{"bomFormat":"CycloneDX","specVersion":"1.6","serialNumber":"urn:uuid:de833995-f489-4b23-80bf-0496c9633453","version":1,"metadata":{"timestamp":"2026-10-15T01:24:06Z","tools":{"components":[{"group":"@cdxgen","name":"cdxgen","version":"13.4.0","purl":"pkg:npm/%40cdxgen/cdxgen@13.4.0","type":"application","bom-ref":"pkg:npm/@cdxgen/cdxgen@13.4.0","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"name":"scab-uv-lock","version":"1.0.0","properties":[{"name":"cdx:pypi:requiresPython","value":">=3.9"},{"name":"internal:SrcFile","value":".cdxgen-work/uv-lock-1792027423768/src/pyproject.toml"}],"type":"application","bom-ref":"pkg:pypi/scab-uv-lock@1.0.0","purl":"pkg:pypi/scab-uv-lock@1.0.0"},"properties":[{"name":"cdx:bom:componentSrcFiles","value":".cdxgen-work/uv-lock-1792027423768/src/pyproject.toml\\n.cdxgen-work/uv-lock-1792027423768/src/uv.lock"},{"name":"cdx:bom:componentTypes","value":"pypi"}]},"components":[{"authors":[{"name":"Ronny Pfannschmidt "},{"name":"Holger Krekel "}],"group":"","name":"iniconfig","version":"2.0.0","description":"brain-dead simple config-ini parsing","scope":"optional","hashes":[{"alg":"SHA-256","content":"b6a85871a79d2e3b22d2d1b94ac2824226a63c6b741c88f7ae975f18b6778374"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:pypi/iniconfig@2.0.0","externalReferences":[{"type":"distribution","url":"https://files.pythonhosted.org/packages/d7/4b/cbd8e699e64a6f16ca3a8220661b5f83792b3017d0f79807cb8708d33913/iniconfig-2.0.0.tar.gz","comment":"sdist"},{"type":"distribution","url":"https://files.pythonhosted.org/packages/d7/4b/cbd8e699e64a6f16ca3a8220661b5f83792b3017d0f79807cb8708d33913/iniconfig-2.0.0.tar.gz","comment":"iniconfig-2.0.0.tar.gz"},{"type":"distribution","url":"https://files.pythonhosted.org/packages/ef/a6/62565a6e1cf69e10f5727360368e451d4b7f58beeac6173dc9db836a5b46/iniconfig-2.0.0-py3-none-any.whl","comment":"iniconfig-2.0.0-py3-none-any.whl"}],"type":"library","bom-ref":"pkg:pypi/iniconfig@2.0.0","tags":["tools"],"properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:pypi:artifactDigestBlake2b256","value":"efa662565a6e1cf69e10f5727360368e451d4b7f58beeac6173dc9db836a5b46, d74bcbd8e699e64a6f16ca3a8220661b5f83792b3017d0f79807cb8708d33913"},{"name":"cdx:pypi:artifactDigestMd5","value":"e423f20fe6712d80df7a23f9de303213, 3c030b3f51dcc3aca585de05635600e4"},{"name":"cdx:pypi:artifactDigestSha256","value":"b6a85871a79d2e3b22d2d1b94ac2824226a63c6b741c88f7ae975f18b6778374, 2d91e135bf72d31a410b17c16da610a82cb55f6b0477d1a902134b24a455b8b3"},{"name":"cdx:pypi:classifiers","value":"Development Status :: 4 - Beta\nIntended Audience :: Developers\nLicense :: OSI Approved :: MIT License\nOperating System :: MacOS :: MacOS X\nOperating System :: Microsoft :: Windows\nOperating System :: POSIX\nProgramming Language :: Python :: 3\nProgramming Language :: Python :: 3 :: Only\nProgramming Language :: Python :: 3.10\nProgramming Language :: Python :: 3.11\nProgramming Language :: Python :: 3.7\nProgramming Language :: Python :: 3.8\nProgramming Language :: Python :: 3.9\nTopic :: Software Development :: Libraries\nTopic :: Utilities"},{"name":"cdx:pypi:modulesFrom","value":"distribution-name"},{"name":"cdx:pypi:priorUploaderSetCount","value":"0"},{"name":"cdx:pypi:publishTime","value":"2023-01-07T11:08:09.864484Z"},{"name":"cdx:pypi:uploaderSetCount","value":"0"},{"name":"cdx:pypi:versionCount","value":"0"},{"name":"cdx:pyproject:group","value":"dev"},{"name":"internal:Namespaces","value":"iniconfig"},{"name":"internal:SrcFile","value":".cdxgen-work/uv-lock-1792027423768/src/pyproject.toml"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":".cdxgen-work/uv-lock-1792027423768/src/uv.lock"}],"concludedValue":".cdxgen-work/uv-lock-1792027423768/src/uv.lock"}]}},{"authors":[{"name":"Gustavo Niemeyer "}],"group":"","name":"python-dateutil","version":"2.8.2","description":"Extensions to the standard Python datetime module","hashes":[{"alg":"SHA-256","content":"961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9"}],"licenses":[{"license":{"id":"Apache-2.0","url":"https://opensource.org/licenses/Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}},{"license":{"name":"BSD License","properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}},{"license":{"name":"Dual License","properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:pypi/python-dateutil@2.8.2","externalReferences":[{"type":"distribution","url":"https://files.pythonhosted.org/packages/36/7a/87837f39d0296e723bb9b62bbb257d0355c7f6128853c78955f57342a56d/python_dateutil-2.8.2-py2.py3-none-any.whl","comment":"python_dateutil-2.8.2-py2.py3-none-any.whl"},{"type":"distribution","url":"https://files.pythonhosted.org/packages/4c/c4/13b4776ea2d76c115c1d1b84579f3764ee6d57204f6be27119f13a61d0a9/python-dateutil-2.8.2.tar.gz","comment":"sdist"},{"type":"distribution","url":"https://files.pythonhosted.org/packages/4c/c4/13b4776ea2d76c115c1d1b84579f3764ee6d57204f6be27119f13a61d0a9/python-dateutil-2.8.2.tar.gz","comment":"python-dateutil-2.8.2.tar.gz"}],"type":"library","bom-ref":"pkg:pypi/python-dateutil@2.8.2","properties":[{"name":"cdx:license:category","value":"Permissive, Unstated License"},{"name":"cdx:pypi:artifactDigestBlake2b256","value":"367a87837f39d0296e723bb9b62bbb257d0355c7f6128853c78955f57342a56d, 4cc413b4776ea2d76c115c1d1b84579f3764ee6d57204f6be27119f13a61d0a9"},{"name":"cdx:pypi:artifactDigestMd5","value":"95743ca628ad14d4aeb3628907f017bd, 5970010bb72452344df3d76a10281b65"},{"name":"cdx:pypi:artifactDigestSha256","value":"961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9, 0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86"},{"name":"cdx:pypi:classifiers","value":"Development Status :: 5 - Production/Stable\nIntended Audience :: Developers\nLicense :: OSI Approved :: Apache Software License\nLicense :: OSI Approved :: BSD License\nProgramming Language :: Python\nProgramming Language :: Python :: 2\nProgramming Language :: Python :: 2.7\nProgramming Language :: Python :: 3\nProgramming Language :: Python :: 3.3\nProgramming Language :: Python :: 3.4\nProgramming Language :: Python :: 3.5\nProgramming Language :: Python :: 3.6\nProgramming Language :: Python :: 3.7\nProgramming Language :: Python :: 3.8\nProgramming Language :: Python :: 3.9\nTopic :: Software Development :: Libraries"},{"name":"cdx:pypi:modulesFrom","value":"alias-map,distribution-name"},{"name":"cdx:pypi:priorUploaderSetCount","value":"0"},{"name":"cdx:pypi:publishTime","value":"2021-07-14T08:19:18.161589Z"},{"name":"cdx:pypi:uploaderSetCount","value":"0"},{"name":"cdx:pypi:versionCount","value":"0"},{"name":"internal:Namespaces","value":"dateutil\npython_dateutil"},{"name":"internal:SrcFile","value":".cdxgen-work/uv-lock-1792027423768/src/pyproject.toml"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":".cdxgen-work/uv-lock-1792027423768/src/uv.lock"}],"concludedValue":".cdxgen-work/uv-lock-1792027423768/src/uv.lock"}]}},{"authors":[{"name":"Benjamin Peterson "}],"group":"","name":"six","version":"1.16.0","description":"Python 2 and 3 compatibility utilities","hashes":[{"alg":"SHA-256","content":"8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"}],"licenses":[{"license":{"id":"MIT","url":"https://opensource.org/licenses/MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:pypi/six@1.16.0","externalReferences":[{"type":"distribution","url":"https://files.pythonhosted.org/packages/71/39/171f1c67cd00715f190ba0b100d606d440a28c93c7714febeca8b79af85e/six-1.16.0.tar.gz","comment":"sdist"},{"type":"distribution","url":"https://files.pythonhosted.org/packages/71/39/171f1c67cd00715f190ba0b100d606d440a28c93c7714febeca8b79af85e/six-1.16.0.tar.gz","comment":"six-1.16.0.tar.gz"},{"type":"distribution","url":"https://files.pythonhosted.org/packages/d9/5a/e7c31adbe875f2abbb91bd84cf2dc52d792b5a01506781dbcf25c91daf11/six-1.16.0-py2.py3-none-any.whl","comment":"six-1.16.0-py2.py3-none-any.whl"}],"type":"library","bom-ref":"pkg:pypi/six@1.16.0","tags":["tools"],"properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:pypi:artifactDigestBlake2b256","value":"d95ae7c31adbe875f2abbb91bd84cf2dc52d792b5a01506781dbcf25c91daf11, 7139171f1c67cd00715f190ba0b100d606d440a28c93c7714febeca8b79af85e"},{"name":"cdx:pypi:artifactDigestMd5","value":"529d7fd7e14612ccde86417b4402d6f3, a7c927740e4964dd29b72cebfc1429bb"},{"name":"cdx:pypi:artifactDigestSha256","value":"8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254, 1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926"},{"name":"cdx:pypi:classifiers","value":"Development Status :: 5 - Production/Stable\nIntended Audience :: Developers\nLicense :: OSI Approved :: MIT License\nProgramming Language :: Python :: 2\nProgramming Language :: Python :: 3\nTopic :: Software Development :: Libraries\nTopic :: Utilities"},{"name":"cdx:pypi:modulesFrom","value":"distribution-name"},{"name":"cdx:pypi:priorUploaderSetCount","value":"0"},{"name":"cdx:pypi:publishTime","value":"2021-05-05T14:18:17.237677Z"},{"name":"cdx:pypi:uploaderSetCount","value":"0"},{"name":"cdx:pypi:versionCount","value":"0"},{"name":"internal:Namespaces","value":"six"},{"name":"internal:SrcFile","value":".cdxgen-work/uv-lock-1792027423768/src/pyproject.toml"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":".cdxgen-work/uv-lock-1792027423768/src/uv.lock"}],"concludedValue":".cdxgen-work/uv-lock-1792027423768/src/uv.lock"}]}}],"services":[],"dependencies":[{"ref":"pkg:pypi/iniconfig@2.0.0","dependsOn":[]},{"ref":"pkg:pypi/python-dateutil@2.8.2","dependsOn":["pkg:pypi/six@1.16.0"]},{"ref":"pkg:pypi/six@1.16.0","dependsOn":[]},{"ref":"pkg:pypi/scab-uv-lock@1.0.0","dependsOn":["pkg:pypi/python-dateutil@2.8.2"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:pypi/scab-uv-lock@1.0.0"],"annotator":{"component":{"group":"@cdxgen","name":"cdxgen","version":"13.4.0","purl":"pkg:npm/%40cdxgen/cdxgen@13.4.0","type":"application","bom-ref":"pkg:npm/@cdxgen/cdxgen@13.4.0","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-10-15T01:24:06Z","text":"This Software Bill-of-Materials (SBOM) document was created on Thursday, October 15, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'scab-uv-lock' with version '1.0.0'."}]}