diff --git a/sbom/cve-bin-tool-py3.9.json b/sbom/cve-bin-tool-py3.9.json
index d1697aec4d..6c12b022a8 100644
--- a/sbom/cve-bin-tool-py3.9.json
+++ b/sbom/cve-bin-tool-py3.9.json
@@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.5",
- "serialNumber": "urn:uuid:6cffe2e5-f097-426f-93e1-c6436c2f0c75",
+ "serialNumber": "urn:uuid:52c1c453-651a-472a-af0b-c4d27ed2894b",
"version": 1,
"metadata": {
- "timestamp": "2024-03-04T00:27:21Z",
+ "timestamp": "2024-03-11T00:28:07Z",
"tools": {
"components": [
{
@@ -596,7 +596,49 @@
},
{
"type": "library",
- "bom-ref": "15-gsutil",
+ "bom-ref": "15-filetype",
+ "name": "filetype",
+ "version": "1.2.0",
+ "supplier": {
+ "name": "Tomas Aparicio",
+ "contact": [
+ {
+ "email": "tomas@aparicio.me"
+ }
+ ]
+ },
+ "cpe": "cpe:2.3:a:tomas_aparicio:filetype:1.2.0:*:*:*:*:*:*:*",
+ "description": "Infer file type and MIME type of any file/buffer. No external dependencies.",
+ "licenses": [
+ {
+ "license": {
+ "id": "MIT",
+ "url": "https://opensource.org/licenses/MIT"
+ }
+ }
+ ],
+ "externalReferences": [
+ {
+ "url": "https://pypi.org/project/filetype/1.2.0",
+ "type": "distribution",
+ "comment": "Download location for component"
+ }
+ ],
+ "purl": "pkg:pypi/filetype@1.2.0",
+ "properties": [
+ {
+ "name": "language",
+ "value": "Python"
+ },
+ {
+ "name": "python_version",
+ "value": "3.9.18"
+ }
+ ]
+ },
+ {
+ "type": "library",
+ "bom-ref": "16-gsutil",
"name": "gsutil",
"version": "5.27",
"supplier": {
@@ -642,9 +684,9 @@
},
{
"type": "library",
- "bom-ref": "16-argcomplete",
+ "bom-ref": "17-argcomplete",
"name": "argcomplete",
- "version": "3.2.2",
+ "version": "3.2.3",
"supplier": {
"name": "Andrey Kislyuk",
"contact": [
@@ -653,7 +695,7 @@
}
]
},
- "cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.2:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.3:*:*:*:*:*:*:*",
"description": "Bash tab completion for argparse",
"licenses": [
{
@@ -665,12 +707,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/argcomplete/3.2.2",
+ "url": "https://pypi.org/project/argcomplete/3.2.3",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/argcomplete@3.2.2",
+ "purl": "pkg:pypi/argcomplete@3.2.3",
"properties": [
{
"name": "language",
@@ -688,7 +730,7 @@
},
{
"type": "library",
- "bom-ref": "17-crcmod",
+ "bom-ref": "18-crcmod",
"name": "crcmod",
"version": "1.7",
"supplier": {
@@ -730,7 +772,7 @@
},
{
"type": "library",
- "bom-ref": "18-fasteners",
+ "bom-ref": "19-fasteners",
"name": "fasteners",
"version": "0.19",
"supplier": {
@@ -767,7 +809,7 @@
},
{
"type": "library",
- "bom-ref": "19-gcs-oauth2-boto-plugin",
+ "bom-ref": "20-gcs-oauth2-boto-plugin",
"name": "gcs-oauth2-boto-plugin",
"version": "3.0",
"supplier": {
@@ -813,7 +855,7 @@
},
{
"type": "library",
- "bom-ref": "20-boto",
+ "bom-ref": "21-boto",
"name": "boto",
"version": "2.49.0",
"supplier": {
@@ -855,7 +897,7 @@
},
{
"type": "library",
- "bom-ref": "21-google-reauth",
+ "bom-ref": "22-google-reauth",
"name": "google-reauth",
"version": "0.1.1",
"supplier": {
@@ -901,7 +943,7 @@
},
{
"type": "library",
- "bom-ref": "22-pyu2f",
+ "bom-ref": "23-pyu2f",
"name": "pyu2f",
"version": "0.1.5",
"supplier": {
@@ -947,7 +989,7 @@
},
{
"type": "library",
- "bom-ref": "23-six",
+ "bom-ref": "24-six",
"name": "six",
"version": "1.16.0",
"supplier": {
@@ -989,7 +1031,7 @@
},
{
"type": "library",
- "bom-ref": "24-httplib2",
+ "bom-ref": "25-httplib2",
"name": "httplib2",
"version": "0.20.4",
"supplier": {
@@ -1031,9 +1073,9 @@
},
{
"type": "library",
- "bom-ref": "25-pyparsing",
+ "bom-ref": "26-pyparsing",
"name": "pyparsing",
- "version": "3.1.1",
+ "version": "3.1.2",
"supplier": {
"name": "Paul McGuire",
"contact": [
@@ -1042,16 +1084,16 @@
}
]
},
- "cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.1:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.2:*:*:*:*:*:*:*",
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
"externalReferences": [
{
- "url": "https://pypi.org/project/pyparsing/3.1.1",
+ "url": "https://pypi.org/project/pyparsing/3.1.2",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/pyparsing@3.1.1",
+ "purl": "pkg:pypi/pyparsing@3.1.2",
"properties": [
{
"name": "language",
@@ -1065,7 +1107,7 @@
},
{
"type": "library",
- "bom-ref": "26-oauth2client",
+ "bom-ref": "27-oauth2client",
"name": "oauth2client",
"version": "4.1.3",
"supplier": {
@@ -1111,7 +1153,7 @@
},
{
"type": "library",
- "bom-ref": "27-pyasn1",
+ "bom-ref": "28-pyasn1",
"name": "pyasn1",
"version": "0.5.1",
"supplier": {
@@ -1153,7 +1195,7 @@
},
{
"type": "library",
- "bom-ref": "28-pyasn1-modules",
+ "bom-ref": "29-pyasn1-modules",
"name": "pyasn1-modules",
"version": "0.3.0",
"supplier": {
@@ -1199,7 +1241,7 @@
},
{
"type": "library",
- "bom-ref": "29-rsa",
+ "bom-ref": "30-rsa",
"name": "rsa",
"version": "4.7.2",
"supplier": {
@@ -1245,9 +1287,9 @@
},
{
"type": "library",
- "bom-ref": "30-pyopenssl",
+ "bom-ref": "31-pyopenssl",
"name": "pyopenssl",
- "version": "24.0.0",
+ "version": "24.1.0",
"supplier": {
"name": "The pyOpenSSL developers",
"contact": [
@@ -1256,7 +1298,7 @@
}
]
},
- "cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.0.0:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.1.0:*:*:*:*:*:*:*",
"description": "Python wrapper module around the OpenSSL library",
"licenses": [
{
@@ -1268,12 +1310,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/pyOpenSSL/24.0.0",
+ "url": "https://pypi.org/project/pyOpenSSL/24.1.0",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/pyopenssl@24.0.0",
+ "purl": "pkg:pypi/pyopenssl@24.1.0",
"properties": [
{
"name": "language",
@@ -1291,7 +1333,7 @@
},
{
"type": "library",
- "bom-ref": "31-cryptography",
+ "bom-ref": "32-cryptography",
"name": "cryptography",
"version": "42.0.5",
"supplier": {
@@ -1330,7 +1372,7 @@
},
{
"type": "library",
- "bom-ref": "32-cffi",
+ "bom-ref": "33-cffi",
"name": "cffi",
"version": "1.16.0",
"supplier": {
@@ -1372,7 +1414,7 @@
},
{
"type": "library",
- "bom-ref": "33-pycparser",
+ "bom-ref": "34-pycparser",
"name": "pycparser",
"version": "2.21",
"supplier": {
@@ -1418,7 +1460,7 @@
},
{
"type": "library",
- "bom-ref": "34-retry-decorator",
+ "bom-ref": "35-retry-decorator",
"name": "retry-decorator",
"version": "1.1.1",
"supplier": {
@@ -1460,7 +1502,7 @@
},
{
"type": "library",
- "bom-ref": "35-google-apitools",
+ "bom-ref": "36-google-apitools",
"name": "google-apitools",
"version": "0.5.32",
"supplier": {
@@ -1506,9 +1548,9 @@
},
{
"type": "library",
- "bom-ref": "36-google-auth",
+ "bom-ref": "37-google-auth",
"name": "google-auth",
- "version": "2.28.1",
+ "version": "2.28.2",
"supplier": {
"name": "Google Cloud Platform",
"contact": [
@@ -1517,7 +1559,7 @@
}
]
},
- "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.28.1:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.28.2:*:*:*:*:*:*:*",
"description": "Google Authentication Library",
"licenses": [
{
@@ -1529,12 +1571,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/google-auth/2.28.1",
+ "url": "https://pypi.org/project/google-auth/2.28.2",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/google-auth@2.28.1",
+ "purl": "pkg:pypi/google-auth@2.28.2",
"properties": [
{
"name": "language",
@@ -1552,7 +1594,7 @@
},
{
"type": "library",
- "bom-ref": "37-cachetools",
+ "bom-ref": "38-cachetools",
"name": "cachetools",
"version": "5.3.3",
"supplier": {
@@ -1594,7 +1636,7 @@
},
{
"type": "library",
- "bom-ref": "38-monotonic",
+ "bom-ref": "39-monotonic",
"name": "monotonic",
"version": "1.6",
"supplier": {
@@ -1640,9 +1682,9 @@
},
{
"type": "library",
- "bom-ref": "39-importlib-metadata",
+ "bom-ref": "40-importlib-metadata",
"name": "importlib-metadata",
- "version": "7.0.1",
+ "version": "7.0.2",
"supplier": {
"name": "Jason R . Coombs",
"contact": [
@@ -1651,16 +1693,16 @@
}
]
},
- "cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:7.0.1:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:7.0.2:*:*:*:*:*:*:*",
"description": "Read metadata from Python packages",
"externalReferences": [
{
- "url": "https://pypi.org/project/importlib-metadata/7.0.1",
+ "url": "https://pypi.org/project/importlib_metadata/7.0.2",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/importlib-metadata@7.0.1",
+ "purl": "pkg:pypi/importlib-metadata@7.0.2",
"properties": [
{
"name": "language",
@@ -1674,7 +1716,7 @@
},
{
"type": "library",
- "bom-ref": "40-zipp",
+ "bom-ref": "41-zipp",
"name": "zipp",
"version": "3.17.0",
"supplier": {
@@ -1708,7 +1750,7 @@
},
{
"type": "library",
- "bom-ref": "41-jinja2",
+ "bom-ref": "42-jinja2",
"name": "jinja2",
"version": "3.1.3",
"description": "A very fast and expressive template engine.",
@@ -1741,7 +1783,7 @@
},
{
"type": "library",
- "bom-ref": "42-markupsafe",
+ "bom-ref": "43-markupsafe",
"name": "markupsafe",
"version": "2.1.5",
"description": "Safely add untrusted strings to HTML/XML markup.",
@@ -1774,7 +1816,7 @@
},
{
"type": "library",
- "bom-ref": "43-jsonschema",
+ "bom-ref": "44-jsonschema",
"name": "jsonschema",
"version": "4.21.1",
"supplier": {
@@ -1811,7 +1853,7 @@
},
{
"type": "library",
- "bom-ref": "44-jsonschema-specifications",
+ "bom-ref": "45-jsonschema-specifications",
"name": "jsonschema-specifications",
"version": "2023.12.1",
"supplier": {
@@ -1848,7 +1890,7 @@
},
{
"type": "library",
- "bom-ref": "45-referencing",
+ "bom-ref": "46-referencing",
"name": "referencing",
"version": "0.33.0",
"supplier": {
@@ -1885,7 +1927,7 @@
},
{
"type": "library",
- "bom-ref": "46-rpds-py",
+ "bom-ref": "47-rpds-py",
"name": "rpds-py",
"version": "0.18.0",
"supplier": {
@@ -1922,7 +1964,7 @@
},
{
"type": "library",
- "bom-ref": "47-lib4sbom",
+ "bom-ref": "48-lib4sbom",
"name": "lib4sbom",
"version": "0.6.2",
"supplier": {
@@ -1964,7 +2006,7 @@
},
{
"type": "library",
- "bom-ref": "48-pyyaml",
+ "bom-ref": "49-pyyaml",
"name": "pyyaml",
"version": "6.0.1",
"supplier": {
@@ -2006,7 +2048,7 @@
},
{
"type": "library",
- "bom-ref": "49-semantic-version",
+ "bom-ref": "50-semantic-version",
"name": "semantic-version",
"version": "2.10.0",
"supplier": {
@@ -2052,7 +2094,7 @@
},
{
"type": "library",
- "bom-ref": "50-packageurl-python",
+ "bom-ref": "51-packageurl-python",
"name": "packageurl-python",
"version": "0.14.0",
"supplier": {
@@ -2089,9 +2131,9 @@
},
{
"type": "library",
- "bom-ref": "51-packaging",
+ "bom-ref": "52-packaging",
"name": "packaging",
- "version": "23.2",
+ "version": "24.0",
"supplier": {
"name": "Donald Stufft",
"contact": [
@@ -2100,16 +2142,16 @@
}
]
},
- "cpe": "cpe:2.3:a:donald_stufft:packaging:23.2:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:donald_stufft:packaging:24.0:*:*:*:*:*:*:*",
"description": "Core utilities for Python packages",
"externalReferences": [
{
- "url": "https://pypi.org/project/packaging/23.2",
+ "url": "https://pypi.org/project/packaging/24.0",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/packaging@23.2",
+ "purl": "pkg:pypi/packaging@24.0",
"properties": [
{
"name": "language",
@@ -2123,7 +2165,7 @@
},
{
"type": "library",
- "bom-ref": "52-plotly",
+ "bom-ref": "53-plotly",
"name": "plotly",
"version": "5.19.0",
"supplier": {
@@ -2165,7 +2207,7 @@
},
{
"type": "library",
- "bom-ref": "53-tenacity",
+ "bom-ref": "54-tenacity",
"name": "tenacity",
"version": "8.2.3",
"supplier": {
@@ -2211,7 +2253,7 @@
},
{
"type": "library",
- "bom-ref": "54-python-gnupg",
+ "bom-ref": "55-python-gnupg",
"name": "python-gnupg",
"version": "0.5.2",
"supplier": {
@@ -2257,7 +2299,7 @@
},
{
"type": "library",
- "bom-ref": "55-requests",
+ "bom-ref": "56-requests",
"name": "requests",
"version": "2.31.0",
"supplier": {
@@ -2303,7 +2345,7 @@
},
{
"type": "library",
- "bom-ref": "56-certifi",
+ "bom-ref": "57-certifi",
"name": "certifi",
"version": "2024.2.2",
"supplier": {
@@ -2345,7 +2387,7 @@
},
{
"type": "library",
- "bom-ref": "57-charset-normalizer",
+ "bom-ref": "58-charset-normalizer",
"name": "charset-normalizer",
"version": "3.3.2",
"supplier": {
@@ -2387,7 +2429,7 @@
},
{
"type": "library",
- "bom-ref": "58-urllib3",
+ "bom-ref": "59-urllib3",
"name": "urllib3",
"version": "2.2.1",
"supplier": {
@@ -2421,7 +2463,7 @@
},
{
"type": "library",
- "bom-ref": "59-rich",
+ "bom-ref": "60-rich",
"name": "rich",
"version": "13.7.1",
"supplier": {
@@ -2463,7 +2505,7 @@
},
{
"type": "library",
- "bom-ref": "60-markdown-it-py",
+ "bom-ref": "61-markdown-it-py",
"name": "markdown-it-py",
"version": "3.0.0",
"supplier": {
@@ -2497,7 +2539,7 @@
},
{
"type": "library",
- "bom-ref": "61-mdurl",
+ "bom-ref": "62-mdurl",
"name": "mdurl",
"version": "0.1.2",
"supplier": {
@@ -2531,7 +2573,7 @@
},
{
"type": "library",
- "bom-ref": "62-pygments",
+ "bom-ref": "63-pygments",
"name": "pygments",
"version": "2.17.2",
"supplier": {
@@ -2573,7 +2615,7 @@
},
{
"type": "library",
- "bom-ref": "63-rpmfile",
+ "bom-ref": "64-rpmfile",
"name": "rpmfile",
"version": "2.0.0",
"supplier": {
@@ -2615,7 +2657,7 @@
},
{
"type": "library",
- "bom-ref": "64-toml",
+ "bom-ref": "65-toml",
"name": "toml",
"version": "0.10.2",
"supplier": {
@@ -2657,7 +2699,7 @@
},
{
"type": "library",
- "bom-ref": "65-xmlschema",
+ "bom-ref": "66-xmlschema",
"name": "xmlschema",
"version": "3.0.2",
"supplier": {
@@ -2699,7 +2741,7 @@
},
{
"type": "library",
- "bom-ref": "66-elementpath",
+ "bom-ref": "67-elementpath",
"name": "elementpath",
"version": "4.3.0",
"supplier": {
@@ -2741,7 +2783,7 @@
},
{
"type": "library",
- "bom-ref": "67-zstandard",
+ "bom-ref": "68-zstandard",
"name": "zstandard",
"version": "0.22.0",
"supplier": {
@@ -2801,23 +2843,24 @@
"12-cvss",
"13-defusedxml",
"14-distro",
- "15-gsutil",
- "39-importlib-metadata",
- "41-jinja2",
- "43-jsonschema",
- "47-lib4sbom",
- "50-packageurl-python",
- "51-packaging",
- "52-plotly",
- "54-python-gnupg",
- "48-pyyaml",
- "55-requests",
- "59-rich",
- "63-rpmfile",
- "64-toml",
- "58-urllib3",
- "65-xmlschema",
- "67-zstandard"
+ "15-filetype",
+ "16-gsutil",
+ "40-importlib-metadata",
+ "42-jinja2",
+ "44-jsonschema",
+ "48-lib4sbom",
+ "51-packageurl-python",
+ "52-packaging",
+ "53-plotly",
+ "55-python-gnupg",
+ "49-pyyaml",
+ "56-requests",
+ "60-rich",
+ "64-rpmfile",
+ "65-toml",
+ "59-urllib3",
+ "66-xmlschema",
+ "68-zstandard"
]
},
{
@@ -2851,185 +2894,185 @@
]
},
{
- "ref": "15-gsutil",
+ "ref": "16-gsutil",
"dependsOn": [
- "16-argcomplete",
- "17-crcmod",
- "18-fasteners",
- "19-gcs-oauth2-boto-plugin",
- "35-google-apitools",
- "36-google-auth",
- "21-google-reauth",
- "24-httplib2",
- "38-monotonic",
- "30-pyopenssl",
- "34-retry-decorator",
- "23-six"
- ]
- },
- {
- "ref": "19-gcs-oauth2-boto-plugin",
+ "17-argcomplete",
+ "18-crcmod",
+ "19-fasteners",
+ "20-gcs-oauth2-boto-plugin",
+ "36-google-apitools",
+ "37-google-auth",
+ "22-google-reauth",
+ "25-httplib2",
+ "39-monotonic",
+ "31-pyopenssl",
+ "35-retry-decorator",
+ "24-six"
+ ]
+ },
+ {
+ "ref": "20-gcs-oauth2-boto-plugin",
"dependsOn": [
- "20-boto",
- "21-google-reauth",
- "24-httplib2",
- "26-oauth2client",
- "30-pyopenssl",
- "34-retry-decorator",
- "29-rsa",
- "23-six"
+ "21-boto",
+ "22-google-reauth",
+ "25-httplib2",
+ "27-oauth2client",
+ "31-pyopenssl",
+ "35-retry-decorator",
+ "30-rsa",
+ "24-six"
]
},
{
- "ref": "21-google-reauth",
+ "ref": "22-google-reauth",
"dependsOn": [
- "22-pyu2f"
+ "23-pyu2f"
]
},
{
- "ref": "22-pyu2f",
+ "ref": "23-pyu2f",
"dependsOn": [
- "23-six"
+ "24-six"
]
},
{
- "ref": "24-httplib2",
+ "ref": "25-httplib2",
"dependsOn": [
- "25-pyparsing"
+ "26-pyparsing"
]
},
{
- "ref": "26-oauth2client",
+ "ref": "27-oauth2client",
"dependsOn": [
- "24-httplib2",
- "27-pyasn1",
- "28-pyasn1-modules",
- "29-rsa",
- "23-six"
+ "25-httplib2",
+ "28-pyasn1",
+ "29-pyasn1-modules",
+ "30-rsa",
+ "24-six"
]
},
{
- "ref": "28-pyasn1-modules",
+ "ref": "29-pyasn1-modules",
"dependsOn": [
- "27-pyasn1"
+ "28-pyasn1"
]
},
{
- "ref": "29-rsa",
+ "ref": "30-rsa",
"dependsOn": [
- "27-pyasn1"
+ "28-pyasn1"
]
},
{
- "ref": "30-pyopenssl",
+ "ref": "31-pyopenssl",
"dependsOn": [
- "31-cryptography"
+ "32-cryptography"
]
},
{
- "ref": "31-cryptography",
+ "ref": "32-cryptography",
"dependsOn": [
- "32-cffi"
+ "33-cffi"
]
},
{
- "ref": "32-cffi",
+ "ref": "33-cffi",
"dependsOn": [
- "33-pycparser"
+ "34-pycparser"
]
},
{
- "ref": "35-google-apitools",
+ "ref": "36-google-apitools",
"dependsOn": [
- "18-fasteners",
- "24-httplib2",
- "26-oauth2client",
- "23-six"
+ "19-fasteners",
+ "25-httplib2",
+ "27-oauth2client",
+ "24-six"
]
},
{
- "ref": "36-google-auth",
+ "ref": "37-google-auth",
"dependsOn": [
- "37-cachetools",
- "28-pyasn1-modules",
- "29-rsa"
+ "38-cachetools",
+ "29-pyasn1-modules",
+ "30-rsa"
]
},
{
- "ref": "39-importlib-metadata",
+ "ref": "40-importlib-metadata",
"dependsOn": [
- "40-zipp"
+ "41-zipp"
]
},
{
- "ref": "41-jinja2",
+ "ref": "42-jinja2",
"dependsOn": [
- "42-markupsafe"
+ "43-markupsafe"
]
},
{
- "ref": "43-jsonschema",
+ "ref": "44-jsonschema",
"dependsOn": [
"6-attrs",
- "44-jsonschema-specifications",
- "45-referencing",
- "46-rpds-py"
+ "45-jsonschema-specifications",
+ "46-referencing",
+ "47-rpds-py"
]
},
{
- "ref": "44-jsonschema-specifications",
+ "ref": "45-jsonschema-specifications",
"dependsOn": [
- "45-referencing"
+ "46-referencing"
]
},
{
- "ref": "45-referencing",
+ "ref": "46-referencing",
"dependsOn": [
"6-attrs",
- "46-rpds-py"
+ "47-rpds-py"
]
},
{
- "ref": "47-lib4sbom",
+ "ref": "48-lib4sbom",
"dependsOn": [
"13-defusedxml",
- "48-pyyaml",
- "49-semantic-version"
+ "49-pyyaml",
+ "50-semantic-version"
]
},
{
- "ref": "52-plotly",
+ "ref": "53-plotly",
"dependsOn": [
- "51-packaging",
- "53-tenacity"
+ "52-packaging",
+ "54-tenacity"
]
},
{
- "ref": "55-requests",
+ "ref": "56-requests",
"dependsOn": [
- "56-certifi",
- "57-charset-normalizer",
+ "57-certifi",
+ "58-charset-normalizer",
"9-idna",
- "58-urllib3"
+ "59-urllib3"
]
},
{
- "ref": "59-rich",
+ "ref": "60-rich",
"dependsOn": [
- "60-markdown-it-py",
- "62-pygments"
+ "61-markdown-it-py",
+ "63-pygments"
]
},
{
- "ref": "60-markdown-it-py",
+ "ref": "61-markdown-it-py",
"dependsOn": [
- "61-mdurl"
+ "62-mdurl"
]
},
{
- "ref": "65-xmlschema",
+ "ref": "66-xmlschema",
"dependsOn": [
- "66-elementpath"
+ "67-elementpath"
]
}
]
diff --git a/sbom/cve-bin-tool-py3.9.spdx b/sbom/cve-bin-tool-py3.9.spdx
index 433431ec56..a8c4da6b6c 100644
--- a/sbom/cve-bin-tool-py3.9.spdx
+++ b/sbom/cve-bin-tool-py3.9.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-c9bf0ce8-a725-41cf-a9fc-94bd05a25de3
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-7c259e22-62e0-4bfa-9384-f4c9f845e046
LicenseListVersion: 3.22
Creator: Tool: sbom4python-0.10.3
-Created: 2024-03-04T00:25:42Z
+Created: 2024-03-11T00:26:19Z
CreatorComment: This document has been automatically generated.
#####
@@ -224,8 +224,23 @@ ExternalRef: PACKAGE-MANAGER purl pkg:pypi/distro@1.9.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:nir_cohen:distro:1.9.0:*:*:*:*:*:*:*
#####
+PackageName: filetype
+SPDXID: SPDXRef-Package-15-filetype
+PackageVersion: 1.2.0
+PrimaryPackagePurpose: LIBRARY
+PackageSupplier: Person: Tomas Aparicio (tomas@aparicio.me)
+PackageDownloadLocation: https://pypi.org/project/filetype/1.2.0
+FilesAnalyzed: false
+PackageLicenseDeclared: MIT
+PackageLicenseConcluded: MIT
+PackageCopyrightText: NOASSERTION
+PackageSummary: Infer file type and MIME type of any file/buffer. No external dependencies.
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/filetype@1.2.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:tomas_aparicio:filetype:1.2.0:*:*:*:*:*:*:*
+#####
+
PackageName: gsutil
-SPDXID: SPDXRef-Package-15-gsutil
+SPDXID: SPDXRef-Package-16-gsutil
PackageVersion: 5.27
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google Inc. (buganizer-system+187143@google.com)
@@ -241,23 +256,23 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gsutil:5.27:*:*:*:*:*:*:*
#####
PackageName: argcomplete
-SPDXID: SPDXRef-Package-16-argcomplete
-PackageVersion: 3.2.2
+SPDXID: SPDXRef-Package-17-argcomplete
+PackageVersion: 3.2.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Andrey Kislyuk (kislyuk@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/argcomplete/3.2.2
+PackageDownloadLocation: https://pypi.org/project/argcomplete/3.2.3
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: Apache-2.0
PackageLicenseComments: argcomplete declares Apache Software License which is not currently a valid SPDX License identifier or expression.
PackageCopyrightText: NOASSERTION
PackageSummary: Bash tab completion for argparse
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/argcomplete@3.2.2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/argcomplete@3.2.3
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.3:*:*:*:*:*:*:*
#####
PackageName: crcmod
-SPDXID: SPDXRef-Package-17-crcmod
+SPDXID: SPDXRef-Package-18-crcmod
PackageVersion: 1.7
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ray Buvel (rlbuvel@gmail.com)
@@ -272,7 +287,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ray_buvel:crcmod:1.7:*:*:*:*:*:*:*
#####
PackageName: fasteners
-SPDXID: SPDXRef-Package-18-fasteners
+SPDXID: SPDXRef-Package-19-fasteners
PackageVersion: 0.19
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Joshua Harlow
@@ -287,7 +302,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:joshua_harlow:fasteners:0.19:*:*:*:*:*
#####
PackageName: gcs-oauth2-boto-plugin
-SPDXID: SPDXRef-Package-19-gcs-oauth2-boto-plugin
+SPDXID: SPDXRef-Package-20-gcs-oauth2-boto-plugin
PackageVersion: 3.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google Inc. (gs-team@google.com)
@@ -303,7 +318,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gcs-oauth2-boto-plugin:3.0
#####
PackageName: boto
-SPDXID: SPDXRef-Package-20-boto
+SPDXID: SPDXRef-Package-21-boto
PackageVersion: 2.49.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Mitch Garnaat (mitch@garnaat.com)
@@ -318,7 +333,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:mitch_garnaat:boto:2.49.0:*:*:*:*:*:*:
#####
PackageName: google-reauth
-SPDXID: SPDXRef-Package-21-google-reauth
+SPDXID: SPDXRef-Package-22-google-reauth
PackageVersion: 0.1.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google (googleapis-publisher@google.com)
@@ -334,7 +349,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google:google-reauth:0.1.1:*:*:*:*:*:*
#####
PackageName: pyu2f
-SPDXID: SPDXRef-Package-22-pyu2f
+SPDXID: SPDXRef-Package-23-pyu2f
PackageVersion: 0.1.5
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google Inc. (pyu2f-team@google.com)
@@ -350,7 +365,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:pyu2f:0.1.5:*:*:*:*:*:*:*
#####
PackageName: six
-SPDXID: SPDXRef-Package-23-six
+SPDXID: SPDXRef-Package-24-six
PackageVersion: 1.16.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Benjamin Peterson (benjamin@python.org)
@@ -365,7 +380,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:benjamin_peterson:six:1.16.0:*:*:*:*:*
#####
PackageName: httplib2
-SPDXID: SPDXRef-Package-24-httplib2
+SPDXID: SPDXRef-Package-25-httplib2
PackageVersion: 0.20.4
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Joe Gregorio (joe@bitworking.org)
@@ -380,22 +395,22 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:joe_gregorio:httplib2:0.20.4:*:*:*:*:*
#####
PackageName: pyparsing
-SPDXID: SPDXRef-Package-25-pyparsing
-PackageVersion: 3.1.1
+SPDXID: SPDXRef-Package-26-pyparsing
+PackageVersion: 3.1.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Paul McGuire (ptmcg.gm+pyparsing@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/pyparsing/3.1.1
+PackageDownloadLocation: https://pypi.org/project/pyparsing/3.1.2
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: pyparsing module - Classes and methods to define and execute parsing grammars
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyparsing@3.1.1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:paul_mcguire:pyparsing:3.1.1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyparsing@3.1.2
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:paul_mcguire:pyparsing:3.1.2:*:*:*:*:*:*:*
#####
PackageName: oauth2client
-SPDXID: SPDXRef-Package-26-oauth2client
+SPDXID: SPDXRef-Package-27-oauth2client
PackageVersion: 4.1.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Google Inc. (jonwayne+oauth2client@google.com)
@@ -411,7 +426,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:oauth2client:4.1.3:*:*:*:*
#####
PackageName: pyasn1
-SPDXID: SPDXRef-Package-27-pyasn1
+SPDXID: SPDXRef-Package-28-pyasn1
PackageVersion: 0.5.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ilya Etingof (etingof@gmail.com)
@@ -426,7 +441,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ilya_etingof:pyasn1:0.5.1:*:*:*:*:*:*:
#####
PackageName: pyasn1-modules
-SPDXID: SPDXRef-Package-28-pyasn1-modules
+SPDXID: SPDXRef-Package-29-pyasn1-modules
PackageVersion: 0.3.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ilya Etingof (etingof@gmail.com)
@@ -442,7 +457,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ilya_etingof:pyasn1-modules:0.3.0:*:*:
#####
PackageName: rsa
-SPDXID: SPDXRef-Package-29-rsa
+SPDXID: SPDXRef-Package-30-rsa
PackageVersion: 4.7.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Sybren A. Stuvel (sybren@stuvel.eu)
@@ -458,23 +473,23 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:sybren_a._stuvel:rsa:4.7.2:*:*:*:*:*:*
#####
PackageName: pyopenssl
-SPDXID: SPDXRef-Package-30-pyopenssl
-PackageVersion: 24.0.0
+SPDXID: SPDXRef-Package-31-pyopenssl
+PackageVersion: 24.1.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: The pyOpenSSL developers (cryptography-dev@python.org)
-PackageDownloadLocation: https://pypi.org/project/pyOpenSSL/24.0.0
+PackageDownloadLocation: https://pypi.org/project/pyOpenSSL/24.1.0
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: Apache-2.0
PackageLicenseComments: pyOpenSSL declares Apache License, Version 2.0 which is not currently a valid SPDX License identifier or expression.
PackageCopyrightText: NOASSERTION
PackageSummary: Python wrapper module around the OpenSSL library
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyopenssl@24.0.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.0.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyopenssl@24.1.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.1.0:*:*:*:*:*:*:*
#####
PackageName: cryptography
-SPDXID: SPDXRef-Package-31-cryptography
+SPDXID: SPDXRef-Package-32-cryptography
PackageVersion: 42.0.5
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: The Python Cryptographic Authority and individual contributors (cryptography-dev@python.org)
@@ -489,7 +504,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_python_cryptographic_authority_and
#####
PackageName: cffi
-SPDXID: SPDXRef-Package-32-cffi
+SPDXID: SPDXRef-Package-33-cffi
PackageVersion: 1.16.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Armin Maciej Fijalkowski (python-cffi@googlegroups.com)
@@ -504,7 +519,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:armin_maciej_fijalkowski:cffi:1.16.0:*
#####
PackageName: pycparser
-SPDXID: SPDXRef-Package-33-pycparser
+SPDXID: SPDXRef-Package-34-pycparser
PackageVersion: 2.21
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Eli Bendersky (eliben@gmail.com)
@@ -520,7 +535,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:eli_bendersky:pycparser:2.21:*:*:*:*:*
#####
PackageName: retry-decorator
-SPDXID: SPDXRef-Package-34-retry-decorator
+SPDXID: SPDXRef-Package-35-retry-decorator
PackageVersion: 1.1.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Patrick Ng (pn.appdev@gmail.com)
@@ -535,7 +550,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:patrick_ng:retry-decorator:1.1.1:*:*:*
#####
PackageName: google-apitools
-SPDXID: SPDXRef-Package-35-google-apitools
+SPDXID: SPDXRef-Package-36-google-apitools
PackageVersion: 0.5.32
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Craig Citro (craigcitro@google.com)
@@ -551,23 +566,23 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
#####
PackageName: google-auth
-SPDXID: SPDXRef-Package-36-google-auth
-PackageVersion: 2.28.1
+SPDXID: SPDXRef-Package-37-google-auth
+PackageVersion: 2.28.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Google Cloud Platform (googleapis-packages@google.com)
-PackageDownloadLocation: https://pypi.org/project/google-auth/2.28.1
+PackageDownloadLocation: https://pypi.org/project/google-auth/2.28.2
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: Apache-2.0
PackageLicenseComments: google-auth declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.
PackageCopyrightText: NOASSERTION
PackageSummary: Google Authentication Library
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.28.1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.28.1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.28.2
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.28.2:*:*:*:*:*:*:*
#####
PackageName: cachetools
-SPDXID: SPDXRef-Package-37-cachetools
+SPDXID: SPDXRef-Package-38-cachetools
PackageVersion: 5.3.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Thomas Kemmer (tkemmer@computer.org)
@@ -582,7 +597,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.3.3:*:*:*:*
#####
PackageName: monotonic
-SPDXID: SPDXRef-Package-38-monotonic
+SPDXID: SPDXRef-Package-39-monotonic
PackageVersion: 1.6
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ori Livneh (ori@wikimedia.org)
@@ -598,22 +613,22 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ori_livneh:monotonic:1.6:*:*:*:*:*:*:*
#####
PackageName: importlib-metadata
-SPDXID: SPDXRef-Package-39-importlib-metadata
-PackageVersion: 7.0.1
+SPDXID: SPDXRef-Package-40-importlib-metadata
+PackageVersion: 7.0.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Jason R. Coombs (jaraco@jaraco.com)
-PackageDownloadLocation: https://pypi.org/project/importlib-metadata/7.0.1
+PackageDownloadLocation: https://pypi.org/project/importlib_metadata/7.0.2
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: Read metadata from Python packages
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/importlib-metadata@7.0.1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:importlib-metadata:7.0.1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/importlib-metadata@7.0.2
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:importlib-metadata:7.0.2:*:*:*:*:*:*:*
#####
PackageName: zipp
-SPDXID: SPDXRef-Package-40-zipp
+SPDXID: SPDXRef-Package-41-zipp
PackageVersion: 3.17.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Jason R. Coombs (jaraco@jaraco.com)
@@ -628,7 +643,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:zipp:3.17.0:*:*:*:*:*:
#####
PackageName: jinja2
-SPDXID: SPDXRef-Package-41-jinja2
+SPDXID: SPDXRef-Package-42-jinja2
PackageVersion: 3.1.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: NOASSERTION
@@ -642,7 +657,7 @@ ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jinja2@3.1.3
#####
PackageName: markupsafe
-SPDXID: SPDXRef-Package-42-markupsafe
+SPDXID: SPDXRef-Package-43-markupsafe
PackageVersion: 2.1.5
PrimaryPackagePurpose: LIBRARY
PackageSupplier: NOASSERTION
@@ -656,7 +671,7 @@ ExternalRef: PACKAGE-MANAGER purl pkg:pypi/markupsafe@2.1.5
#####
PackageName: jsonschema
-SPDXID: SPDXRef-Package-43-jsonschema
+SPDXID: SPDXRef-Package-44-jsonschema
PackageVersion: 4.21.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman
@@ -671,7 +686,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema:4.21.1:*:*:*:
#####
PackageName: jsonschema-specifications
-SPDXID: SPDXRef-Package-44-jsonschema-specifications
+SPDXID: SPDXRef-Package-45-jsonschema-specifications
PackageVersion: 2023.12.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman
@@ -686,7 +701,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specification
#####
PackageName: referencing
-SPDXID: SPDXRef-Package-45-referencing
+SPDXID: SPDXRef-Package-46-referencing
PackageVersion: 0.33.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman
@@ -701,7 +716,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.33.0:*:*:*
#####
PackageName: rpds-py
-SPDXID: SPDXRef-Package-46-rpds-py
+SPDXID: SPDXRef-Package-47-rpds-py
PackageVersion: 0.18.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman
@@ -716,7 +731,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.18.0:*:*:*:*:*
#####
PackageName: lib4sbom
-SPDXID: SPDXRef-Package-47-lib4sbom
+SPDXID: SPDXRef-Package-48-lib4sbom
PackageVersion: 0.6.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Anthony Harrison (anthony.p.harrison@gmail.com)
@@ -731,7 +746,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.6.2:*:*:*:
#####
PackageName: pyyaml
-SPDXID: SPDXRef-Package-48-pyyaml
+SPDXID: SPDXRef-Package-49-pyyaml
PackageVersion: 6.0.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kirill Simonov (xi@resolvent.net)
@@ -746,7 +761,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kirill_simonov:pyyaml:6.0.1:*:*:*:*:*:
#####
PackageName: semantic-version
-SPDXID: SPDXRef-Package-49-semantic-version
+SPDXID: SPDXRef-Package-50-semantic-version
PackageVersion: 2.10.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Raphael Barrois (raphael.barrois+semver@polytechnique.org)
@@ -762,7 +777,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:raphael_barrois:semantic-version:2.10.
#####
PackageName: packageurl-python
-SPDXID: SPDXRef-Package-50-packageurl-python
+SPDXID: SPDXRef-Package-51-packageurl-python
PackageVersion: 0.14.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: the purl authors
@@ -777,22 +792,22 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.1
#####
PackageName: packaging
-SPDXID: SPDXRef-Package-51-packaging
-PackageVersion: 23.2
+SPDXID: SPDXRef-Package-52-packaging
+PackageVersion: 24.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Donald Stufft (donald@stufft.io)
-PackageDownloadLocation: https://pypi.org/project/packaging/23.2
+PackageDownloadLocation: https://pypi.org/project/packaging/24.0
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: Core utilities for Python packages
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packaging@23.2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:donald_stufft:packaging:23.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packaging@24.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:donald_stufft:packaging:24.0:*:*:*:*:*:*:*
#####
PackageName: plotly
-SPDXID: SPDXRef-Package-52-plotly
+SPDXID: SPDXRef-Package-53-plotly
PackageVersion: 5.19.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Chris P (chris@plot.ly)
@@ -807,7 +822,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.19.0:*:*:*:*:*:*:*
#####
PackageName: tenacity
-SPDXID: SPDXRef-Package-53-tenacity
+SPDXID: SPDXRef-Package-54-tenacity
PackageVersion: 8.2.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julien Danjou (julien@danjou.info)
@@ -823,7 +838,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julien_danjou:tenacity:8.2.3:*:*:*:*:*
#####
PackageName: python-gnupg
-SPDXID: SPDXRef-Package-54-python-gnupg
+SPDXID: SPDXRef-Package-55-python-gnupg
PackageVersion: 0.5.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Vinay Sajip (vinay_sajip@yahoo.co.uk)
@@ -839,7 +854,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.2:*:*:*:*
#####
PackageName: requests
-SPDXID: SPDXRef-Package-55-requests
+SPDXID: SPDXRef-Package-56-requests
PackageVersion: 2.31.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kenneth Reitz (me@kennethreitz.org)
@@ -855,7 +870,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:
#####
PackageName: certifi
-SPDXID: SPDXRef-Package-56-certifi
+SPDXID: SPDXRef-Package-57-certifi
PackageVersion: 2024.2.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kenneth Reitz (me@kennethreitz.com)
@@ -870,7 +885,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2024.2.2:*:*:*:*
#####
PackageName: charset-normalizer
-SPDXID: SPDXRef-Package-57-charset-normalizer
+SPDXID: SPDXRef-Package-58-charset-normalizer
PackageVersion: 3.3.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Ahmed TAHRI (ahmed.tahri@cloudnursery.dev)
@@ -885,7 +900,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ahmed_tahri:charset-normalizer:3.3.2:*
#####
PackageName: urllib3
-SPDXID: SPDXRef-Package-58-urllib3
+SPDXID: SPDXRef-Package-59-urllib3
PackageVersion: 2.2.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Andrey Petrov (andrey.petrov@shazow.net)
@@ -900,7 +915,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:2.2.1:*:*:*:*:*:
#####
PackageName: rich
-SPDXID: SPDXRef-Package-59-rich
+SPDXID: SPDXRef-Package-60-rich
PackageVersion: 13.7.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Will McGugan (willmcgugan@gmail.com)
@@ -915,7 +930,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.7.1:*:*:*:*:*:*:*
#####
PackageName: markdown-it-py
-SPDXID: SPDXRef-Package-60-markdown-it-py
+SPDXID: SPDXRef-Package-61-markdown-it-py
PackageVersion: 3.0.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Chris Sewell (chrisj_sewell@hotmail.com)
@@ -930,7 +945,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_sewell:markdown-it-py:3.0.0:*:*:
#####
PackageName: mdurl
-SPDXID: SPDXRef-Package-61-mdurl
+SPDXID: SPDXRef-Package-62-mdurl
PackageVersion: 0.1.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Taneli Hukkinen (hukkin@users.noreply.github.com)
@@ -945,7 +960,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:taneli_hukkinen:mdurl:0.1.2:*:*:*:*:*:
#####
PackageName: pygments
-SPDXID: SPDXRef-Package-62-pygments
+SPDXID: SPDXRef-Package-63-pygments
PackageVersion: 2.17.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Georg Brandl (georg@python.org)
@@ -960,7 +975,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:georg_brandl:pygments:2.17.2:*:*:*:*:*
#####
PackageName: rpmfile
-SPDXID: SPDXRef-Package-63-rpmfile
+SPDXID: SPDXRef-Package-64-rpmfile
PackageVersion: 2.0.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Sean Ross (srossross@gmail.com)
@@ -975,7 +990,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:sean_ross:rpmfile:2.0.0:*:*:*:*:*:*:*
#####
PackageName: toml
-SPDXID: SPDXRef-Package-64-toml
+SPDXID: SPDXRef-Package-65-toml
PackageVersion: 0.10.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: William Pearson (uiri@xqz.ca)
@@ -990,7 +1005,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:william_pearson:toml:0.10.2:*:*:*:*:*:
#####
PackageName: xmlschema
-SPDXID: SPDXRef-Package-65-xmlschema
+SPDXID: SPDXRef-Package-66-xmlschema
PackageVersion: 3.0.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Davide Brunato (brunato@sissa.it)
@@ -1005,7 +1020,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:xmlschema:3.0.2:*:*:*:*
#####
PackageName: elementpath
-SPDXID: SPDXRef-Package-66-elementpath
+SPDXID: SPDXRef-Package-67-elementpath
PackageVersion: 4.3.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Davide Brunato (brunato@sissa.it)
@@ -1020,7 +1035,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:elementpath:4.3.0:*:*:*
#####
PackageName: zstandard
-SPDXID: SPDXRef-Package-67-zstandard
+SPDXID: SPDXRef-Package-68-zstandard
PackageVersion: 0.22.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Gregory Szorc (gregory.szorc@gmail.com)
@@ -1040,93 +1055,94 @@ Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-10-beaut
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-12-cvss
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-13-defusedxml
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-14-distro
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-15-gsutil
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-15-filetype
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-16-gsutil
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-2-aiohttp
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-39-importlib-metadata
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-41-jinja2
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-43-jsonschema
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-47-lib4sbom
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-48-pyyaml
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-50-packageurl-python
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-51-packaging
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-52-plotly
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-54-python-gnupg
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-55-requests
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-58-urllib3
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-59-rich
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-63-rpmfile
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-64-toml
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-65-xmlschema
-Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-67-zstandard
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-40-importlib-metadata
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-42-jinja2
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-44-jsonschema
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-48-lib4sbom
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-49-pyyaml
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-51-packageurl-python
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-52-packaging
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-53-plotly
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-55-python-gnupg
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-56-requests
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-59-urllib3
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-60-rich
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-64-rpmfile
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-65-toml
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-66-xmlschema
+Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-68-zstandard
Relationship: SPDXRef-Package-10-beautifulsoup4 DEPENDS_ON SPDXRef-Package-11-soupsieve
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-16-argcomplete
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-17-crcmod
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-18-fasteners
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-19-gcs-oauth2-boto-plugin
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-21-google-reauth
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-24-httplib2
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-30-pyopenssl
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-34-retry-decorator
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-35-google-apitools
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-36-google-auth
-Relationship: SPDXRef-Package-15-gsutil DEPENDS_ON SPDXRef-Package-38-monotonic
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-20-boto
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-21-google-reauth
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-24-httplib2
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-26-oauth2client
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-29-rsa
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-30-pyopenssl
-Relationship: SPDXRef-Package-19-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-34-retry-decorator
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-17-argcomplete
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-18-crcmod
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-19-fasteners
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-20-gcs-oauth2-boto-plugin
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-22-google-reauth
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-25-httplib2
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-31-pyopenssl
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-35-retry-decorator
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-36-google-apitools
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-37-google-auth
+Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-39-monotonic
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-3-aiosignal
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-4-frozenlist
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-5-async-timeout
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-6-attrs
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-7-multidict
Relationship: SPDXRef-Package-2-aiohttp DEPENDS_ON SPDXRef-Package-8-yarl
-Relationship: SPDXRef-Package-21-google-reauth DEPENDS_ON SPDXRef-Package-22-pyu2f
-Relationship: SPDXRef-Package-22-pyu2f DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-24-httplib2 DEPENDS_ON SPDXRef-Package-25-pyparsing
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-24-httplib2
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-27-pyasn1
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-28-pyasn1-modules
-Relationship: SPDXRef-Package-26-oauth2client DEPENDS_ON SPDXRef-Package-29-rsa
-Relationship: SPDXRef-Package-28-pyasn1-modules DEPENDS_ON SPDXRef-Package-27-pyasn1
-Relationship: SPDXRef-Package-29-rsa DEPENDS_ON SPDXRef-Package-27-pyasn1
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-21-boto
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-22-google-reauth
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-25-httplib2
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-27-oauth2client
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-30-rsa
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-31-pyopenssl
+Relationship: SPDXRef-Package-20-gcs-oauth2-boto-plugin DEPENDS_ON SPDXRef-Package-35-retry-decorator
+Relationship: SPDXRef-Package-22-google-reauth DEPENDS_ON SPDXRef-Package-23-pyu2f
+Relationship: SPDXRef-Package-23-pyu2f DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-25-httplib2 DEPENDS_ON SPDXRef-Package-26-pyparsing
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-25-httplib2
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-28-pyasn1
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-29-pyasn1-modules
+Relationship: SPDXRef-Package-27-oauth2client DEPENDS_ON SPDXRef-Package-30-rsa
+Relationship: SPDXRef-Package-29-pyasn1-modules DEPENDS_ON SPDXRef-Package-28-pyasn1
Relationship: SPDXRef-Package-3-aiosignal DEPENDS_ON SPDXRef-Package-4-frozenlist
-Relationship: SPDXRef-Package-30-pyopenssl DEPENDS_ON SPDXRef-Package-31-cryptography
-Relationship: SPDXRef-Package-31-cryptography DEPENDS_ON SPDXRef-Package-32-cffi
-Relationship: SPDXRef-Package-32-cffi DEPENDS_ON SPDXRef-Package-33-pycparser
-Relationship: SPDXRef-Package-35-google-apitools DEPENDS_ON SPDXRef-Package-18-fasteners
-Relationship: SPDXRef-Package-35-google-apitools DEPENDS_ON SPDXRef-Package-23-six
-Relationship: SPDXRef-Package-35-google-apitools DEPENDS_ON SPDXRef-Package-24-httplib2
-Relationship: SPDXRef-Package-35-google-apitools DEPENDS_ON SPDXRef-Package-26-oauth2client
-Relationship: SPDXRef-Package-36-google-auth DEPENDS_ON SPDXRef-Package-28-pyasn1-modules
-Relationship: SPDXRef-Package-36-google-auth DEPENDS_ON SPDXRef-Package-29-rsa
-Relationship: SPDXRef-Package-36-google-auth DEPENDS_ON SPDXRef-Package-37-cachetools
-Relationship: SPDXRef-Package-39-importlib-metadata DEPENDS_ON SPDXRef-Package-40-zipp
-Relationship: SPDXRef-Package-41-jinja2 DEPENDS_ON SPDXRef-Package-42-markupsafe
-Relationship: SPDXRef-Package-43-jsonschema DEPENDS_ON SPDXRef-Package-44-jsonschema-specifications
-Relationship: SPDXRef-Package-43-jsonschema DEPENDS_ON SPDXRef-Package-45-referencing
-Relationship: SPDXRef-Package-43-jsonschema DEPENDS_ON SPDXRef-Package-46-rpds-py
-Relationship: SPDXRef-Package-43-jsonschema DEPENDS_ON SPDXRef-Package-6-attrs
-Relationship: SPDXRef-Package-44-jsonschema-specifications DEPENDS_ON SPDXRef-Package-45-referencing
-Relationship: SPDXRef-Package-45-referencing DEPENDS_ON SPDXRef-Package-46-rpds-py
-Relationship: SPDXRef-Package-45-referencing DEPENDS_ON SPDXRef-Package-6-attrs
-Relationship: SPDXRef-Package-47-lib4sbom DEPENDS_ON SPDXRef-Package-13-defusedxml
-Relationship: SPDXRef-Package-47-lib4sbom DEPENDS_ON SPDXRef-Package-48-pyyaml
-Relationship: SPDXRef-Package-47-lib4sbom DEPENDS_ON SPDXRef-Package-49-semantic-version
-Relationship: SPDXRef-Package-52-plotly DEPENDS_ON SPDXRef-Package-51-packaging
-Relationship: SPDXRef-Package-52-plotly DEPENDS_ON SPDXRef-Package-53-tenacity
-Relationship: SPDXRef-Package-55-requests DEPENDS_ON SPDXRef-Package-56-certifi
-Relationship: SPDXRef-Package-55-requests DEPENDS_ON SPDXRef-Package-57-charset-normalizer
-Relationship: SPDXRef-Package-55-requests DEPENDS_ON SPDXRef-Package-58-urllib3
-Relationship: SPDXRef-Package-55-requests DEPENDS_ON SPDXRef-Package-9-idna
-Relationship: SPDXRef-Package-59-rich DEPENDS_ON SPDXRef-Package-60-markdown-it-py
-Relationship: SPDXRef-Package-59-rich DEPENDS_ON SPDXRef-Package-62-pygments
-Relationship: SPDXRef-Package-60-markdown-it-py DEPENDS_ON SPDXRef-Package-61-mdurl
-Relationship: SPDXRef-Package-65-xmlschema DEPENDS_ON SPDXRef-Package-66-elementpath
+Relationship: SPDXRef-Package-30-rsa DEPENDS_ON SPDXRef-Package-28-pyasn1
+Relationship: SPDXRef-Package-31-pyopenssl DEPENDS_ON SPDXRef-Package-32-cryptography
+Relationship: SPDXRef-Package-32-cryptography DEPENDS_ON SPDXRef-Package-33-cffi
+Relationship: SPDXRef-Package-33-cffi DEPENDS_ON SPDXRef-Package-34-pycparser
+Relationship: SPDXRef-Package-36-google-apitools DEPENDS_ON SPDXRef-Package-19-fasteners
+Relationship: SPDXRef-Package-36-google-apitools DEPENDS_ON SPDXRef-Package-24-six
+Relationship: SPDXRef-Package-36-google-apitools DEPENDS_ON SPDXRef-Package-25-httplib2
+Relationship: SPDXRef-Package-36-google-apitools DEPENDS_ON SPDXRef-Package-27-oauth2client
+Relationship: SPDXRef-Package-37-google-auth DEPENDS_ON SPDXRef-Package-29-pyasn1-modules
+Relationship: SPDXRef-Package-37-google-auth DEPENDS_ON SPDXRef-Package-30-rsa
+Relationship: SPDXRef-Package-37-google-auth DEPENDS_ON SPDXRef-Package-38-cachetools
+Relationship: SPDXRef-Package-40-importlib-metadata DEPENDS_ON SPDXRef-Package-41-zipp
+Relationship: SPDXRef-Package-42-jinja2 DEPENDS_ON SPDXRef-Package-43-markupsafe
+Relationship: SPDXRef-Package-44-jsonschema DEPENDS_ON SPDXRef-Package-45-jsonschema-specifications
+Relationship: SPDXRef-Package-44-jsonschema DEPENDS_ON SPDXRef-Package-46-referencing
+Relationship: SPDXRef-Package-44-jsonschema DEPENDS_ON SPDXRef-Package-47-rpds-py
+Relationship: SPDXRef-Package-44-jsonschema DEPENDS_ON SPDXRef-Package-6-attrs
+Relationship: SPDXRef-Package-45-jsonschema-specifications DEPENDS_ON SPDXRef-Package-46-referencing
+Relationship: SPDXRef-Package-46-referencing DEPENDS_ON SPDXRef-Package-47-rpds-py
+Relationship: SPDXRef-Package-46-referencing DEPENDS_ON SPDXRef-Package-6-attrs
+Relationship: SPDXRef-Package-48-lib4sbom DEPENDS_ON SPDXRef-Package-13-defusedxml
+Relationship: SPDXRef-Package-48-lib4sbom DEPENDS_ON SPDXRef-Package-49-pyyaml
+Relationship: SPDXRef-Package-48-lib4sbom DEPENDS_ON SPDXRef-Package-50-semantic-version
+Relationship: SPDXRef-Package-53-plotly DEPENDS_ON SPDXRef-Package-52-packaging
+Relationship: SPDXRef-Package-53-plotly DEPENDS_ON SPDXRef-Package-54-tenacity
+Relationship: SPDXRef-Package-56-requests DEPENDS_ON SPDXRef-Package-57-certifi
+Relationship: SPDXRef-Package-56-requests DEPENDS_ON SPDXRef-Package-58-charset-normalizer
+Relationship: SPDXRef-Package-56-requests DEPENDS_ON SPDXRef-Package-59-urllib3
+Relationship: SPDXRef-Package-56-requests DEPENDS_ON SPDXRef-Package-9-idna
+Relationship: SPDXRef-Package-60-rich DEPENDS_ON SPDXRef-Package-61-markdown-it-py
+Relationship: SPDXRef-Package-60-rich DEPENDS_ON SPDXRef-Package-63-pygments
+Relationship: SPDXRef-Package-61-markdown-it-py DEPENDS_ON SPDXRef-Package-62-mdurl
+Relationship: SPDXRef-Package-66-xmlschema DEPENDS_ON SPDXRef-Package-67-elementpath
Relationship: SPDXRef-Package-8-yarl DEPENDS_ON SPDXRef-Package-7-multidict
Relationship: SPDXRef-Package-8-yarl DEPENDS_ON SPDXRef-Package-9-idna