d41dc4423b",
+            "supplier": "Organization: Node.js contributors",
+            "versionInfo": "24.18.0"
+        }
+    ],
+    "relationships": [
+        {
+            "spdxElementId": "SPDXRef-DOCUMENT",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "DESCRIBES"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-tool-7zip",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "BUILD_TOOL_OF"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-tool-create-dmg",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "BUILD_TOOL_OF"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-tool-ninja",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "BUILD_TOOL_OF"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-tool-protoc",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "BUILD_TOOL_OF"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-native-protobuf-archive-darwin-x64-appleclang-17-libcxx",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "BUILD_DEPENDENCY_OF"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-native",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "BUILD_DEPENDENCY_OF"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-native-protobuf",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "RUNTIME_DEPENDENCY_OF"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-native-abseil",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "RUNTIME_DEPENDENCY_OF"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-native-utf8-range",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "RUNTIME_DEPENDENCY_OF"
+        },
+        {
+            "spdxElementId": "SPDXRef-Package-node",
+            "relatedSpdxElement": "SPDXRef-Package-product",
+            "relationshipType": "RUNTIME_DEPENDENCY_OF"
+        }
+    ]
+}

package/sbom/mobrowser-third-party/mobrowser-2.16.0-third-party-darwin-x64.spdx.json.sha256

@@ -0,0 +1 @@
+afc65cde3aea72d0a3eca5f516cbc5b6b69e7c8d5566489b231fb522fc8d6fd4  mobrowser-2.16.0-third-party-darwin-x64.spdx.json

package/sbom/mobrowser-third-party/mobrowser-third-party-spdx-manifest.json

@@ -0,0 +1,14 @@
+{
+  "formatVersion": 1,
+  "artifacts": [
+    {
+      "kind": "mobrowser-third-party",
+      "target": "darwin-x64",
+      "productVersion": "2.16.0",
+      "sourceRevision": "df00b62a5ab17d94ad9ed66827c7a8da7eec17b5",
+      "spdx": "mobrowser-2.16.0-third-party-darwin-x64.spdx.json",
+      "sha256": "afc65cde3aea72d0a3eca5f516cbc5b6b69e7c8d5566489b231fb522fc8d6fd4",
+      "checksum": "mobrowser-2.16.0-third-party-darwin-x64.spdx.json.sha256"
+    }
+  ]
+}

package/sbom/velopack/velopack-1.0.8-darwin-x64.spdx-manifest.json

@@ -0,0 +1,29 @@
+{
+  "formatVersion": 1,
+  "artifacts": [
+    {
+      "kind": "velopack",
+      "target": "darwin-x64",
+      "productVersion": "1.0.8",
+      "sourceRevision": "3e959ef7b7d93995d164eaa6d596e8dcdec841b1",
+      "upstreamVersion": "0.0.1298",
+      "upstreamRevision": "ed8600eee530a38d2669444b03eb240e56bc5aa3",
+      "producerInputs": {
+        "buildTools": "9a68761ad761be056348c23d2e4ec64178a2916a6dccb8fd9387bf60687aead2",
+        "cargoLock": "46fde6f337a15d3e221ba1c9bf64a030bc96a9f59f7b2cf7eb4ffefce9d22850",
+        "cargoMetadata": "cff44fc2a8bfd07c74083875316c84a957fc46cacf6c2c96236b849784aff365",
+        "cargoMetadataCross": "4a91cc23e48ce878290dd4210703b8db1b75bb881354a23a1257d8f3bc4eb603",
+        "components": "fa29c9e7cea64f0f16bf56f756a2a477b527bf5d288e9845d1420b168e3e1811",
+        "dotnetAssets": "cc9103d587a6f74fc717c3de469daa755d23ea0dd2b0f51200ecd9e8703d77c7",
+        "provenance": "4bba39dba5eacac93a4869bcc9eb23512acbdf3b605d69798bd87e0e1aaf2a91"
+      },
+      "releaseManifest": "velopack-1.0.8-darwin-x64.release-manifest.json",
+      "releaseManifestSha256": "be172aa3e910a54be1d25290258b49ab61db20694a83612a2af8beaabd8ee000",
+      "spdx": "velopack-1.0.8-darwin-x64.spdx.json",
+      "sha256": "075d8eab1d883a05215768219ffb6216c3eeef3e74351a579a9bcf6fce17a544",
+      "checksum": "velopack-1.0.8-darwin-x64.spdx.json.sha256",
+      "payload": "signed release files excluding sbom/",
+      "payloadFileCount": 7
+    }
+  ]
+}