{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:b7bac29e-8953-4e16-a01b-bd47823d6d20","version":1,"metadata":{"timestamp":"2026-10-15T10:18:22+09:00","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.54.1"}]},"component":{"bom-ref":"f12971b2d317bed0","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/py-pinned"}},"components":[{"bom-ref":"pkg:pypi/flask@2.0.1?package-id=90389e86c072a122","type":"library","name":"flask","version":"2.0.1","cpe":"cpe:2.3:a:python-flask:python-flask:2.0.1:*:*:*:*:*:*:*","purl":"pkg:pypi/flask@2.0.1","properties":[{"name":"syft:package:foundBy","value":"python-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-pip-requirements-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-flask:python_flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_flask:python-flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_flask:python_flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python-flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python_flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flask:python-flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flask:python_flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-flask:flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_flask:flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flask:flask:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/requirements.txt"}]},{"bom-ref":"pkg:pypi/jinja2@3.0.1?package-id=b940f233da3c5db2","type":"library","name":"jinja2","version":"3.0.1","cpe":"cpe:2.3:a:python-jinja2:python-jinja2:3.0.1:*:*:*:*:*:*:*","purl":"pkg:pypi/jinja2@3.0.1","properties":[{"name":"syft:package:foundBy","value":"python-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-pip-requirements-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-jinja2:python_jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_jinja2:python-jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_jinja2:python_jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jinja2:python-jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jinja2:python_jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-jinja2:jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python-jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python_jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_jinja2:jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jinja2:jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:jinja2:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/requirements.txt"}]},{"bom-ref":"pkg:pypi/requests@2.25.1?package-id=e66750ddd96bef94","type":"library","name":"requests","version":"2.25.1","cpe":"cpe:2.3:a:python:requests:2.25.1:*:*:*:*:*:*:*","purl":"pkg:pypi/requests@2.25.1","properties":[{"name":"syft:package:foundBy","value":"python-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-pip-requirements-entry"},{"name":"syft:location:0:path","value":"/requirements.txt"}]},{"bom-ref":"pkg:pypi/urllib3@1.26.4?package-id=28e3ab818faf5e0d","type":"library","name":"urllib3","version":"1.26.4","cpe":"cpe:2.3:a:python:urllib3:1.26.4:*:*:*:*:*:*:*","purl":"pkg:pypi/urllib3@1.26.4","properties":[{"name":"syft:package:foundBy","value":"python-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-pip-requirements-entry"},{"name":"syft:location:0:path","value":"/requirements.txt"}]},{"bom-ref":"26ca2b7dc025d550","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/py-pinned/requirements.txt","hashes":[{"alg":"SHA-1","content":"384385bc643e100e349d167002e15c4e79215693"},{"alg":"SHA-256","content":"1c8f7fb07f68fcbd042631d656e7b7bc86109956d20745b8b234eea6dc93f851"}]}]}