{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:9f3a25eb-6466-4513-8af0-0c3b3ec6f265","version":1,"metadata":{"timestamp":"2026-10-15T10:23:16+09:00","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.54.1"}]},"component":{"bom-ref":"9e39849ad14f439b","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/uv-lock"}},"components":[{"bom-ref":"pkg:pypi/iniconfig@2.0.0?package-id=b849825e00b892ee","type":"library","name":"iniconfig","version":"2.0.0","cpe":"cpe:2.3:a:python-iniconfig:python-iniconfig:2.0.0:*:*:*:*:*:*:*","purl":"pkg:pypi/iniconfig@2.0.0","properties":[{"name":"syft:package:foundBy","value":"python-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-uv-lock-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-iniconfig:python_iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_iniconfig:python-iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_iniconfig:python_iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iniconfig:python-iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iniconfig:python_iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-iniconfig:iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_iniconfig:iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python-iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python_iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iniconfig:iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:iniconfig:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/uv.lock"}]},{"bom-ref":"pkg:pypi/python-dateutil@2.8.2?package-id=a49a79511ffb8d54","type":"library","name":"python-dateutil","version":"2.8.2","cpe":"cpe:2.3:a:python-dateutil:python-dateutil:2.8.2:*:*:*:*:*:*:*","purl":"pkg:pypi/python-dateutil@2.8.2","properties":[{"name":"syft:package:foundBy","value":"python-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-uv-lock-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-dateutil:python_dateutil:2.8.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_dateutil:python-dateutil:2.8.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_dateutil:python_dateutil:2.8.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python-dateutil:2.8.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python_dateutil:2.8.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/uv.lock"}]},{"bom-ref":"pkg:pypi/scab-uv-lock@1.0.0?package-id=11dd4c472cbc8fe5","type":"library","name":"scab-uv-lock","version":"1.0.0","cpe":"cpe:2.3:a:python-scab-uv-lock:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*","purl":"pkg:pypi/scab-uv-lock@1.0.0","properties":[{"name":"syft:package:foundBy","value":"python-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-uv-lock-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab-uv-lock:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab_uv_lock:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab_uv_lock:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab-uv:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab-uv:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab_uv:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab_uv:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab-uv-lock:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab-uv-lock:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab_uv_lock:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab_uv_lock:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab-uv-lock:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab-uv-lock:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab_uv_lock:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab_uv_lock:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab-uv:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab-uv:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab_uv:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab_uv:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab-uv:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab-uv:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab_uv:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab_uv:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab-uv-lock:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab-uv-lock:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab_uv_lock:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab_uv_lock:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-scab:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_scab:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab:python-scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab:python_scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab-uv:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab-uv:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab_uv:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab_uv:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab:scab-uv-lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scab:scab_uv_lock:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/uv.lock"}]},{"bom-ref":"pkg:pypi/six@1.16.0?package-id=d58792883dfec2f5","type":"library","name":"six","version":"1.16.0","cpe":"cpe:2.3:a:python-six:python-six:1.16.0:*:*:*:*:*:*:*","purl":"pkg:pypi/six@1.16.0","properties":[{"name":"syft:package:foundBy","value":"python-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-uv-lock-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-six:python_six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_six:python-six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_six:python_six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python-six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python_six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-six:six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_six:six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:six:python-six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:six:python_six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:six:six:1.16.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/uv.lock"}]},{"bom-ref":"3717ae13dd3eb744","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/uv-lock/uv.lock","hashes":[{"alg":"SHA-1","content":"ca70c05e4315cbd18f21574c91851938e38f40eb"},{"alg":"SHA-256","content":"586cb0ca7edf7302f0db18d8915a56c6be087cc097a0066e1789d17de2d57588"}]}],"dependencies":[{"ref":"pkg:pypi/python-dateutil@2.8.2?package-id=a49a79511ffb8d54","dependsOn":["pkg:pypi/six@1.16.0?package-id=d58792883dfec2f5"]},{"ref":"pkg:pypi/scab-uv-lock@1.0.0?package-id=11dd4c472cbc8fe5","dependsOn":["pkg:pypi/python-dateutil@2.8.2?package-id=a49a79511ffb8d54"]}]}