diff --git a/sbom/cve-bin-tool-py3.10.json b/sbom/cve-bin-tool-py3.10.json
index 15554689fa..8cf12555d1 100644
--- a/sbom/cve-bin-tool-py3.10.json
+++ b/sbom/cve-bin-tool-py3.10.json
@@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.5",
- "serialNumber": "urn:uuid:220bf778-c1f0-4547-a166-c9fa6178fa1b",
+ "serialNumber": "urn:uuid:f5f5b960-1365-43a3-b25b-b20164739eed",
"version": 1,
"metadata": {
- "timestamp": "2024-03-04T00:27:22Z",
+ "timestamp": "2024-03-11T00:27:54Z",
"tools": {
"components": [
{
@@ -596,7 +596,49 @@
},
{
"type": "library",
- "bom-ref": "15-gsutil",
+ "bom-ref": "15-filetype",
+ "name": "filetype",
+ "version": "1.2.0",
+ "supplier": {
+ "name": "Tomas Aparicio",
+ "contact": [
+ {
+ "email": "tomas@aparicio.me"
+ }
+ ]
+ },
+ "cpe": "cpe:2.3:a:tomas_aparicio:filetype:1.2.0:*:*:*:*:*:*:*",
+ "description": "Infer file type and MIME type of any file/buffer. No external dependencies.",
+ "licenses": [
+ {
+ "license": {
+ "id": "MIT",
+ "url": "https://opensource.org/licenses/MIT"
+ }
+ }
+ ],
+ "externalReferences": [
+ {
+ "url": "https://pypi.org/project/filetype/1.2.0",
+ "type": "distribution",
+ "comment": "Download location for component"
+ }
+ ],
+ "purl": "pkg:pypi/filetype@1.2.0",
+ "properties": [
+ {
+ "name": "language",
+ "value": "Python"
+ },
+ {
+ "name": "python_version",
+ "value": "3.10.13"
+ }
+ ]
+ },
+ {
+ "type": "library",
+ "bom-ref": "16-gsutil",
"name": "gsutil",
"version": "5.27",
"supplier": {
@@ -642,9 +684,9 @@
},
{
"type": "library",
- "bom-ref": "16-argcomplete",
+ "bom-ref": "17-argcomplete",
"name": "argcomplete",
- "version": "3.2.2",
+ "version": "3.2.3",
"supplier": {
"name": "Andrey Kislyuk",
"contact": [
@@ -653,7 +695,7 @@
}
]
},
- "cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.2:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.3:*:*:*:*:*:*:*",
"description": "Bash tab completion for argparse",
"licenses": [
{
@@ -665,12 +707,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/argcomplete/3.2.2",
+ "url": "https://pypi.org/project/argcomplete/3.2.3",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/argcomplete@3.2.2",
+ "purl": "pkg:pypi/argcomplete@3.2.3",
"properties": [
{
"name": "language",
@@ -688,7 +730,7 @@
},
{
"type": "library",
- "bom-ref": "17-crcmod",
+ "bom-ref": "18-crcmod",
"name": "crcmod",
"version": "1.7",
"supplier": {
@@ -730,7 +772,7 @@
},
{
"type": "library",
- "bom-ref": "18-fasteners",
+ "bom-ref": "19-fasteners",
"name": "fasteners",
"version": "0.19",
"supplier": {
@@ -767,7 +809,7 @@
},
{
"type": "library",
- "bom-ref": "19-gcs-oauth2-boto-plugin",
+ "bom-ref": "20-gcs-oauth2-boto-plugin",
"name": "gcs-oauth2-boto-plugin",
"version": "3.0",
"supplier": {
@@ -813,7 +855,7 @@
},
{
"type": "library",
- "bom-ref": "20-boto",
+ "bom-ref": "21-boto",
"name": "boto",
"version": "2.49.0",
"supplier": {
@@ -855,7 +897,7 @@
},
{
"type": "library",
- "bom-ref": "21-google-reauth",
+ "bom-ref": "22-google-reauth",
"name": "google-reauth",
"version": "0.1.1",
"supplier": {
@@ -901,7 +943,7 @@
},
{
"type": "library",
- "bom-ref": "22-pyu2f",
+ "bom-ref": "23-pyu2f",
"name": "pyu2f",
"version": "0.1.5",
"supplier": {
@@ -947,7 +989,7 @@
},
{
"type": "library",
- "bom-ref": "23-six",
+ "bom-ref": "24-six",
"name": "six",
"version": "1.16.0",
"supplier": {
@@ -989,7 +1031,7 @@
},
{
"type": "library",
- "bom-ref": "24-httplib2",
+ "bom-ref": "25-httplib2",
"name": "httplib2",
"version": "0.20.4",
"supplier": {
@@ -1031,9 +1073,9 @@
},
{
"type": "library",
- "bom-ref": "25-pyparsing",
+ "bom-ref": "26-pyparsing",
"name": "pyparsing",
- "version": "3.1.1",
+ "version": "3.1.2",
"supplier": {
"name": "Paul McGuire",
"contact": [
@@ -1042,16 +1084,16 @@
}
]
},
- "cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.1:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.2:*:*:*:*:*:*:*",
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
"externalReferences": [
{
- "url": "https://pypi.org/project/pyparsing/3.1.1",
+ "url": "https://pypi.org/project/pyparsing/3.1.2",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/pyparsing@3.1.1",
+ "purl": "pkg:pypi/pyparsing@3.1.2",
"properties": [
{
"name": "language",
@@ -1065,7 +1107,7 @@
},
{
"type": "library",
- "bom-ref": "26-oauth2client",
+ "bom-ref": "27-oauth2client",
"name": "oauth2client",
"version": "4.1.3",
"supplier": {
@@ -1111,7 +1153,7 @@
},
{
"type": "library",
- "bom-ref": "27-pyasn1",
+ "bom-ref": "28-pyasn1",
"name": "pyasn1",
"version": "0.5.1",
"supplier": {
@@ -1153,7 +1195,7 @@
},
{
"type": "library",
- "bom-ref": "28-pyasn1-modules",
+ "bom-ref": "29-pyasn1-modules",
"name": "pyasn1-modules",
"version": "0.3.0",
"supplier": {
@@ -1199,7 +1241,7 @@
},
{
"type": "library",
- "bom-ref": "29-rsa",
+ "bom-ref": "30-rsa",
"name": "rsa",
"version": "4.7.2",
"supplier": {
@@ -1245,9 +1287,9 @@
},
{
"type": "library",
- "bom-ref": "30-pyopenssl",
+ "bom-ref": "31-pyopenssl",
"name": "pyopenssl",
- "version": "24.0.0",
+ "version": "24.1.0",
"supplier": {
"name": "The pyOpenSSL developers",
"contact": [
@@ -1256,7 +1298,7 @@
}
]
},
- "cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.0.0:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.1.0:*:*:*:*:*:*:*",
"description": "Python wrapper module around the OpenSSL library",
"licenses": [
{
@@ -1268,12 +1310,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/pyOpenSSL/24.0.0",
+ "url": "https://pypi.org/project/pyOpenSSL/24.1.0",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/pyopenssl@24.0.0",
+ "purl": "pkg:pypi/pyopenssl@24.1.0",
"properties": [
{
"name": "language",
@@ -1291,7 +1333,7 @@
},
{
"type": "library",
- "bom-ref": "31-cryptography",
+ "bom-ref": "32-cryptography",
"name": "cryptography",
"version": "42.0.5",
"supplier": {
@@ -1330,7 +1372,7 @@
},
{
"type": "library",
- "bom-ref": "32-cffi",
+ "bom-ref": "33-cffi",
"name": "cffi",
"version": "1.16.0",
"supplier": {
@@ -1372,7 +1414,7 @@
},
{
"type": "library",
- "bom-ref": "33-pycparser",
+ "bom-ref": "34-pycparser",
"name": "pycparser",
"version": "2.21",
"supplier": {
@@ -1418,7 +1460,7 @@
},
{
"type": "library",
- "bom-ref": "34-retry-decorator",
+ "bom-ref": "35-retry-decorator",
"name": "retry-decorator",
"version": "1.1.1",
"supplier": {
@@ -1460,7 +1502,7 @@
},
{
"type": "library",
- "bom-ref": "35-google-apitools",
+ "bom-ref": "36-google-apitools",
"name": "google-apitools",
"version": "0.5.32",
"supplier": {
@@ -1506,9 +1548,9 @@
},
{
"type": "library",
- "bom-ref": "36-google-auth",
+ "bom-ref": "37-google-auth",
"name": "google-auth",
- "version": "2.28.1",
+ "version": "2.28.2",
"supplier": {
"name": "Google Cloud Platform",
"contact": [
@@ -1517,7 +1559,7 @@
}
]
},
- "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.28.1:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.28.2:*:*:*:*:*:*:*",
"description": "Google Authentication Library",
"licenses": [
{
@@ -1529,12 +1571,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/google-auth/2.28.1",
+ "url": "https://pypi.org/project/google-auth/2.28.2",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/google-auth@2.28.1",
+ "purl": "pkg:pypi/google-auth@2.28.2",
"properties": [
{
"name": "language",
@@ -1552,7 +1594,7 @@
},
{
"type": "library",
- "bom-ref": "37-cachetools",
+ "bom-ref": "38-cachetools",
"name": "cachetools",
"version": "5.3.3",
"supplier": {
@@ -1594,7 +1636,7 @@
},
{
"type": "library",
- "bom-ref": "38-monotonic",
+ "bom-ref": "39-monotonic",
"name": "monotonic",
"version": "1.6",
"supplier": {
@@ -1640,7 +1682,7 @@
},
{
"type": "library",
- "bom-ref": "39-jinja2",
+ "bom-ref": "40-jinja2",
"name": "jinja2",
"version": "3.1.3",
"description": "A very fast and expressive template engine.",
@@ -1673,7 +1715,7 @@
},
{
"type": "library",
- "bom-ref": "40-markupsafe",
+ "bom-ref": "41-markupsafe",
"name": "markupsafe",
"version": "2.1.5",
"description": "Safely add untrusted strings to HTML/XML markup.",
@@ -1706,7 +1748,7 @@
},
{
"type": "library",
- "bom-ref": "41-jsonschema",
+ "bom-ref": "42-jsonschema",
"name": "jsonschema",
"version": "4.21.1",
"supplier": {
@@ -1743,7 +1785,7 @@
},
{
"type": "library",
- "bom-ref": "42-jsonschema-specifications",
+ "bom-ref": "43-jsonschema-specifications",
"name": "jsonschema-specifications",
"version": "2023.12.1",
"supplier": {
@@ -1780,7 +1822,7 @@
},
{
"type": "library",
- "bom-ref": "43-referencing",
+ "bom-ref": "44-referencing",
"name": "referencing",
"version": "0.33.0",
"supplier": {
@@ -1817,7 +1859,7 @@
},
{
"type": "library",
- "bom-ref": "44-rpds-py",
+ "bom-ref": "45-rpds-py",
"name": "rpds-py",
"version": "0.18.0",
"supplier": {
@@ -1854,7 +1896,7 @@
},
{
"type": "library",
- "bom-ref": "45-lib4sbom",
+ "bom-ref": "46-lib4sbom",
"name": "lib4sbom",
"version": "0.6.2",
"supplier": {
@@ -1896,7 +1938,7 @@
},
{
"type": "library",
- "bom-ref": "46-pyyaml",
+ "bom-ref": "47-pyyaml",
"name": "pyyaml",
"version": "6.0.1",
"supplier": {
@@ -1938,7 +1980,7 @@
},
{
"type": "library",
- "bom-ref": "47-semantic-version",
+ "bom-ref": "48-semantic-version",
"name": "semantic-version",
"version": "2.10.0",
"supplier": {
@@ -1984,7 +2026,7 @@
},
{
"type": "library",
- "bom-ref": "48-packageurl-python",
+ "bom-ref": "49-packageurl-python",
"name": "packageurl-python",
"version": "0.14.0",
"supplier": {
@@ -2021,9 +2063,9 @@
},
{
"type": "library",
- "bom-ref": "49-packaging",
+ "bom-ref": "50-packaging",
"name": "packaging",
- "version": "23.2",
+ "version": "24.0",
"supplier": {
"name": "Donald Stufft",
"contact": [
@@ -2032,16 +2074,16 @@
}
]
},
- "cpe": "cpe:2.3:a:donald_stufft:packaging:23.2:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:donald_stufft:packaging:24.0:*:*:*:*:*:*:*",
"description": "Core utilities for Python packages",
"externalReferences": [
{
- "url": "https://pypi.org/project/packaging/23.2",
+ "url": "https://pypi.org/project/packaging/24.0",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/packaging@23.2",
+ "purl": "pkg:pypi/packaging@24.0",
"properties": [
{
"name": "language",
@@ -2055,7 +2097,7 @@
},
{
"type": "library",
- "bom-ref": "50-plotly",
+ "bom-ref": "51-plotly",
"name": "plotly",
"version": "5.19.0",
"supplier": {
@@ -2097,7 +2139,7 @@
},
{
"type": "library",
- "bom-ref": "51-tenacity",
+ "bom-ref": "52-tenacity",
"name": "tenacity",
"version": "8.2.3",
"supplier": {
@@ -2143,7 +2185,7 @@
},
{
"type": "library",
- "bom-ref": "52-python-gnupg",
+ "bom-ref": "53-python-gnupg",
"name": "python-gnupg",
"version": "0.5.2",
"supplier": {
@@ -2189,7 +2231,7 @@
},
{
"type": "library",
- "bom-ref": "53-requests",
+ "bom-ref": "54-requests",
"name": "requests",
"version": "2.31.0",
"supplier": {
@@ -2235,7 +2277,7 @@
},
{
"type": "library",
- "bom-ref": "54-certifi",
+ "bom-ref": "55-certifi",
"name": "certifi",
"version": "2024.2.2",
"supplier": {
@@ -2277,7 +2319,7 @@
},
{
"type": "library",
- "bom-ref": "55-charset-normalizer",
+ "bom-ref": "56-charset-normalizer",
"name": "charset-normalizer",
"version": "3.3.2",
"supplier": {
@@ -2319,7 +2361,7 @@
},
{
"type": "library",
- "bom-ref": "56-urllib3",
+ "bom-ref": "57-urllib3",
"name": "urllib3",
"version": "2.2.1",
"supplier": {
@@ -2353,7 +2395,7 @@
},
{
"type": "library",
- "bom-ref": "57-rich",
+ "bom-ref": "58-rich",
"name": "rich",
"version": "13.7.1",
"supplier": {
@@ -2395,7 +2437,7 @@
},
{
"type": "library",
- "bom-ref": "58-markdown-it-py",
+ "bom-ref": "59-markdown-it-py",
"name": "markdown-it-py",
"version": "3.0.0",
"supplier": {
@@ -2429,7 +2471,7 @@
},
{
"type": "library",
- "bom-ref": "59-mdurl",
+ "bom-ref": "60-mdurl",
"name": "mdurl",
"version": "0.1.2",
"supplier": {
@@ -2463,7 +2505,7 @@
},
{
"type": "library",
- "bom-ref": "60-pygments",
+ "bom-ref": "61-pygments",
"name": "pygments",
"version": "2.17.2",
"supplier": {
@@ -2505,7 +2547,7 @@
},
{
"type": "library",
- "bom-ref": "61-rpmfile",
+ "bom-ref": "62-rpmfile",
"name": "rpmfile",
"version": "2.0.0",
"supplier": {
@@ -2547,7 +2589,7 @@
},
{
"type": "library",
- "bom-ref": "62-toml",
+ "bom-ref": "63-toml",
"name": "toml",
"version": "0.10.2",
"supplier": {
@@ -2589,7 +2631,7 @@
},
{
"type": "library",
- "bom-ref": "63-xmlschema",
+ "bom-ref": "64-xmlschema",
"name": "xmlschema",
"version": "3.0.2",
"supplier": {
@@ -2631,7 +2673,7 @@
},
{
"type": "library",
- "bom-ref": "64-elementpath",
+ "bom-ref": "65-elementpath",
"name": "elementpath",
"version": "4.3.0",
"supplier": {
@@ -2673,7 +2715,7 @@
},
{
"type": "library",
- "bom-ref": "65-zstandard",
+ "bom-ref": "66-zstandard",
"name": "zstandard",
"version": "0.22.0",
"supplier": {
@@ -2733,22 +2775,23 @@
"12-cvss",
"13-defusedxml",
"14-distro",
- "15-gsutil",
- "39-jinja2",
- "41-jsonschema",
- "45-lib4sbom",
- "48-packageurl-python",
- "49-packaging",
- "50-plotly",
- "52-python-gnupg",
- "46-pyyaml",
- "53-requests",
- "57-rich",
- "61-rpmfile",
- "62-toml",
- "56-urllib3",
- "63-xmlschema",
- "65-zstandard"
+ "15-filetype",
+ "16-gsutil",
+ "40-jinja2",
+ "42-jsonschema",
+ "46-lib4sbom",
+ "49-packageurl-python",
+ "50-packaging",
+ "51-plotly",
+ "53-python-gnupg",
+ "47-pyyaml",
+ "54-requests",
+ "58-rich",
+ "62-rpmfile",
+ "63-toml",
+ "57-urllib3",
+ "64-xmlschema",
+ "66-zstandard"
]
},
{
@@ -2782,179 +2825,179 @@
]
},
{
- "ref": "15-gsutil",
+ "ref": "16-gsutil",
"dependsOn": [
- "16-argcomplete",
- "17-crcmod",
- "18-fasteners",
- "19-gcs-oauth2-boto-plugin",
- "35-google-apitools",
- "36-google-auth",
- "21-google-reauth",
- "24-httplib2",
- "38-monotonic",
- "30-pyopenssl",
- "34-retry-decorator",
- "23-six"
- ]
- },
- {
- "ref": "19-gcs-oauth2-boto-plugin",
+ "17-argcomplete",
+ "18-crcmod",
+ "19-fasteners",
+ "20-gcs-oauth2-boto-plugin",
+ "36-google-apitools",
+ "37-google-auth",
+ "22-google-reauth",
+ "25-httplib2",
+ "39-monotonic",
+ "31-pyopenssl",
+ "35-retry-decorator",
+ "24-six"
+ ]
+ },
+ {
+ "ref": "20-gcs-oauth2-boto-plugin",
"dependsOn": [
- "20-boto",
- "21-google-reauth",
- "24-httplib2",
- "26-oauth2client",
- "30-pyopenssl",
- "34-retry-decorator",
- "29-rsa",
- "23-six"
+ "21-boto",
+ "22-google-reauth",
+ "25-httplib2",
+ "27-oauth2client",
+ "31-pyopenssl",
+ "35-retry-decorator",
+ "30-rsa",
+ "24-six"
]
},
{
- "ref": "21-google-reauth",
+ "ref": "22-google-reauth",
"dependsOn": [
- "22-pyu2f"
+ "23-pyu2f"
]
},
{
- "ref": "22-pyu2f",
+ "ref": "23-pyu2f",
"dependsOn": [
- "23-six"
+ "24-six"
]
},
{
- "ref": "24-httplib2",
+ "ref": "25-httplib2",
"dependsOn": [
- "25-pyparsing"
+ "26-pyparsing"
]
},
{
- "ref": "26-oauth2client",
+ "ref": "27-oauth2client",
"dependsOn": [
- "24-httplib2",
- "27-pyasn1",
- "28-pyasn1-modules",
- "29-rsa",
- "23-six"
+ "25-httplib2",
+ "28-pyasn1",
+ "29-pyasn1-modules",
+ "30-rsa",
+ "24-six"
]
},
{
- "ref": "28-pyasn1-modules",
+ "ref": "29-pyasn1-modules",
"dependsOn": [
- "27-pyasn1"
+ "28-pyasn1"
]
},
{
- "ref": "29-rsa",
+ "ref": "30-rsa",
"dependsOn": [
- "27-pyasn1"
+ "28-pyasn1"
]
},
{
- "ref": "30-pyopenssl",
+ "ref": "31-pyopenssl",
"dependsOn": [
- "31-cryptography"
+ "32-cryptography"
]
},
{
- "ref": "31-cryptography",
+ "ref": "32-cryptography",
"dependsOn": [
- "32-cffi"
+ "33-cffi"
]
},
{
- "ref": "32-cffi",
+ "ref": "33-cffi",
"dependsOn": [
- "33-pycparser"
+ "34-pycparser"
]
},
{
- "ref": "35-google-apitools",
+ "ref": "36-google-apitools",
"dependsOn": [
- "18-fasteners",
- "24-httplib2",
- "26-oauth2client",
- "23-six"
+ "19-fasteners",
+ "25-httplib2",
+ "27-oauth2client",
+ "24-six"
]
},
{
- "ref": "36-google-auth",
+ "ref": "37-google-auth",
"dependsOn": [
- "37-cachetools",
- "28-pyasn1-modules",
- "29-rsa"
+ "38-cachetools",
+ "29-pyasn1-modules",
+ "30-rsa"
]
},
{
- "ref": "39-jinja2",
+ "ref": "40-jinja2",
"dependsOn": [
- "40-markupsafe"
+ "41-markupsafe"
]
},
{
- "ref": "41-jsonschema",
+ "ref": "42-jsonschema",
"dependsOn": [
"6-attrs",
- "42-jsonschema-specifications",
- "43-referencing",
- "44-rpds-py"
+ "43-jsonschema-specifications",
+ "44-referencing",
+ "45-rpds-py"
]
},
{
- "ref": "42-jsonschema-specifications",
+ "ref": "43-jsonschema-specifications",
"dependsOn": [
- "43-referencing"
+ "44-referencing"
]
},
{
- "ref": "43-referencing",
+ "ref": "44-referencing",
"dependsOn": [
"6-attrs",
- "44-rpds-py"
+ "45-rpds-py"
]
},
{
- "ref": "45-lib4sbom",
+ "ref": "46-lib4sbom",
"dependsOn": [
"13-defusedxml",
- "46-pyyaml",
- "47-semantic-version"
+ "47-pyyaml",
+ "48-semantic-version"
]
},
{
- "ref": "50-plotly",
+ "ref": "51-plotly",
"dependsOn": [
- "49-packaging",
- "51-tenacity"
+ "50-packaging",
+ "52-tenacity"
]
},
{
- "ref": "53-requests",
+ "ref": "54-requests",
"dependsOn": [
- "54-certifi",
- "55-charset-normalizer",
+ "55-certifi",
+ "56-charset-normalizer",
"9-idna",
- "56-urllib3"
+ "57-urllib3"
]
},
{
- "ref": "57-rich",
+ "ref": "58-rich",
"dependsOn": [
- "58-markdown-it-py",
- "60-pygments"
+ "59-markdown-it-py",
+ "61-pygments"
]
},
{
- "ref": "58-markdown-it-py",
+ "ref": "59-markdown-it-py",
"dependsOn": [
- "59-mdurl"
+ "60-mdurl"
]
},
{
- "ref": "63-xmlschema",
+ "ref": "64-xmlschema",
"dependsOn": [
- "64-elementpath"
+ "65-elementpath"
]
}
]
diff --git a/sbom/cve-bin-tool-py3.10.spdx b/sbom/cve-bin-tool-py3.10.spdx
index 799c38ee5d..53c6a140a1 100644
--- a/sbom/cve-bin-tool-py3.10.spdx
+++ b/sbom/cve-bin-tool-py3.10.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-1c6ac793-8c45-4bec-9bd4-deb3ddfab7b6
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-303dc6c3-9dd0-4daa-9f8d-9ce6b33b4fa8
LicenseListVersion: 3.22
Creator: Tool: sbom4python-0.10.3
-Created: 2024-03-04T00:25:40Z
+Created: 2024-03-11T00:26:09Z
CreatorComment: This document has been automatically generated.
#####
@@ -224,8 +224,23 @@ ExternalRef: PACKAGE-MANAGER purl pkg:pypi/distro@1.9.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:nir_cohen:distro:1.9.0:*:*:*:*:*:*:*
#####
+PackageName: filetype
+SPDXID: SPDXRef-Package-15-filetype
+PackageVersion: 1.2.0
+PrimaryPackagePurpose: LIBRARY
+PackageSupplier: Person: Tomas Aparicio (tomas@aparicio.me)
+PackageDownloadLocation: https://pypi.org/project/filetype/1.2.0
+FilesAnalyzed: false
+PackageLicenseDeclared: MIT
+PackageLicenseConcluded: MIT
+PackageCopyrightText: NOASSERTION
+PackageSummary: Infer file type and MIME type of any file/buffer. No external dependencies.
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/filetype@1.2.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:tomas_aparicio:filetype:1.2.0:*:*:*:*:*:*:*
+#####
+
PackageName: gsutil
-SPDXID: SPDXRef-Package-15-gsutil
+SPDXID: SPDXRef-Package-16-gsutil
PackageVersion: 5.27
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google Inc. (buganizer-system+187143@google.com)
@@ -241,23 +256,23 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gsutil:5.27:*:*:*:*:*:*:*
#####
PackageName: argcomplete
-SPDXID: SPDXRef-Package-16-argcomplete
-PackageVersion: 3.2.2
+SPDXID: SPDXRef-Package-17-argcomplete
+PackageVersion: 3.2.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Andrey Kislyuk (kislyuk@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/argcomplete/3.2.2
+PackageDownloadLocation: https://pypi.org/project/argcomplete/3.2.3
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: Apache-2.0
PackageLicenseComments: argcomplete declares Apache Software License which is not currently a valid SPDX License identifier or expression.
PackageCopyrightText: NOASSERTION
PackageSummary: Bash tab completion for argparse
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/argcomplete@3.2.2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/argcomplete@3.2.3
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.3:*:*:*:*:*:*:*
#####
PackageName: crcmod
-SPDXID: SPDXRef-Package-17-crcmod
+SPDXID: SPDXRef-Package-18-crcmod
PackageVersion: 1.7
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ray Buvel (rlbuvel@gmail.com)
@@ -272,7 +287,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ray_buvel:crcmod:1.7:*:*:*:*:*:*:*
#####
PackageName: fasteners
-SPDXID: SPDXRef-Package-18-fasteners
+SPDXID: SPDXRef-Package-19-fasteners
PackageVersion: 0.19
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Joshua Harlow
@@ -287,7 +302,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:joshua_harlow:fasteners:0.19:*:*:*:*:*
#####
PackageName: gcs-oauth2-boto-plugin
-SPDXID: SPDXRef-Package-19-gcs-oauth2-boto-plugin
+SPDXID: SPDXRef-Package-20-gcs-oauth2-boto-plugin
PackageVersion: 3.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google Inc. (gs-team@google.com)
@@ -303,7 +318,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gcs-oauth2-boto-plugin:3.0
#####
PackageName: boto
-SPDXID: SPDXRef-Package-20-boto
+SPDXID: SPDXRef-Package-21-boto
PackageVersion: 2.49.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Mitch Garnaat (mitch@garnaat.com)
@@ -318,7 +333,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:mitch_garnaat:boto:2.49.0:*:*:*:*:*:*:
#####
PackageName: google-reauth
-SPDXID: SPDXRef-Package-21-google-reauth
+SPDXID: SPDXRef-Package-22-google-reauth
PackageVersion: 0.1.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google (googleapis-publisher@google.com)
@@ -334,7 +349,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google:google-reauth:0.1.1:*:*:*:*:*:*
#####
PackageName: pyu2f
-SPDXID: SPDXRef-Package-22-pyu2f
+SPDXID: SPDXRef-Package-23-pyu2f
PackageVersion: 0.1.5
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google Inc. (pyu2f-team@google.com)
@@ -350,7 +365,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:pyu2f:0.1.5:*:*:*:*:*:*:*
#####
PackageName: six
-SPDXID: SPDXRef-Package-23-six
+SPDXID: SPDXRef-Package-24-six
PackageVersion: 1.16.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Benjamin Peterson (benjamin@python.org)
@@ -365,7 +380,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:benjamin_peterson:six:1.16.0:*:*:*:*:*
#####
PackageName: httplib2
-SPDXID: SPDXRef-Package-24-httplib2
+SPDXID: SPDXRef-Package-25-httplib2
PackageVersion: 0.20.4
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Joe Gregorio (joe@bitworking.org)
@@ -380,22 +395,22 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:joe_gregorio:httplib2:0.20.4:*:*:*:*:*
#####
PackageName: pyparsing
-SPDXID: SPDXRef-Package-25-pyparsing
-PackageVersion: 3.1.1
+SPDXID: SPDXRef-Package-26-pyparsing
+PackageVersion: 3.1.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Paul McGuire (ptmcg.gm+pyparsing@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/pyparsing/3.1.1
+PackageDownloadLocation: https://pypi.org/project/pyparsing/3.1.2
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: pyparsing module - Classes and methods to define and execute parsing grammars
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyparsing@3.1.1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:paul_mcguire:pyparsing:3.1.1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyparsing@3.1.2
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:paul_mcguire:pyparsing:3.1.2:*:*:*:*:*:*:*
#####
PackageName: oauth2client
-SPDXID: SPDXRef-Package-26-oauth2client
+SPDXID: SPDXRef-Package-27-oauth2client
PackageVersion: 4.1.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google Inc. (jonwayne+oauth2client@google.com)
@@ -411,7 +426,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:oauth2client:4.1.3:*:*:*:*
#####
PackageName: pyasn1
-SPDXID: SPDXRef-Package-27-pyasn1
+SPDXID: SPDXRef-Package-28-pyasn1
PackageVersion: 0.5.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ilya Etingof (etingof@gmail.com)
@@ -426,7 +441,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ilya_etingof:pyasn1:0.5.1:*:*:*:*:*:*:
#####
PackageName: pyasn1-modules
-SPDXID: SPDXRef-Package-28-pyasn1-modules
+SPDXID: SPDXRef-Package-29-pyasn1-modules
PackageVersion: 0.3.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ilya Etingof (etingof@gmail.com)
@@ -442,7 +457,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ilya_etingof:pyasn1-modules:0.3.0:*:*:
#####
PackageName: rsa
-SPDXID: SPDXRef-Package-29-rsa
+SPDXID: SPDXRef-Package-30-rsa
PackageVersion: 4.7.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Sybren A. Stuvel (sybren@stuvel.eu)
@@ -458,23 +473,23 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:sybren_a._stuvel:rsa:4.7.2:*:*:*:*:*:*
#####
PackageName: pyopenssl
-SPDXID: SPDXRef-Package-30-pyopenssl
-PackageVersion: 24.0.0
+SPDXID: SPDXRef-Package-31-pyopenssl
+PackageVersion: 24.1.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: The pyOpenSSL developers (cryptography-dev@python.org)
-PackageDownloadLocation: https://pypi.org/project/pyOpenSSL/24.0.0
+PackageDownloadLocation: https://pypi.org/project/pyOpenSSL/24.1.0
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: Apache-2.0
PackageLicenseComments: pyOpenSSL declares Apache License, Version 2.0 which is not currently a valid SPDX License identifier or expression.
PackageCopyrightText: NOASSERTION
PackageSummary: Python wrapper module around the OpenSSL library
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyopenssl@24.0.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.0.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyopenssl@24.1.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.1.0:*:*:*:*:*:*:*
#####
PackageName: cryptography
-SPDXID: SPDXRef-Package-31-cryptography
+SPDXID: SPDXRef-Package-32-cryptography
PackageVersion: 42.0.5
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: The Python Cryptographic Authority and individual contributors (cryptography-dev@python.org)
@@ -489,7 +504,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_python_cryptographic_authority_and
#####
PackageName: cffi
-SPDXID: SPDXRef-Package-32-cffi
+SPDXID: SPDXRef-Package-33-cffi
PackageVersion: 1.16.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Armin Maciej Fijalkowski (python-cffi@googlegroups.com)
@@ -504,7 +519,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:armin_maciej_fijalkowski:cffi:1.16.0:*
#####
PackageName: pycparser
-SPDXID: SPDXRef-Package-33-pycparser
+SPDXID: SPDXRef-Package-34-pycparser
PackageVersion: 2.21
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Eli Bendersky (eliben@gmail.com)
@@ -520,7 +535,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:eli_bendersky:pycparser:2.21:*:*:*:*:*
#####
PackageName: retry-decorator
-SPDXID: SPDXRef-Package-34-retry-decorator
+SPDXID: SPDXRef-Package-35-retry-decorator
PackageVersion: 1.1.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Patrick Ng (pn.appdev@gmail.com)
@@ -535,7 +550,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:patrick_ng:retry-decorator:1.1.1:*:*:*
#####
PackageName: google-apitools
-SPDXID: SPDXRef-Package-35-google-apitools
+SPDXID: SPDXRef-Package-36-google-apitools
PackageVersion: 0.5.32
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Craig Citro (craigcitro@google.com)
@@ -551,23 +566,23 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
#####
PackageName: google-auth
-SPDXID: SPDXRef-Package-36-google-auth
-PackageVersion: 2.28.1
+SPDXID: SPDXRef-Package-37-google-auth
+PackageVersion: 2.28.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Google Cloud Platform (googleapis-packages@google.com)
-PackageDownloadLocation: https://pypi.org/project/google-auth/2.28.1
+PackageDownloadLocation: https://pypi.org/project/google-auth/2.28.2
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: Apache-2.0
PackageLicenseComments: google-auth declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.
PackageCopyrightText: NOASSERTION
PackageSummary: Google Authentication Library
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.28.1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.28.1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.28.2
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.28.2:*:*:*:*:*:*:*
#####
PackageName: cachetools
-SPDXID: SPDXRef-Package-37-cachetools
+SPDXID: SPDXRef-Package-38-cachetools
PackageVersion: 5.3.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Thomas Kemmer (tkemmer@computer.org)
@@ -582,7 +597,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.3.3:*:*:*:*
#####
PackageName: monotonic
-SPDXID: SPDXRef-Package-38-monotonic
+SPDXID: SPDXRef-Package-39-monotonic
PackageVersion: 1.6
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ori Livneh (ori@wikimedia.org)
@@ -598,7 +613,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ori_livneh:monotonic:1.6:*:*:*:*:*:*:*
#####
PackageName: jinja2
-SPDXID: SPDXRef-Package-39-jinja2
+SPDXID: SPDXRef-Package-40-jinja2
PackageVersion: 3.1.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: NOASSERTION
@@ -612,7 +627,7 @@ ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jinja2@3.1.3
#####
PackageName: markupsafe
-SPDXID: SPDXRef-Package-40-markupsafe
+SPDXID: SPDXRef-Package-41-markupsafe
PackageVersion: 2.1.5
PrimaryPackagePurpose: LIBRARY
PackageSupplier: NOASSERTION
@@ -626,7 +641,7 @@ ExternalRef: PACKAGE-MANAGER purl pkg:pypi/markupsafe@2.1.5
#####
PackageName: jsonschema
-SPDXID: SPDXRef-Package-41-jsonschema
+SPDXID: SPDXRef-Package-42-jsonschema
PackageVersion: 4.21.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman
@@ -641,7 +656,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema:4.21.1:*:*:*:
#####
PackageName: jsonschema-specifications
-SPDXID: SPDXRef-Package-42-jsonschema-specifications
+SPDXID: SPDXRef-Package-43-jsonschema-specifications
PackageVersion: 2023.12.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman
@@ -656,7 +671,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specification
#####
PackageName: referencing
-SPDXID: SPDXRef-Package-43-referencing
+SPDXID: SPDXRef-Package-44-referencing
PackageVersion: 0.33.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman
@@ -671,7 +686,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.33.0:*:*:*
#####
PackageName: rpds-py
-SPDXID: SPDXRef-Package-44-rpds-py
+SPDXID: SPDXRef-Package-45-rpds-py
PackageVersion: 0.18.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman
@@ -686,7 +701,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.18.0:*:*:*:*:*
#####
PackageName: lib4sbom
-SPDXID: SPDXRef-Package-45-lib4sbom
+SPDXID: SPDXRef-Package-46-lib4sbom
PackageVersion: 0.6.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Anthony Harrison (anthony.p.harrison@gmail.com)
@@ -701,7 +716,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.6.2:*:*:*:
#####
PackageName: pyyaml
-SPDXID: SPDXRef-Package-46-pyyaml
+SPDXID: SPDXRef-Package-47-pyyaml
PackageVersion: 6.0.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kirill Simonov (xi@resolvent.net)
@@ -716,7 +731,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kirill_simonov:pyyaml:6.0.1:*:*:*:*:*:
#####
PackageName: semantic-version
-SPDXID: SPDXRef-Package-47-semantic-version
+SPDXID: SPDXRef-Package-48-semantic-version
PackageVersion: 2.10.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Raphael Barrois (raphael.barrois+semver@polytechnique.org)
@@ -732,7 +747,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:raphael_barrois:semantic-version:2.10.
#####
PackageName: packageurl-python
-SPDXID: SPDXRef-Package-48-packageurl-python
+SPDXID: SPDXRef-Package-49-packageurl-python
PackageVersion: 0.14.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: the purl authors
@@ -747,22 +762,22 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.1
#####
PackageName: packaging
-SPDXID: SPDXRef-Package-49-packaging
-PackageVersion: 23.2
+SPDXID: SPDXRef-Package-50-packaging
+PackageVersion: 24.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Donald Stufft (donald@stufft.io)
-PackageDownloadLocation: https://pypi.org/project/packaging/23.2
+PackageDownloadLocation: https://pypi.org/project/packaging/24.0
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: Core utilities for Python packages
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packaging@23.2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:donald_stufft:packaging:23.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packaging@24.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:donald_stufft:packaging:24.0:*:*:*:*:*:*:*
#####
PackageName: plotly
-SPDXID: SPDXRef-Package-50-plotly
+SPDXID: SPDXRef-Package-51-plotly
PackageVersion: 5.19.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Chris P (chris@plot.ly)
@@ -777,7 +792,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.19.0:*:*:*:*:*:*:*
#####
PackageName: tenacity
-SPDXID: SPDXRef-Package-51-tenacity
+SPDXID: SPDXRef-Package-52-tenacity
PackageVersion: 8.2.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julien Danjou (julien@danjou.info)
@@ -793,7 +808,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julien_danjou:tenacity:8.2.3:*:*:*:*:*
#####
PackageName: python-gnupg
-SPDXID: SPDXRef-Package-52-python-gnupg
+SPDXID: SPDXRef-Package-53-python-gnupg
PackageVersion: 0.5.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Vinay Sajip (vinay_sajip@yahoo.co.uk)
@@ -809,7 +824,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.2:*:*:*:*
#####
PackageName: requests
-SPDXID: SPDXRef-Package-53-requests
+SPDXID: SPDXRef-Package-54-requests
PackageVersion: 2.31.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kenneth Reitz (me@kennethreitz.org)
@@ -825,7 +840,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:
#####
PackageName: certifi
-SPDXID: SPDXRef-Package-54-certifi
+SPDXID: SPDXRef-Package-55-certifi
PackageVersion: 2024.2.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kenneth Reitz (me@kennethreitz.com)
@@ -840,7 +855,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2024.2.2:*:*:*:*
#####
PackageName: charset-normalizer
-SPDXID: SPDXRef-Package-55-charset-normalizer
+SPDXID: SPDXRef-Package-56-charset-normalizer
PackageVersion: 3.3.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ahmed TAHRI (ahmed.tahri@cloudnursery.dev)
@@ -855,7 +870,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ahmed_tahri:charset-normalizer:3.3.2:*
#####
PackageName: urllib3
-SPDXID: SPDXRef-Package-56-urllib3
+SPDXID: SPDXRef-Package-57-urllib3
PackageVersion: 2.2.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Andrey Petrov (andrey.petrov@shazow.net)
@@ -870,7 +885,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:2.2.1:*:*:*:*:*:
#####
PackageName: rich
-SPDXID: SPDXRef-Package-57-rich
+SPDXID: SPDXRef-Package-58-rich
PackageVersion: 13.7.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Will McGugan (willmcgugan@gmail.com)
@@ -885,7 +900,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.7.1:*:*:*:*:*:*:*
#####
PackageName: markdown-it-py
-SPDXID: SPDXRef-Package-58-markdown-it-py
+SPDXID: SPDXRef-Package-59-markdown-it-py
PackageVersion: 3.0.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Chris Sewell (chrisj_sewell@hotmail.com)
@@ -900,7 +915,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_sewell:markdown-it-py:3.0.0:*:*:
#####
PackageName: mdurl
-SPDXID: SPDXRef-Package-59-mdurl
+SPDXID: SPDXRef-Package-60-mdurl
PackageVersion: 0.1.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Taneli Hukkinen (hukkin@users.noreply.github.com)
@@ -915,7 +930,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:taneli_hukkinen:mdurl:0.1.2:*:*:*:*:*:
#####
PackageName: pygments
-SPDXID: SPDXRef-Package-60-pygments
+SPDXID: SPDXRef-Package-61-pygments
PackageVersion: 2.17.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Georg Brandl (georg@python.org)
@@ -930,7 +945,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:georg_brandl:pygments:2.17.2:*:*:*:*:*
#####
PackageName: rpmfile
-SPDXID: SPDXRef-Package-61-rpmfile
+SPDXID: SPDXRef-Package-62-rpmfile
PackageVersion: 2.0.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Sean Ross (srossross@gmail.com)
@@ -945,7 +960,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:sean_ross:rpmfile:2.0.0:*:*:*:*:*:*:*
#####
PackageName: toml
-SPDXID: SPDXRef-Package-62-toml
+SPDXID: SPDXRef-Package-63-toml
PackageVersion: 0.10.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: William Pearson (uiri@xqz.ca)
@@ -960,7 +975,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:william_pearson:toml:0.10.2:*:*:*:*:*:
#####
PackageName: xmlschema
-SPDXID: SPDXRef-Package-63-xmlschema
+SPDXID: SPDXRef-Package-64-xmlschema
PackageVersion: 3.0.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Davide Brunato (brunato@sissa.it)
@@ -975,7 +990,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:xmlschema:3.0.2:*:*:*:*
#####
PackageName: elementpath
-SPDXID: SPDXRef-Package-64-elementpath
+SPDXID: SPDXRef-Package-65-elementpath
PackageVersion: 4.3.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Davide Brunato (brunato@sissa.it)
@@ -990,7 +1005,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:elementpath:4.3.0:*:*:*
#####
PackageName: zstandard
-SPDXID: SPDXRef-Package-65-zstandard
+SPDXID: SPDXRef-Package-66-zstandard
PackageVersion: 0.22.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Gregory Szorc (gregory.szorc@gmail.com)
@@ -1010,91 +1025,92 @@ Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-10-beaut
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-12-cvss
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-13-defusedxml
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-14-distro
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-15-gsutil
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-15-filetype
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-16-gsutil
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-2-aiohttp
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-39-jinja2
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-41-jsonschema
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-45-lib4sbom
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-46-pyyaml
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-48-packageurl-python
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-49-packaging
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-50-plotly
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-52-python-gnupg
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-53-requests
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-56-urllib3
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-57-rich
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-61-rpmfile
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-62-toml
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-63-xmlschema
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-65-zstandard
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-40-jinja2
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-42-jsonschema
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-46-lib4sbom
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-47-pyyaml
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-49-packageurl-python
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-50-packaging
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-51-plotly
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-53-python-gnupg
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-54-requests
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-57-urllib3
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-58-rich
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-62-rpmfile
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-63-toml
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-64-xmlschema
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-66-zstandard
Relationship: SPDXRef-Package-10-beautifulsoup4 DEPENDS_ON SPDXRef-Package-11-soupsieve
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-16-argcomplete
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-17-crcmod
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-18-fasteners
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-19-gcs-oauth2-boto-plugin
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-21-google-reauth
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-24-httplib2
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-30-pyopenssl
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-34-retry-decorator
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-35-google-apitools
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-36-google-auth
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-38-monotonic
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-20-boto
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-21-google-reauth
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-24-httplib2
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-26-oauth2client
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-29-rsa
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-30-pyopenssl
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-34-retry-decorator
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-17-argcomplete
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-18-crcmod
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-19-fasteners
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-20-gcs-oauth2-boto-plugin
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-22-google-reauth
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-25-httplib2
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-31-pyopenssl
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-35-retry-decorator
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-36-google-apitools
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-37-google-auth
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-39-monotonic
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-3-aiosignal
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-4-frozenlist
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-5-async-timeout
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-6-attrs
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-7-multidict
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-8-yarl
-Relationship: SPDXRef-Package-21-google-reauth DEPENDS_ON SPDXRef-Package-22-pyu2f
-Relationship: SPDXRef-Package-22-pyu2f DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-24-httplib2 DEPENDS_ON SPDXRef-Package-25-pyparsing
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-24-httplib2
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-27-pyasn1
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-28-pyasn1-modules
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-29-rsa
-Relationship: SPDXRef-Package-28-pyasn1-modules DEPENDS_ON SPDXRef-Package-27-pyasn1
-Relationship: SPDXRef-Package-29-rsa DEPENDS_ON SPDXRef-Package-27-pyasn1
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-21-boto
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-22-google-reauth
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-25-httplib2
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-27-oauth2client
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-30-rsa
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-31-pyopenssl
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-35-retry-decorator
+Relationship: SPDXRef-Package-22-google-reauth DEPENDS_ON SPDXRef-Package-23-pyu2f
+Relationship: SPDXRef-Package-23-pyu2f DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-25-httplib2 DEPENDS_ON SPDXRef-Package-26-pyparsing
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-25-httplib2
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-28-pyasn1
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-29-pyasn1-modules
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-30-rsa
+Relationship: SPDXRef-Package-29-pyasn1-modules DEPENDS_ON SPDXRef-Package-28-pyasn1
Relationship: SPDXRef-Package-3-aiosignal DEPENDS_ON SPDXRef-Package-4-frozenlist
-Relationship: SPDXRef-Package-30-pyopenssl DEPENDS_ON SPDXRef-Package-31-cryptography
-Relationship: SPDXRef-Package-31-cryptography DEPENDS_ON SPDXRef-Package-32-cffi
-Relationship: SPDXRef-Package-32-cffi DEPENDS_ON SPDXRef-Package-33-pycparser
-Relationship: SPDXRef-Package-35-google-apitools DEPENDS_ON SPDXRef-Package-18-fasteners
-Relationship: SPDXRef-Package-35-google-apitools DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-35-google-apitools DEPENDS_ON SPDXRef-Package-24-httplib2
-Relationship: SPDXRef-Package-35-google-apitools DEPENDS_ON SPDXRef-Package-26-oauth2client
-Relationship: SPDXRef-Package-36-google-auth DEPENDS_ON SPDXRef-Package-28-pyasn1-modules
-Relationship: SPDXRef-Package-36-google-auth DEPENDS_ON SPDXRef-Package-29-rsa
-Relationship: SPDXRef-Package-36-google-auth DEPENDS_ON SPDXRef-Package-37-cachetools
-Relationship: SPDXRef-Package-39-jinja2 DEPENDS_ON SPDXRef-Package-40-markupsafe
-Relationship: SPDXRef-Package-41-jsonschema DEPENDS_ON SPDXRef-Package-42-jsonschema-specifications
-Relationship: SPDXRef-Package-41-jsonschema DEPENDS_ON SPDXRef-Package-43-referencing
-Relationship: SPDXRef-Package-41-jsonschema DEPENDS_ON SPDXRef-Package-44-rpds-py
-Relationship: SPDXRef-Package-41-jsonschema DEPENDS_ON SPDXRef-Package-6-attrs
-Relationship: SPDXRef-Package-42-jsonschema-specifications DEPENDS_ON SPDXRef-Package-43-referencing
-Relationship: SPDXRef-Package-43-referencing DEPENDS_ON SPDXRef-Package-44-rpds-py
-Relationship: SPDXRef-Package-43-referencing DEPENDS_ON SPDXRef-Package-6-attrs
-Relationship: SPDXRef-Package-45-lib4sbom DEPENDS_ON SPDXRef-Package-13-defusedxml
-Relationship: SPDXRef-Package-45-lib4sbom DEPENDS_ON SPDXRef-Package-46-pyyaml
-Relationship: SPDXRef-Package-45-lib4sbom DEPENDS_ON SPDXRef-Package-47-semantic-version
-Relationship: SPDXRef-Package-50-plotly DEPENDS_ON SPDXRef-Package-49-packaging
-Relationship: SPDXRef-Package-50-plotly DEPENDS_ON SPDXRef-Package-51-tenacity
-Relationship: SPDXRef-Package-53-requests DEPENDS_ON SPDXRef-Package-54-certifi
-Relationship: SPDXRef-Package-53-requests DEPENDS_ON SPDXRef-Package-55-charset-normalizer
-Relationship: SPDXRef-Package-53-requests DEPENDS_ON SPDXRef-Package-56-urllib3
-Relationship: SPDXRef-Package-53-requests DEPENDS_ON SPDXRef-Package-9-idna
-Relationship: SPDXRef-Package-57-rich DEPENDS_ON SPDXRef-Package-58-markdown-it-py
-Relationship: SPDXRef-Package-57-rich DEPENDS_ON SPDXRef-Package-60-pygments
-Relationship: SPDXRef-Package-58-markdown-it-py DEPENDS_ON SPDXRef-Package-59-mdurl
-Relationship: SPDXRef-Package-63-xmlschema DEPENDS_ON SPDXRef-Package-64-elementpath
+Relationship: SPDXRef-Package-30-rsa DEPENDS_ON SPDXRef-Package-28-pyasn1
+Relationship: SPDXRef-Package-31-pyopenssl DEPENDS_ON SPDXRef-Package-32-cryptography
+Relationship: SPDXRef-Package-32-cryptography DEPENDS_ON SPDXRef-Package-33-cffi
+Relationship: SPDXRef-Package-33-cffi DEPENDS_ON SPDXRef-Package-34-pycparser
+Relationship: SPDXRef-Package-36-google-apitools DEPENDS_ON SPDXRef-Package-19-fasteners
+Relationship: SPDXRef-Package-36-google-apitools DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-36-google-apitools DEPENDS_ON SPDXRef-Package-25-httplib2
+Relationship: SPDXRef-Package-36-google-apitools DEPENDS_ON SPDXRef-Package-27-oauth2client
+Relationship: SPDXRef-Package-37-google-auth DEPENDS_ON SPDXRef-Package-29-pyasn1-modules
+Relationship: SPDXRef-Package-37-google-auth DEPENDS_ON SPDXRef-Package-30-rsa
+Relationship: SPDXRef-Package-37-google-auth DEPENDS_ON SPDXRef-Package-38-cachetools
+Relationship: SPDXRef-Package-40-jinja2 DEPENDS_ON SPDXRef-Package-41-markupsafe
+Relationship: SPDXRef-Package-42-jsonschema DEPENDS_ON SPDXRef-Package-43-jsonschema-specifications
+Relationship: SPDXRef-Package-42-jsonschema DEPENDS_ON SPDXRef-Package-44-referencing
+Relationship: SPDXRef-Package-42-jsonschema DEPENDS_ON SPDXRef-Package-45-rpds-py
+Relationship: SPDXRef-Package-42-jsonschema DEPENDS_ON SPDXRef-Package-6-attrs
+Relationship: SPDXRef-Package-43-jsonschema-specifications DEPENDS_ON SPDXRef-Package-44-referencing
+Relationship: SPDXRef-Package-44-referencing DEPENDS_ON SPDXRef-Package-45-rpds-py
+Relationship: SPDXRef-Package-44-referencing DEPENDS_ON SPDXRef-Package-6-attrs
+Relationship: SPDXRef-Package-46-lib4sbom DEPENDS_ON SPDXRef-Package-13-defusedxml
+Relationship: SPDXRef-Package-46-lib4sbom DEPENDS_ON SPDXRef-Package-47-pyyaml
+Relationship: SPDXRef-Package-46-lib4sbom DEPENDS_ON SPDXRef-Package-48-semantic-version
+Relationship: SPDXRef-Package-51-plotly DEPENDS_ON SPDXRef-Package-50-packaging
+Relationship: SPDXRef-Package-51-plotly DEPENDS_ON SPDXRef-Package-52-tenacity
+Relationship: SPDXRef-Package-54-requests DEPENDS_ON SPDXRef-Package-55-certifi
+Relationship: SPDXRef-Package-54-requests DEPENDS_ON SPDXRef-Package-56-charset-normalizer
+Relationship: SPDXRef-Package-54-requests DEPENDS_ON SPDXRef-Package-57-urllib3
+Relationship: SPDXRef-Package-54-requests DEPENDS_ON SPDXRef-Package-9-idna
+Relationship: SPDXRef-Package-58-rich DEPENDS_ON SPDXRef-Package-59-markdown-it-py
+Relationship: SPDXRef-Package-58-rich DEPENDS_ON SPDXRef-Package-61-pygments
+Relationship: SPDXRef-Package-59-markdown-it-py DEPENDS_ON SPDXRef-Package-60-mdurl
+Relationship: SPDXRef-Package-64-xmlschema DEPENDS_ON SPDXRef-Package-65-elementpath
Relationship: SPDXRef-Package-8-yarl DEPENDS_ON SPDXRef-Package-7-multidict
Relationship: SPDXRef-Package-8-yarl DEPENDS_ON SPDXRef-Package-9-idna