{"bom":{"annotations":[{"annotator":{"component":{"authors":[{"name":"OWASP Foundation"}],"bom-ref":"pkg:npm/@cdxgen/cdxgen@13.3.0","group":"@cdxgen","name":"cdxgen","publisher":"OWASP Foundation","purl":"pkg:npm/%40cdxgen/cdxgen@13.3.0","type":"application","version":"13.3.0"}},"bom-ref":"metadata-annotations","subjects":["pkg:cargo/scab-rust-cargo@0.1.0"],"text":"This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 14, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'scab-rust-cargo' with version '0.1.0'.","timestamp":"2026-10-14T23:02:44Z"}],"bomFormat":"CycloneDX","components":[{"bom-ref":"pkg:cargo/proc-macro2@1.0.107","description":"A substitute implementation of the compiler's `proc_macro` API to decouple token-based libraries from the procedural macro use case.","evidence":{"identity":[{"concludedValue":"Cargo.lock","confidence":0.6,"field":"purl","methods":[{"confidence":0.6,"technique":"manifest-analysis","value":"Cargo.lock"}]}]},"externalReferences":[{"type":"distribution","url":"https://crates.io/api/v1/crates/proc-macro2/1.0.107/download"},{"type":"vcs","url":"https://github.com/dtolnay/proc-macro2"}],"group":"","hashes":[{"alg":"SHA-256","content":"985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"}],"licenses":[{"expression":"MIT OR Apache-2.0"}],"name":"proc-macro2","properties":[{"name":"cdx:cargo:artifactDigestSha256","value":"985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"},{"name":"cdx:cargo:crateSize","value":"59588"},{"name":"cdx:cargo:crate_id","value":"2817480"},{"name":"cdx:cargo:dependencyKind","value":"runtime"},{"name":"cdx:cargo:edition","value":"2021"},{"name":"cdx:cargo:features","value":"{\"default\":[\"proc-macro\"],\"nightly\":[],\"proc-macro\":[],\"span-locations\":[]}"},{"name":"cdx:cargo:hasLib","value":"true"},{"name":"cdx:cargo:latest_version","value":"1.0.107"},{"name":"cdx:cargo:ownerSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:ownerSetCount","value":"2"},{"name":"cdx:cargo:packageCreatedTime","value":"2017-07-06T01:01:58.064887Z"},{"name":"cdx:cargo:priorPublishTime","value":"2026-01-21T22:08:20.164561Z"},{"name":"cdx:cargo:priorPublisher","value":"dtolnay, David Tolnay"},{"name":"cdx:cargo:priorVersion","value":"1.0.106"},{"name":"cdx:cargo:publishTime","value":"2026-07-19T00:18:25.189787Z"},{"name":"cdx:cargo:publisher","value":"dtolnay"},{"name":"cdx:cargo:publisherOverlapCount","value":"2"},{"name":"cdx:cargo:publisherOverlapRatio","value":"1.00"},{"name":"cdx:cargo:publisherSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:publisherSetCount","value":"2"},{"name":"cdx:cargo:releaseCadenceCompressionRatio","value":"21.75"},{"name":"cdx:cargo:releaseGapBaselineDays","value":"8.19"},{"name":"cdx:cargo:releaseGapDays","value":"178.09"},{"name":"cdx:cargo:releaseGapSampleSize","value":"161"},{"name":"cdx:cargo:rust_version","value":"1.71"},{"name":"cdx:cargo:scope","value":"runtime"},{"name":"cdx:cargo:versionCount","value":"163"},{"name":"internal:SrcFile","value":"Cargo.lock"},{"name":"bomlens:licenseClass","value":"uncategorized"}],"purl":"pkg:cargo/proc-macro2@1.0.107","tags":["api"],"type":"library","version":"1.0.107"},{"bom-ref":"pkg:cargo/quote@1.0.47","description":"Quasi-quoting macro quote!(...)","evidence":{"identity":[{"concludedValue":"Cargo.lock","confidence":0.6,"field":"purl","methods":[{"confidence":0.6,"technique":"manifest-analysis","value":"Cargo.lock"}]}]},"externalReferences":[{"type":"distribution","url":"https://crates.io/api/v1/crates/quote/1.0.47/download"},{"type":"vcs","url":"https://github.com/dtolnay/quote"}],"group":"","hashes":[{"alg":"SHA-256","content":"1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"}],"licenses":[{"expression":"MIT OR Apache-2.0"}],"name":"quote","properties":[{"name":"cdx:cargo:artifactDigestSha256","value":"1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"},{"name":"cdx:cargo:crateSize","value":"31622"},{"name":"cdx:cargo:crate_id","value":"2817476"},{"name":"cdx:cargo:dependencyKind","value":"runtime"},{"name":"cdx:cargo:edition","value":"2021"},{"name":"cdx:cargo:features","value":"{\"default\":[\"proc-macro\"],\"proc-macro\":[\"proc-macro2/proc-macro\"]}"},{"name":"cdx:cargo:hasLib","value":"true"},{"name":"cdx:cargo:latest_version","value":"1.0.47"},{"name":"cdx:cargo:ownerSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:ownerSetCount","value":"2"},{"name":"cdx:cargo:packageCreatedTime","value":"2016-09-03T05:42:05.484129Z"},{"name":"cdx:cargo:priorPublishTime","value":"2026-06-22T04:57:07.247700Z"},{"name":"cdx:cargo:priorPublisher","value":"dtolnay, David Tolnay"},{"name":"cdx:cargo:priorVersion","value":"1.0.46"},{"name":"cdx:cargo:publishTime","value":"2026-07-19T00:16:57.083778Z"},{"name":"cdx:cargo:publisher","value":"dtolnay"},{"name":"cdx:cargo:publisherOverlapCount","value":"2"},{"name":"cdx:cargo:publisherOverlapRatio","value":"1.00"},{"name":"cdx:cargo:publisherSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:publisherSetCount","value":"2"},{"name":"cdx:cargo:releaseCadenceCompressionRatio","value":"2.46"},{"name":"cdx:cargo:releaseGapBaselineDays","value":"10.88"},{"name":"cdx:cargo:releaseGapDays","value":"26.81"},{"name":"cdx:cargo:releaseGapSampleSize","value":"93"},{"name":"cdx:cargo:rust_version","value":"1.71"},{"name":"cdx:cargo:scope","value":"runtime"},{"name":"cdx:cargo:versionCount","value":"95"},{"name":"internal:SrcFile","value":"Cargo.lock"},{"name":"bomlens:licenseClass","value":"uncategorized"}],"purl":"pkg:cargo/quote@1.0.47","type":"library","version":"1.0.47"},{"bom-ref":"pkg:cargo/scab-rust-cargo@0.1.0","evidence":{"identity":[{"concludedValue":"Cargo.lock","confidence":0.6,"field":"purl","methods":[{"confidence":0.6,"technique":"manifest-analysis","value":"Cargo.lock"}]}]},"group":"","name":"scab-rust-cargo","properties":[{"name":"cdx:cargo:sourceKind","value":"local"},{"name":"internal:SrcFile","value":"Cargo.lock"},{"name":"bomlens:licenseClass","value":"uncategorized"}],"purl":"pkg:cargo/scab-rust-cargo@0.1.0","type":"library","version":"0.1.0"},{"bom-ref":"pkg:cargo/serde@1.0.229","description":"A generic serialization/deserialization framework","evidence":{"identity":[{"concludedValue":"Cargo.lock","confidence":0.6,"field":"purl","methods":[{"confidence":0.6,"technique":"manifest-analysis","value":"Cargo.lock"}]}]},"externalReferences":[{"type":"distribution","url":"https://crates.io/api/v1/crates/serde/1.0.229/download"},{"type":"vcs","url":"https://github.com/serde-rs/serde"},{"type":"website","url":"https://serde.rs"}],"group":"","hashes":[{"alg":"SHA-256","content":"4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"}],"licenses":[{"expression":"MIT OR Apache-2.0"}],"name":"serde","properties":[{"name":"cdx:cargo:artifactDigestSha256","value":"4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"},{"name":"cdx:cargo:crateSize","value":"83669"},{"name":"cdx:cargo:crate_id","value":"2817185"},{"name":"cdx:cargo:dependencyKind","value":"runtime"},{"name":"cdx:cargo:edition","value":"2021"},{"name":"cdx:cargo:features","value":"{\"alloc\":[\"serde_core/alloc\"],\"default\":[\"std\"],\"derive\":[\"serde_derive\"],\"rc\":[\"serde_core/rc\"],\"std\":[\"serde_core/std\"],\"unstable\":[\"serde_core/unstable\"]}"},{"name":"cdx:cargo:hasLib","value":"true"},{"name":"cdx:cargo:latest_version","value":"1.0.229"},{"name":"cdx:cargo:ownerSet","value":"dtolnay, david tolnay, github:serde-rs:publish, publish"},{"name":"cdx:cargo:ownerSetCount","value":"4"},{"name":"cdx:cargo:packageCreatedTime","value":"2014-12-05T20:20:39.631482Z"},{"name":"cdx:cargo:priorPublishTime","value":"2025-09-27T16:51:35.265429Z"},{"name":"cdx:cargo:priorPublisher","value":"dtolnay, David Tolnay"},{"name":"cdx:cargo:priorVersion","value":"1.0.228"},{"name":"cdx:cargo:publishTime","value":"2026-07-18T23:05:13.266456Z"},{"name":"cdx:cargo:publisher","value":"dtolnay"},{"name":"cdx:cargo:publisherOverlapCount","value":"2"},{"name":"cdx:cargo:publisherOverlapRatio","value":"1.00"},{"name":"cdx:cargo:publisherSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:publisherSetCount","value":"2"},{"name":"cdx:cargo:releaseCadenceCompressionRatio","value":"58.31"},{"name":"cdx:cargo:releaseGapBaselineDays","value":"5.05"},{"name":"cdx:cargo:releaseGapDays","value":"294.26"},{"name":"cdx:cargo:releaseGapSampleSize","value":"314"},{"name":"cdx:cargo:rust_version","value":"1.56"},{"name":"cdx:cargo:scope","value":"runtime"},{"name":"cdx:cargo:versionCount","value":"316"},{"name":"internal:SrcFile","value":"Cargo.lock"},{"name":"bomlens:licenseClass","value":"uncategorized"}],"purl":"pkg:cargo/serde@1.0.229","tags":["framework"],"type":"framework","version":"1.0.229"},{"bom-ref":"pkg:cargo/serde_core@1.0.229","description":"Serde traits only, with no support for derive -- use the `serde` crate instead","evidence":{"identity":[{"concludedValue":"Cargo.lock","confidence":0.6,"field":"purl","methods":[{"confidence":0.6,"technique":"manifest-analysis","value":"Cargo.lock"}]}]},"externalReferences":[{"type":"distribution","url":"https://crates.io/api/v1/crates/serde_core/1.0.229/download"},{"type":"vcs","url":"https://github.com/serde-rs/serde"},{"type":"website","url":"https://serde.rs"}],"group":"","hashes":[{"alg":"SHA-256","content":"67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"}],"licenses":[{"expression":"MIT OR Apache-2.0"}],"name":"serde_core","properties":[{"name":"cdx:cargo:artifactDigestSha256","value":"67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"},{"name":"cdx:cargo:crateSize","value":"63100"},{"name":"cdx:cargo:crate_id","value":"2817184"},{"name":"cdx:cargo:dependencyKind","value":"runtime"},{"name":"cdx:cargo:edition","value":"2021"},{"name":"cdx:cargo:features","value":"{\"alloc\":[],\"default\":[\"std\",\"result\"],\"rc\":[],\"result\":[],\"std\":[],\"unstable\":[]}"},{"name":"cdx:cargo:hasLib","value":"true"},{"name":"cdx:cargo:latest_version","value":"1.0.229"},{"name":"cdx:cargo:ownerSet","value":"dtolnay, david tolnay, github:serde-rs:publish, publish"},{"name":"cdx:cargo:ownerSetCount","value":"4"},{"name":"cdx:cargo:packageCreatedTime","value":"2025-09-13T21:46:48.014185Z"},{"name":"cdx:cargo:priorPublishTime","value":"2025-09-27T16:51:25.163769Z"},{"name":"cdx:cargo:priorPublisher","value":"dtolnay, David Tolnay"},{"name":"cdx:cargo:priorVersion","value":"1.0.228"},{"name":"cdx:cargo:publishTime","value":"2026-07-18T23:05:10.896830Z"},{"name":"cdx:cargo:publisher","value":"dtolnay"},{"name":"cdx:cargo:publisherOverlapCount","value":"2"},{"name":"cdx:cargo:publisherOverlapRatio","value":"1.00"},{"name":"cdx:cargo:publisherSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:publisherSetCount","value":"2"},{"name":"cdx:cargo:releaseCadenceCompressionRatio","value":"379.90"},{"name":"cdx:cargo:releaseGapBaselineDays","value":"0.77"},{"name":"cdx:cargo:releaseGapDays","value":"294.26"},{"name":"cdx:cargo:releaseGapSampleSize","value":"8"},{"name":"cdx:cargo:rust_version","value":"1.56"},{"name":"cdx:cargo:scope","value":"runtime"},{"name":"cdx:cargo:versionCount","value":"10"},{"name":"internal:SrcFile","value":"Cargo.lock"},{"name":"bomlens:licenseClass","value":"uncategorized"}],"purl":"pkg:cargo/serde_core@1.0.229","type":"library","version":"1.0.229"},{"bom-ref":"pkg:cargo/serde_derive@1.0.229","description":"Macros 1.1 implementation of #[derive(Serialize, Deserialize)]","evidence":{"identity":[{"concludedValue":"Cargo.lock","confidence":0.6,"field":"purl","methods":[{"confidence":0.6,"technique":"manifest-analysis","value":"Cargo.lock"}]}]},"externalReferences":[{"type":"distribution","url":"https://crates.io/api/v1/crates/serde_derive/1.0.229/download"},{"type":"vcs","url":"https://github.com/serde-rs/serde"},{"type":"website","url":"https://serde.rs"}],"group":"","hashes":[{"alg":"SHA-256","content":"e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"}],"licenses":[{"expression":"MIT OR Apache-2.0"}],"name":"serde_derive","properties":[{"name":"cdx:cargo:artifactDigestSha256","value":"e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"},{"name":"cdx:cargo:crateSize","value":"59864"},{"name":"cdx:cargo:crate_id","value":"2817183"},{"name":"cdx:cargo:dependencyKind","value":"runtime"},{"name":"cdx:cargo:edition","value":"2021"},{"name":"cdx:cargo:features","value":"{\"default\":[],\"deserialize_in_place\":[]}"},{"name":"cdx:cargo:hasLib","value":"true"},{"name":"cdx:cargo:latest_version","value":"1.0.229"},{"name":"cdx:cargo:ownerSet","value":"dtolnay, david tolnay, github:serde-rs:publish, publish"},{"name":"cdx:cargo:ownerSetCount","value":"4"},{"name":"cdx:cargo:packageCreatedTime","value":"2016-08-29T05:22:31.552019Z"},{"name":"cdx:cargo:priorPublishTime","value":"2025-09-27T16:51:16.528484Z"},{"name":"cdx:cargo:priorPublisher","value":"dtolnay, David Tolnay"},{"name":"cdx:cargo:priorVersion","value":"1.0.228"},{"name":"cdx:cargo:publishTime","value":"2026-07-18T23:05:07.504375Z"},{"name":"cdx:cargo:publisher","value":"dtolnay"},{"name":"cdx:cargo:publisherOverlapCount","value":"2"},{"name":"cdx:cargo:publisherOverlapRatio","value":"1.00"},{"name":"cdx:cargo:publisherSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:publisherSetCount","value":"2"},{"name":"cdx:cargo:releaseCadenceCompressionRatio","value":"63.99"},{"name":"cdx:cargo:releaseGapBaselineDays","value":"4.60"},{"name":"cdx:cargo:releaseGapDays","value":"294.26"},{"name":"cdx:cargo:releaseGapSampleSize","value":"269"},{"name":"cdx:cargo:rust_version","value":"1.71"},{"name":"cdx:cargo:scope","value":"runtime"},{"name":"cdx:cargo:versionCount","value":"271"},{"name":"internal:SrcFile","value":"Cargo.lock"},{"name":"bomlens:licenseClass","value":"uncategorized"}],"purl":"pkg:cargo/serde_derive@1.0.229","type":"library","version":"1.0.229"},{"bom-ref":"pkg:cargo/syn@3.0.9","description":"Parser for Rust source code","evidence":{"identity":[{"concludedValue":"Cargo.lock","confidence":0.6,"field":"purl","methods":[{"confidence":0.6,"technique":"manifest-analysis","value":"Cargo.lock"}]}]},"externalReferences":[{"type":"distribution","url":"https://crates.io/api/v1/crates/syn/3.0.9/download"},{"type":"vcs","url":"https://github.com/dtolnay/syn"}],"group":"","hashes":[{"alg":"SHA-256","content":"d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b"}],"licenses":[{"expression":"MIT OR Apache-2.0"}],"name":"syn","properties":[{"name":"cdx:cargo:artifactDigestSha256","value":"d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b"},{"name":"cdx:cargo:crateSize","value":"313970"},{"name":"cdx:cargo:crate_id","value":"3475391"},{"name":"cdx:cargo:dependencyKind","value":"runtime"},{"name":"cdx:cargo:edition","value":"2021"},{"name":"cdx:cargo:features","value":"{\"clone-impls\":[],\"default\":[\"derive\",\"parsing\",\"printing\",\"clone-impls\",\"proc-macro\"],\"derive\":[],\"extra-traits\":[],\"fold\":[],\"full\":[],\"parsing\":[],\"printing\":[\"dep:quote\"],\"proc-macro\":[\"proc-macro2/proc-macro\",\"quote?/proc-macro\"],\"test\":[\"syn-test-suite/all-features\"],\"visit\":[],\"visit-mut\":[]}"},{"name":"cdx:cargo:hasLib","value":"true"},{"name":"cdx:cargo:latest_version","value":"3.0.9"},{"name":"cdx:cargo:ownerSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:ownerSetCount","value":"2"},{"name":"cdx:cargo:packageCreatedTime","value":"2016-09-07T15:22:40.491981Z"},{"name":"cdx:cargo:priorPublishTime","value":"2026-10-11T16:12:28.901395Z"},{"name":"cdx:cargo:priorPublisher","value":"dtolnay, David Tolnay"},{"name":"cdx:cargo:priorVersion","value":"3.0.8"},{"name":"cdx:cargo:publishTime","value":"2026-10-12T15:04:09.212573Z"},{"name":"cdx:cargo:publisher","value":"dtolnay"},{"name":"cdx:cargo:publisherOverlapCount","value":"2"},{"name":"cdx:cargo:publisherOverlapRatio","value":"1.00"},{"name":"cdx:cargo:publisherSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:publisherSetCount","value":"2"},{"name":"cdx:cargo:releaseCadenceCompressionRatio","value":"0.23"},{"name":"cdx:cargo:releaseGapBaselineDays","value":"4.23"},{"name":"cdx:cargo:releaseGapDays","value":"0.95"},{"name":"cdx:cargo:releaseGapSampleSize","value":"360"},{"name":"cdx:cargo:rust_version","value":"1.71"},{"name":"cdx:cargo:scope","value":"runtime"},{"name":"cdx:cargo:versionCount","value":"362"},{"name":"internal:SrcFile","value":"Cargo.lock"},{"name":"bomlens:licenseClass","value":"uncategorized"}],"purl":"pkg:cargo/syn@3.0.9","type":"library","version":"3.0.9"},{"bom-ref":"pkg:cargo/unicode-ident@1.0.27","copyright":"Copyright © 1991-2023 Unicode, Inc.","description":"Determine whether characters have the XID_Start or XID_Continue properties according to Unicode Standard Annex #31","evidence":{"identity":[{"concludedValue":"Cargo.lock","confidence":0.6,"field":"purl","methods":[{"confidence":0.6,"technique":"manifest-analysis","value":"Cargo.lock"}]}]},"externalReferences":[{"type":"distribution","url":"https://crates.io/api/v1/crates/unicode-ident/1.0.27/download"},{"type":"vcs","url":"https://github.com/dtolnay/unicode-ident"}],"group":"","hashes":[{"alg":"SHA-256","content":"a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563"}],"licenses":[{"expression":"(MIT OR Apache-2.0) AND Unicode-3.0"}],"name":"unicode-ident","properties":[{"name":"cdx:cargo:artifactDigestSha256","value":"a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563"},{"name":"cdx:cargo:crateSize","value":"48807"},{"name":"cdx:cargo:crate_id","value":"3471534"},{"name":"cdx:cargo:dependencyKind","value":"runtime"},{"name":"cdx:cargo:edition","value":"2021"},{"name":"cdx:cargo:hasLib","value":"true"},{"name":"cdx:cargo:latest_version","value":"1.0.27"},{"name":"cdx:cargo:ownerSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:ownerSetCount","value":"2"},{"name":"cdx:cargo:packageCreatedTime","value":"2021-10-02T05:15:24.656394Z"},{"name":"cdx:cargo:priorPublishTime","value":"2026-09-17T06:18:03.751388Z"},{"name":"cdx:cargo:priorPublisher","value":"dtolnay, David Tolnay"},{"name":"cdx:cargo:priorVersion","value":"1.0.26"},{"name":"cdx:cargo:publishTime","value":"2026-10-12T04:20:27.796258Z"},{"name":"cdx:cargo:publisher","value":"dtolnay"},{"name":"cdx:cargo:publisherOverlapCount","value":"2"},{"name":"cdx:cargo:publisherOverlapRatio","value":"1.00"},{"name":"cdx:cargo:publisherSet","value":"dtolnay, david tolnay"},{"name":"cdx:cargo:publisherSetCount","value":"2"},{"name":"cdx:cargo:releaseCadenceCompressionRatio","value":"0.62"},{"name":"cdx:cargo:releaseGapBaselineDays","value":"40.13"},{"name":"cdx:cargo:releaseGapDays","value":"24.92"},{"name":"cdx:cargo:releaseGapSampleSize","value":"27"},{"name":"cdx:cargo:rust_version","value":"1.71"},{"name":"cdx:cargo:scope","value":"runtime"},{"name":"cdx:cargo:versionCount","value":"29"},{"name":"internal:SrcFile","value":"Cargo.lock"},{"name":"bomlens:copyrightSource","value":"installed license file"},{"name":"bomlens:licenseClass","value":"uncategorized"}],"purl":"pkg:cargo/unicode-ident@1.0.27","type":"library","version":"1.0.27"}],"dependencies":[{"dependsOn":["pkg:cargo/unicode-ident@1.0.27"],"ref":"pkg:cargo/proc-macro2@1.0.107"},{"dependsOn":["pkg:cargo/proc-macro2@1.0.107"],"ref":"pkg:cargo/quote@1.0.47"},{"dependsOn":["pkg:cargo/serde@1.0.229"],"ref":"pkg:cargo/scab-rust-cargo@0.1.0"},{"dependsOn":["pkg:cargo/serde_core@1.0.229"],"ref":"pkg:cargo/serde@1.0.229"},{"dependsOn":["pkg:cargo/serde_derive@1.0.229"],"ref":"pkg:cargo/serde_core@1.0.229"},{"dependsOn":["pkg:cargo/proc-macro2@1.0.107","pkg:cargo/quote@1.0.47","pkg:cargo/syn@3.0.9"],"ref":"pkg:cargo/serde_derive@1.0.229"},{"dependsOn":["pkg:cargo/proc-macro2@1.0.107","pkg:cargo/quote@1.0.47","pkg:cargo/unicode-ident@1.0.27"],"ref":"pkg:cargo/syn@3.0.9"},{"dependsOn":[],"ref":"pkg:cargo/unicode-ident@1.0.27"}],"metadata":{"component":{"bom-ref":"pkg:cargo/scab-rust-cargo@0.1.0","group":"","name":"rust-cargo","type":"application","version":"1.0.0"},"lifecycles":[{"phase":"pre-build"}],"properties":[{"name":"cdx:bom:componentSrcFiles","value":"Cargo.lock"},{"name":"cdx:bom:componentTypes","value":"cargo"},{"name":"bomlens:prep-step-applied","value":"cargo-lockfile"},{"name":"bomlens:prep-step-applied","value":"cargo-license-metadata"},{"name":"bomlens:excluded-paths","value":"**/test/**, **/tests/**, **/spec/**, **/fixtures/**, **/testdata/**, **/__tests__/**, **/e2e/**, **/example/**, **/examples/**, **/sample/**, **/samples/**, **/bench/**, **/benches/**, **/benchmark/**, **/benchmarks/**, **/demo/**, **/demos/**, **/playground/**, **/.github/workflows/**, **/gradle/wrapper/**"},{"name":"bomlens:undeclared-fields","value":"unknown-to-author"}],"timestamp":"2026-10-14T23:02:44Z","tools":{"components":[{"authors":[{"name":"OWASP Foundation"}],"bom-ref":"pkg:npm/@cdxgen/cdxgen@13.3.0","group":"@cdxgen","name":"cdxgen","publisher":"OWASP Foundation","purl":"pkg:npm/%40cdxgen/cdxgen@13.3.0","type":"application","version":"13.3.0"},{"name":"BomLens","publisher":"SK Telecom","type":"application","version":"1.13.4"}]}},"serialNumber":"urn:uuid:3def75f9-2ec1-412d-ba1e-3d9cdeda96f7","services":[],"specVersion":"1.6","version":1,"compositions":[{"aggregate":"complete"}]},"security":{"SchemaVersion":2,"Trivy":{"Version":"0.75.0"},"ReportID":"01a13ca7-f06d-7395-99b5-63640b641b03","CreatedAt":"2026-10-14T23:03:21.453235838Z","ArtifactName":"rust-cargo_1.0.0_bom.json","ArtifactType":"cyclonedx","Results":[{"Target":"","Class":"lang-pkgs","Type":"cargo","Packages":[{"ID":"proc-macro2@1.0.107","Name":"proc-macro2","Identifier":{"PURL":"pkg:cargo/proc-macro2@1.0.107","UID":"e2d9f57b1e0a8b56","BOMRef":"pkg:cargo/proc-macro2@1.0.107"},"Version":"1.0.107","Licenses":["MIT OR Apache-2.0"],"DependsOn":["unicode-ident@1.0.27"],"Digest":"sha256:985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"},{"ID":"quote@1.0.47","Name":"quote","Identifier":{"PURL":"pkg:cargo/quote@1.0.47","UID":"8afadd5df35776b3","BOMRef":"pkg:cargo/quote@1.0.47"},"Version":"1.0.47","Licenses":["MIT OR Apache-2.0"],"DependsOn":["proc-macro2@1.0.107"],"Digest":"sha256:1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"},{"ID":"scab-rust-cargo@0.1.0","Name":"scab-rust-cargo","Identifier":{"PURL":"pkg:cargo/scab-rust-cargo@0.1.0","UID":"51664310fd24518e","BOMRef":"pkg:cargo/scab-rust-cargo@0.1.0"},"Version":"0.1.0"},{"ID":"serde@1.0.229","Name":"serde","Identifier":{"PURL":"pkg:cargo/serde@1.0.229","UID":"e3e9823b4f72aaa6","BOMRef":"pkg:cargo/serde@1.0.229"},"Version":"1.0.229","Licenses":["MIT OR Apache-2.0"],"DependsOn":["serde_core@1.0.229"],"Digest":"sha256:4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"},{"ID":"serde_core@1.0.229","Name":"serde_core","Identifier":{"PURL":"pkg:cargo/serde_core@1.0.229","UID":"8bce45f16c1c5000","BOMRef":"pkg:cargo/serde_core@1.0.229"},"Version":"1.0.229","Licenses":["MIT OR Apache-2.0"],"DependsOn":["serde_derive@1.0.229"],"Digest":"sha256:67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"},{"ID":"serde_derive@1.0.229","Name":"serde_derive","Identifier":{"PURL":"pkg:cargo/serde_derive@1.0.229","UID":"35aa7eb363644e9b","BOMRef":"pkg:cargo/serde_derive@1.0.229"},"Version":"1.0.229","Licenses":["MIT OR Apache-2.0"],"DependsOn":["proc-macro2@1.0.107","quote@1.0.47","syn@3.0.9"],"Digest":"sha256:e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"},{"ID":"syn@3.0.9","Name":"syn","Identifier":{"PURL":"pkg:cargo/syn@3.0.9","UID":"bff9498ae649507e","BOMRef":"pkg:cargo/syn@3.0.9"},"Version":"3.0.9","Licenses":["MIT OR Apache-2.0"],"DependsOn":["proc-macro2@1.0.107","quote@1.0.47","unicode-ident@1.0.27"],"Digest":"sha256:d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b"},{"ID":"unicode-ident@1.0.27","Name":"unicode-ident","Identifier":{"PURL":"pkg:cargo/unicode-ident@1.0.27","UID":"d63b0447d6b49909","BOMRef":"pkg:cargo/unicode-ident@1.0.27"},"Version":"1.0.27","Licenses":["(MIT OR Apache-2.0) AND Unicode-3.0"],"Digest":"sha256:a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563"}]}],"UncheckedComponents":{"Count":0,"Components":[]}},"scancode":{"headers":[{"tool_name":"scancode-toolkit","tool_version":"32.5.0","options":{"input":["/src"],"--ignore":["node_modules","vendor","bower_components",".venv","venv","virtualenv","site-packages","dist","build","target","out",".next",".nuxt","__pycache__",".gradle",".git",".hg",".svn",".tox",".mypy_cache",".pytest_cache",".ruff_cache",".idea",".vscode","rust-cargo_1.0.0"],"--json-pp":"/tmp/bomlens-scancode.NI2BZq","--license":true,"--only-findings":false,"--strip-root":true},"notice":"Generated with ScanCode and provided on an \"AS IS\" BASIS, WITHOUT WARRANTIES\nOR CONDITIONS OF ANY KIND, either express or implied. No content created from\nScanCode should be considered or used as legal advice. Consult an Attorney\nfor any legal advice.\nScanCode is a free software code scanning tool from nexB Inc. and others.\nVisit https://github.com/nexB/scancode-toolkit/ for support and download.","start_timestamp":"2026-10-14T230255.291133","end_timestamp":"2026-10-14T230257.889712","output_format_version":"4.1.0","duration":2.598597288131714,"message":null,"errors":[],"warnings":[],"extra_data":{"system_environment":{"operating_system":"linux","cpu_architecture":"64","platform":"Linux-6.8.0-100-generic-aarch64-with-glibc2.41","platform_version":"#100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:39:21 UTC 2026","python_version":"3.12.14 (main, Sep 19 2026, 01:11:14) [GCC 14.2.0]"},"spdx_license_list_version":"3.27","files_count":2}}],"license_detections":[],"files":[{"path":"Cargo.toml","type":"file","detected_license_expression":null,"detected_license_expression_spdx":null,"license_detections":[],"license_clues":[],"percentage_of_license_text":0,"scan_errors":[]},{"path":"src","type":"directory","detected_license_expression":null,"detected_license_expression_spdx":null,"license_detections":[],"license_clues":[],"percentage_of_license_text":0,"scan_errors":[]},{"path":"src/main.rs","type":"file","detected_license_expression":null,"detected_license_expression_spdx":null,"license_detections":[],"license_clues":[],"percentage_of_license_text":0,"scan_errors":[]}]}}