Skip to content

Instantly share code, notes, and snippets.

@ba11b0y

ba11b0y/bom-go-mod.spdx

Last active July 29, 2023 05:06
Show Gist options
  • Save ba11b0y/333586d3333fd6b611fa45fe423e32da to your computer and use it in GitHub Desktop.
Save ba11b0y/333586d3333fd6b611fa45fe423e32da to your computer and use it in GitHub Desktop.
Download ZIP
SBOM(spdx) generated using `sbomgen`
Raw
bom-go-mod.spdx
SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: github.com/spdx/spdx-sbom-generator-4b2ec8f
DocumentNamespace: https://spdx.org/spdxpackages/github.com/spdx/spdx-sbom-generator-4b2ec8f-acfb15b4-1338-458b-82dd-74104bbce3fc
Creator: Tool: spdx-sbom-generator-source-code
Created: 2023-07-28T14:04:53Z
##### Package: github.com/ProtonMail/go-crypto
PackageName: github.com/ProtonMail/go-crypto
SPDXID: SPDXRef-github.com.ProtonMail.go-crypto-v0.0.0-20230518184743-7afd39499903
PackageVersion: v0.0.0-20230518184743-7afd39499903
PackageSupplier: Organization: github.com/ProtonMail/go-crypto
PackageDownloadLocation: https://github.com/ProtonMail/go-crypto/releases/tag/v0.0.0-20230518184743-7afd39499903
FilesAnalyzed: false
PackageChecksum: SHA256: 9b2953b4cc62544515a48426e4e58321773b3d4acd55283068ddf359f4e12677
PackageHomePage: https://github.com/ProtonMail/go-crypto
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/anchore/go-struct-converter
PackageName: github.com/anchore/go-struct-converter
SPDXID: SPDXRef-github.com.anchore.go-struct-converter-v0.0.0-20221118182256-c68fdcfa2092
PackageVersion: v0.0.0-20221118182256-c68fdcfa2092
PackageSupplier: Organization: github.com/anchore/go-struct-converter
PackageDownloadLocation: https://github.com/anchore/go-struct-converter/releases/tag/v0.0.0-20221118182256-c68fdcfa2092
FilesAnalyzed: false
PackageChecksum: SHA256: 3dadf1771d3c6818eff79ab9536af41741d91eeca518e6818dacb1d48c5e2334
PackageHomePage: https://github.com/anchore/go-struct-converter
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/blang/semver/v4
PackageName: github.com/blang/semver/v4
SPDXID: SPDXRef-github.com.blang.semver.v4-v4.0.0
PackageVersion: v4.0.0
PackageSupplier: Organization: github.com/blang/semver/v4
PackageDownloadLocation: https://github.com/blang/semver/v4/releases/tag/v4.0.0
FilesAnalyzed: false
PackageChecksum: SHA256: 42688786dadef3fdca13a2ae10cfa91ab9afd99944ddf2bc938fc09f1ea57d7a
PackageHomePage: https://github.com/blang/semver/v4
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/cloudflare/circl
PackageName: github.com/cloudflare/circl
SPDXID: SPDXRef-github.com.cloudflare.circl-v1.3.3
PackageVersion: v1.3.3
PackageSupplier: Organization: github.com/cloudflare/circl
PackageDownloadLocation: https://github.com/cloudflare/circl/releases/tag/v1.3.3
FilesAnalyzed: false
PackageChecksum: SHA256: 098576efacdb7ac2e98d8a355231e995f24c748595286eb9c2995f0c857cc0e4
PackageHomePage: https://github.com/cloudflare/circl
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/dgryski/go-minhash
PackageName: github.com/dgryski/go-minhash
SPDXID: SPDXRef-github.com.dgryski.go-minhash-v0.0.0-20190315135803-ad340ca03076
PackageVersion: v0.0.0-20190315135803-ad340ca03076
PackageSupplier: Organization: github.com/dgryski/go-minhash
PackageDownloadLocation: https://github.com/dgryski/go-minhash/releases/tag/v0.0.0-20190315135803-ad340ca03076
FilesAnalyzed: false
PackageChecksum: SHA256: 49dbc102656f80fee26369aab5efdf5e83bf713df4d15c6c7cf8d6cbf7de788a
PackageHomePage: https://github.com/dgryski/go-minhash
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/ekzhu/minhash-lsh
PackageName: github.com/ekzhu/minhash-lsh
SPDXID: SPDXRef-github.com.ekzhu.minhash-lsh-v0.0.0-20190924033628-faac2c6342f8
PackageVersion: v0.0.0-20190924033628-faac2c6342f8
PackageSupplier: Organization: github.com/ekzhu/minhash-lsh
PackageDownloadLocation: https://github.com/ekzhu/minhash-lsh/releases/tag/v0.0.0-20190924033628-faac2c6342f8
FilesAnalyzed: false
PackageChecksum: SHA256: d82e114c1f604d0d8a3c847e68708865bc2c657c4ae09f6afd96add6dc9d4efd
PackageHomePage: https://github.com/ekzhu/minhash-lsh
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/emirpasic/gods
PackageName: github.com/emirpasic/gods
SPDXID: SPDXRef-github.com.emirpasic.gods-v1.18.1
PackageVersion: v1.18.1
PackageSupplier: Organization: github.com/emirpasic/gods
PackageDownloadLocation: https://github.com/emirpasic/gods/releases/tag/v1.18.1
FilesAnalyzed: false
PackageChecksum: SHA256: 902dbdebdc7ce4a1d03991cc14cf833510f43f5be4bc6ce76d5a7464c568f904
PackageHomePage: https://github.com/emirpasic/gods
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/go-enry/go-license-detector/v4
PackageName: github.com/go-enry/go-license-detector/v4
SPDXID: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1
PackageVersion: v4.3.1
PackageSupplier: Organization: github.com/go-enry/go-license-detector/v4
PackageDownloadLocation: https://github.com/go-enry/go-license-detector/v4/releases/tag/v4.3.1
FilesAnalyzed: false
PackageChecksum: SHA256: 93d1b0540457c85b3359515db0abe85778690dcf05003d28965eb63fa29dc348
PackageHomePage: https://github.com/go-enry/go-license-detector/v4
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/go-git/gcfg
PackageName: github.com/go-git/gcfg
SPDXID: SPDXRef-github.com.go-git.gcfg-v1.5.1-0.20230307220236-3a3c6141e376
PackageVersion: v1.5.1-0.20230307220236-3a3c6141e376
PackageSupplier: Organization: github.com/go-git/gcfg
PackageDownloadLocation: https://github.com/go-git/gcfg/releases/tag/v1.5.1-0.20230307220236-3a3c6141e376
FilesAnalyzed: false
PackageChecksum: SHA256: b107edcbab5d551651afa29292f73199e5dfe06162a270a94fd35170f5cfe936
PackageHomePage: https://github.com/go-git/gcfg
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/go-git/go-billy/v5
PackageName: github.com/go-git/go-billy/v5
SPDXID: SPDXRef-github.com.go-git.go-billy.v5-v5.4.1
PackageVersion: v5.4.1
PackageSupplier: Organization: github.com/go-git/go-billy/v5
PackageDownloadLocation: https://github.com/go-git/go-billy/v5/releases/tag/v5.4.1
FilesAnalyzed: false
PackageChecksum: SHA256: db160551ec36f9430e4f2f121a84b13a60d7141da5a4e9f2fcdfddcfc17fafb2
PackageHomePage: https://github.com/go-git/go-billy/v5
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/go-git/go-git/v5
PackageName: github.com/go-git/go-git/v5
SPDXID: SPDXRef-github.com.go-git.go-git.v5-v5.7.0
PackageVersion: v5.7.0
PackageSupplier: Organization: github.com/go-git/go-git/v5
PackageDownloadLocation: https://github.com/go-git/go-git/v5/releases/tag/v5.7.0
FilesAnalyzed: false
PackageChecksum: SHA256: 36bf8cd1844dc70ebdafe0a4cfa4eae1277f00201b7af87619242f9102ffd5c0
PackageHomePage: https://github.com/go-git/go-git/v5
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/golang/groupcache
PackageName: github.com/golang/groupcache
SPDXID: SPDXRef-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da
PackageVersion: v0.0.0-20210331224755-41bb18bfe9da
PackageSupplier: Organization: github.com/golang/groupcache
PackageDownloadLocation: https://github.com/golang/groupcache/releases/tag/v0.0.0-20210331224755-41bb18bfe9da
FilesAnalyzed: false
PackageChecksum: SHA256: dd33ac8b6474b44d372455b8fb28d9916c34b29c67024f8cb0d7aace5cce2644
PackageHomePage: https://github.com/golang/groupcache
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/google/uuid
PackageName: github.com/google/uuid
SPDXID: SPDXRef-github.com.google.uuid-v1.2.0
PackageVersion: v1.2.0
PackageSupplier: Organization: github.com/google/uuid
PackageDownloadLocation: https://github.com/google/uuid/releases/tag/v1.2.0
FilesAnalyzed: false
PackageChecksum: SHA256: 12ad70469fe7a1a60bac9cf916ab958deff9b1d76e9663ee58fd3b76720b0922
PackageHomePage: https://github.com/google/uuid
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/hhatto/gorst
PackageName: github.com/hhatto/gorst
SPDXID: SPDXRef-github.com.hhatto.gorst-v0.0.0-20181029133204-ca9f730cac5b
PackageVersion: v0.0.0-20181029133204-ca9f730cac5b
PackageSupplier: Organization: github.com/hhatto/gorst
PackageDownloadLocation: https://github.com/hhatto/gorst/releases/tag/v0.0.0-20181029133204-ca9f730cac5b
FilesAnalyzed: false
PackageChecksum: SHA256: ae71e25a4e7aec9ddd8656b9c05925574e2007fac9e3dd0dd7697b04a670784f
PackageHomePage: https://github.com/hhatto/gorst
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/imdario/mergo
PackageName: github.com/imdario/mergo
SPDXID: SPDXRef-github.com.imdario.mergo-v0.3.15
PackageVersion: v0.3.15
PackageSupplier: Organization: github.com/imdario/mergo
PackageDownloadLocation: https://github.com/imdario/mergo/releases/tag/v0.3.15
FilesAnalyzed: false
PackageChecksum: SHA256: f60c7523155204f44403314c054eb8650d8644b0f470580d160688decda4e7c8
PackageHomePage: https://github.com/imdario/mergo
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/jbenet/go-context
PackageName: github.com/jbenet/go-context
SPDXID: SPDXRef-github.com.jbenet.go-context-v0.0.0-20150711004518-d14ea06fba99
PackageVersion: v0.0.0-20150711004518-d14ea06fba99
PackageSupplier: Organization: github.com/jbenet/go-context
PackageDownloadLocation: https://github.com/jbenet/go-context/releases/tag/v0.0.0-20150711004518-d14ea06fba99
FilesAnalyzed: false
PackageChecksum: SHA256: 1d0072b8bba279f349c91f62caec3f2d91f197d522a50860390eb919c9e2604c
PackageHomePage: https://github.com/jbenet/go-context
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/jdkato/prose
PackageName: github.com/jdkato/prose
SPDXID: SPDXRef-github.com.jdkato.prose-v1.2.1
PackageVersion: v1.2.1
PackageSupplier: Organization: github.com/jdkato/prose
PackageDownloadLocation: https://github.com/jdkato/prose/releases/tag/v1.2.1
FilesAnalyzed: false
PackageChecksum: SHA256: c20fb2c8cf638d06e293fa55a3a488eafeb4c5dfa18cf5a83cb3907540394472
PackageHomePage: https://github.com/jdkato/prose
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/kevinburke/ssh_config
PackageName: github.com/kevinburke/ssh_config
SPDXID: SPDXRef-github.com.kevinburke.ssh-config-v1.2.0
PackageVersion: v1.2.0
PackageSupplier: Organization: github.com/kevinburke/ssh_config
PackageDownloadLocation: https://github.com/kevinburke/ssh_config/releases/tag/v1.2.0
FilesAnalyzed: false
PackageChecksum: SHA256: 07fdd1171a0ca63f4f8c77f1ab62e2f2e9e48edee443a921d9d3621063d538d6
PackageHomePage: https://github.com/kevinburke/ssh_config
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/montanaflynn/stats
PackageName: github.com/montanaflynn/stats
SPDXID: SPDXRef-github.com.montanaflynn.stats-v0.6.6
PackageVersion: v0.6.6
PackageSupplier: Organization: github.com/montanaflynn/stats
PackageDownloadLocation: https://github.com/montanaflynn/stats/releases/tag/v0.6.6
FilesAnalyzed: false
PackageChecksum: SHA256: a9204a3cb5fc27079487d82c2b55bb852d4930a93f5c7a76985c506e7a3f14a7
PackageHomePage: https://github.com/montanaflynn/stats
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/opensbom-generator/parsers
PackageName: github.com/opensbom-generator/parsers
SPDXID: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325
PackageVersion: v0.0.0-20230627202907-fc5a182b1325
PackageSupplier: Organization: github.com/opensbom-generator/parsers
PackageDownloadLocation: https://github.com/opensbom-generator/parsers/releases/tag/v0.0.0-20230627202907-fc5a182b1325
FilesAnalyzed: false
PackageChecksum: SHA256: 3e38438cb7612a4ce8e857a337c6b4fc8aa316d1b2090be4499c4ee9b24a3146
PackageHomePage: https://github.com/opensbom-generator/parsers
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/pelletier/go-toml/v2
PackageName: github.com/pelletier/go-toml/v2
SPDXID: SPDXRef-github.com.pelletier.go-toml.v2-v2.0.8
PackageVersion: v2.0.8
PackageSupplier: Organization: github.com/pelletier/go-toml/v2
PackageDownloadLocation: https://github.com/pelletier/go-toml/v2/releases/tag/v2.0.8
FilesAnalyzed: false
PackageChecksum: SHA256: f4fa780d709922521a8874c62b8e525f11a7f5ae2a60a26f0b19d84cfd32aed0
PackageHomePage: https://github.com/pelletier/go-toml/v2
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/pjbgf/sha1cd
PackageName: github.com/pjbgf/sha1cd
SPDXID: SPDXRef-github.com.pjbgf.sha1cd-v0.3.0
PackageVersion: v0.3.0
PackageSupplier: Organization: github.com/pjbgf/sha1cd
PackageDownloadLocation: https://github.com/pjbgf/sha1cd/releases/tag/v0.3.0
FilesAnalyzed: false
PackageChecksum: SHA256: 5425c28b65ef10e6099957afe383838c7ce97944bf3e92c4b9a820ee0e37e1cc
PackageHomePage: https://github.com/pjbgf/sha1cd
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/pkg/errors
PackageName: github.com/pkg/errors
SPDXID: SPDXRef-github.com.pkg.errors-v0.9.1
PackageVersion: v0.9.1
PackageSupplier: Organization: github.com/pkg/errors
PackageDownloadLocation: https://github.com/pkg/errors/releases/tag/v0.9.1
FilesAnalyzed: false
PackageChecksum: SHA256: e3b06d0c03c459d912e3209a20bfe9b65474d012544aa6b75797e315a605cf86
PackageHomePage: https://github.com/pkg/errors
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/russross/blackfriday/v2
PackageName: github.com/russross/blackfriday/v2
SPDXID: SPDXRef-github.com.russross.blackfriday.v2-v2.1.0
PackageVersion: v2.1.0
PackageSupplier: Organization: github.com/russross/blackfriday/v2
PackageDownloadLocation: https://github.com/russross/blackfriday/v2/releases/tag/v2.1.0
FilesAnalyzed: false
PackageChecksum: SHA256: e8ef8be35cda8f99bbfa041ee9129bdc96813ff7062c777a274c65d25348fcba
PackageHomePage: https://github.com/russross/blackfriday/v2
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/sergi/go-diff
PackageName: github.com/sergi/go-diff
SPDXID: SPDXRef-github.com.sergi.go-diff-v1.2.0
PackageVersion: v1.2.0
PackageSupplier: Organization: github.com/sergi/go-diff
PackageDownloadLocation: https://github.com/sergi/go-diff/releases/tag/v1.2.0
FilesAnalyzed: false
PackageChecksum: SHA256: 136bc658c73f27010801258b8cb49893508785b27833d220aadc0b2a3f1cbf0b
PackageHomePage: https://github.com/sergi/go-diff
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/shogo82148/go-shuffle
PackageName: github.com/shogo82148/go-shuffle
SPDXID: SPDXRef-github.com.shogo82148.go-shuffle-v1.0.1
PackageVersion: v1.0.1
PackageSupplier: Organization: github.com/shogo82148/go-shuffle
PackageDownloadLocation: https://github.com/shogo82148/go-shuffle/releases/tag/v1.0.1
FilesAnalyzed: false
PackageChecksum: SHA256: 05f11fe79094e3bdcb3089f9c652c678160c6a6dcfe9351018097ca4908d1434
PackageHomePage: https://github.com/shogo82148/go-shuffle
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/sirupsen/logrus
PackageName: github.com/sirupsen/logrus
SPDXID: SPDXRef-github.com.sirupsen.logrus-v1.9.3
PackageVersion: v1.9.3
PackageSupplier: Organization: github.com/sirupsen/logrus
PackageDownloadLocation: https://github.com/sirupsen/logrus/releases/tag/v1.9.3
FilesAnalyzed: false
PackageChecksum: SHA256: f12b27370f8c470e7841fb4726086751ea818e949663077b75e11ea815f10104
PackageHomePage: https://github.com/sirupsen/logrus
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/skeema/knownhosts
PackageName: github.com/skeema/knownhosts
SPDXID: SPDXRef-github.com.skeema.knownhosts-v1.1.1
PackageVersion: v1.1.1
PackageSupplier: Organization: github.com/skeema/knownhosts
PackageDownloadLocation: https://github.com/skeema/knownhosts/releases/tag/v1.1.1
FilesAnalyzed: false
PackageChecksum: SHA256: 04aa838d1b2c2c3105077495bc67af06860438e4b7ac4b154e3d7a6960c2390e
PackageHomePage: https://github.com/skeema/knownhosts
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/spdx/spdx-sbom-generator
PackageName: github.com/spdx/spdx-sbom-generator
SPDXID: SPDXRef-github.com.spdx.spdx-sbom-generator
PackageVersion: 4b2ec8f
PackageSupplier: Organization: github.com/spdx/spdx-sbom-generator
PackageDownloadLocation: git+https://github.com/ba11b0y/spdx-sbom-generator.git
FilesAnalyzed: false
PackageChecksum: SHA256: 351c2807721cdfc3ce1c2626a5d03dc4cdc666fd64e5b3ff23afa8f4e3319411
PackageHomePage: https://github.com/spdx/spdx-sbom-generator
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/spdx/tools-golang
PackageName: github.com/spdx/tools-golang
SPDXID: SPDXRef-github.com.spdx.tools-golang-v0.5.2
PackageVersion: v0.5.2
PackageSupplier: Organization: github.com/spdx/tools-golang
PackageDownloadLocation: https://github.com/spdx/tools-golang/releases/tag/v0.5.2
FilesAnalyzed: false
PackageChecksum: SHA256: 5bde54a0bfcd13ff3df7f8a23d703dcfb4559c2166a185551ba4a7a8734ee38e
PackageHomePage: https://github.com/spdx/tools-golang
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/spf13/cobra
PackageName: github.com/spf13/cobra
SPDXID: SPDXRef-github.com.spf13.cobra-v1.7.0
PackageVersion: v1.7.0
PackageSupplier: Organization: github.com/spf13/cobra
PackageDownloadLocation: https://github.com/spf13/cobra/releases/tag/v1.7.0
FilesAnalyzed: false
PackageChecksum: SHA256: 24cc35bc17ebf0be051d4f9a8d20c23fee3624fc7b476c246f252a115ebfb04b
PackageHomePage: https://github.com/spf13/cobra
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/spf13/pflag
PackageName: github.com/spf13/pflag
SPDXID: SPDXRef-github.com.spf13.pflag-v1.0.5
PackageVersion: v1.0.5
PackageSupplier: Organization: github.com/spf13/pflag
PackageDownloadLocation: https://github.com/spf13/pflag/releases/tag/v1.0.5
FilesAnalyzed: false
PackageChecksum: SHA256: 06c9b2478cd13cbd0dd1922fba4d6f5571326466da4d85942b8e5cc0f53c86f6
PackageHomePage: https://github.com/spf13/pflag
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/vifraa/gopom
PackageName: github.com/vifraa/gopom
SPDXID: SPDXRef-github.com.vifraa.gopom-v0.2.1
PackageVersion: v0.2.1
PackageSupplier: Organization: github.com/vifraa/gopom
PackageDownloadLocation: https://github.com/vifraa/gopom/releases/tag/v0.2.1
FilesAnalyzed: false
PackageChecksum: SHA256: d7a893486619a08fc78ac350f22398b86cb02a7ac1d6795ca050960f9eca96c3
PackageHomePage: https://github.com/vifraa/gopom
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: github.com/xanzy/ssh-agent
PackageName: github.com/xanzy/ssh-agent
SPDXID: SPDXRef-github.com.xanzy.ssh-agent-v0.3.3
PackageVersion: v0.3.3
PackageSupplier: Organization: github.com/xanzy/ssh-agent
PackageDownloadLocation: https://github.com/xanzy/ssh-agent/releases/tag/v0.3.3
FilesAnalyzed: false
PackageChecksum: SHA256: fbc7ecf87fcdf7bf1af81f4146574e552f83bd0c87808cc2ea05a9e0dcb02725
PackageHomePage: https://github.com/xanzy/ssh-agent
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: golang.org/x/crypto
PackageName: golang.org/x/crypto
SPDXID: SPDXRef-golang.org.x.crypto-v0.10.0
PackageVersion: v0.10.0
PackageSupplier: Organization: golang.org/x/crypto
PackageDownloadLocation: https://golang.org/x/crypto
FilesAnalyzed: false
PackageChecksum: SHA256: 55e4292747916b0a95f4f0ef21c227692305c9181e57235f0e50e01d4d29307c
PackageHomePage: https://golang.org/x/crypto
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: golang.org/x/exp
PackageName: golang.org/x/exp
SPDXID: SPDXRef-golang.org.x.exp-v0.0.0-20221006183845-316c7553db56
PackageVersion: v0.0.0-20221006183845-316c7553db56
PackageSupplier: Organization: golang.org/x/exp
PackageDownloadLocation: https://golang.org/x/exp
FilesAnalyzed: false
PackageChecksum: SHA256: 74fa00723cd3164f1557ed1eb8b8f3daba10d25478ed692f0959fb64713a8e8a
PackageHomePage: https://golang.org/x/exp
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: golang.org/x/mod
PackageName: golang.org/x/mod
SPDXID: SPDXRef-golang.org.x.mod-v0.11.0
PackageVersion: v0.11.0
PackageSupplier: Organization: golang.org/x/mod
PackageDownloadLocation: https://golang.org/x/mod
FilesAnalyzed: false
PackageChecksum: SHA256: 7d495ff4585474a84864919cfdc7de113b2a9330f016fa962c0c276feefbf0fb
PackageHomePage: https://golang.org/x/mod
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: golang.org/x/net
PackageName: golang.org/x/net
SPDXID: SPDXRef-golang.org.x.net-v0.11.0
PackageVersion: v0.11.0
PackageSupplier: Organization: golang.org/x/net
PackageDownloadLocation: https://golang.org/x/net
FilesAnalyzed: false
PackageChecksum: SHA256: 1824e21c5926163a3918a081e1a5b7c7ee7e67f352eddde54abfa9a847dc3680
PackageHomePage: https://golang.org/x/net
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: golang.org/x/sys
PackageName: golang.org/x/sys
SPDXID: SPDXRef-golang.org.x.sys-v0.9.0
PackageVersion: v0.9.0
PackageSupplier: Organization: golang.org/x/sys
PackageDownloadLocation: https://golang.org/x/sys
FilesAnalyzed: false
PackageChecksum: SHA256: eb691c241b51453512894fb2b946e1707c40c977626c3c9e1be161add9e3c9e9
PackageHomePage: https://golang.org/x/sys
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: golang.org/x/text
PackageName: golang.org/x/text
SPDXID: SPDXRef-golang.org.x.text-v0.10.0
PackageVersion: v0.10.0
PackageSupplier: Organization: golang.org/x/text
PackageDownloadLocation: https://golang.org/x/text
FilesAnalyzed: false
PackageChecksum: SHA256: e385c69fa66c9844e3bff469fe953bb2f8aeac85f8bddb529354036113eab224
PackageHomePage: https://golang.org/x/text
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: gonum.org/v1/gonum
PackageName: gonum.org/v1/gonum
SPDXID: SPDXRef-gonum.org.v1.gonum-v0.8.2
PackageVersion: v0.8.2
PackageSupplier: Organization: gonum.org/v1/gonum
PackageDownloadLocation: https://gonum.org/v1/gonum
FilesAnalyzed: false
PackageChecksum: SHA256: 56ab5e52f22685067255fff21c5dd60a455444277a97b67ff934c2573a2474f2
PackageHomePage: https://gonum.org/v1/gonum
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: gopkg.in/neurosnap/sentences.v1
PackageName: gopkg.in/neurosnap/sentences.v1
SPDXID: SPDXRef-gopkg.in.neurosnap.sentences.v1-v1.0.7
PackageVersion: v1.0.7
PackageSupplier: Organization: gopkg.in/neurosnap/sentences.v1
PackageDownloadLocation: https://gopkg.in/neurosnap/sentences.v1
FilesAnalyzed: false
PackageChecksum: SHA256: dc79e138f066821bb84ca48ca30722239f6b8e19bd6052901a54acda9ae7b797
PackageHomePage: https://gopkg.in/neurosnap/sentences.v1
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: gopkg.in/warnings.v0
PackageName: gopkg.in/warnings.v0
SPDXID: SPDXRef-gopkg.in.warnings.v0-v0.1.2
PackageVersion: v0.1.2
PackageSupplier: Organization: gopkg.in/warnings.v0
PackageDownloadLocation: https://gopkg.in/warnings.v0
FilesAnalyzed: false
PackageChecksum: SHA256: eb58fd9e610ac3b8c5457eef10908851909e5624400c8a2437b913250a5d8cf1
PackageHomePage: https://gopkg.in/warnings.v0
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Package: sigs.k8s.io/release-utils
PackageName: sigs.k8s.io/release-utils
SPDXID: SPDXRef-sigs.k8s.io.release-utils-v0.7.4
PackageVersion: v0.7.4
PackageSupplier: Organization: sigs.k8s.io/release-utils
PackageDownloadLocation: https://sigs.k8s.io/release-utils
FilesAnalyzed: false
PackageChecksum: SHA256: 0b5b834bc8089ff872a68d1d8c77d3e66015173e7789004b9a0cf72921cd0291
PackageHomePage: https://sigs.k8s.io/release-utils
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
##### Relationships
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-github.com.spdx.spdx-sbom-generator
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.russross.blackfriday.v2-v2.1.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.ekzhu.minhash-lsh-v0.0.0-20190924033628-faac2c6342f8
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.pjbgf.sha1cd-v0.3.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.go-git.go-git.v5-v5.7.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.jdkato.prose-v1.2.1
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-sigs.k8s.io.release-utils-v0.7.4
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.blang.semver.v4-v4.0.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.go-git.gcfg-v1.5.1-0.20230307220236-3a3c6141e376
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.sirupsen.logrus-v1.9.3
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.spdx.tools-golang-v0.5.2
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-golang.org.x.net-v0.11.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.hhatto.gorst-v0.0.0-20181029133204-ca9f730cac5b
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.jbenet.go-context-v0.0.0-20150711004518-d14ea06fba99
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.xanzy.ssh-agent-v0.3.3
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-golang.org.x.text-v0.10.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-gopkg.in.neurosnap.sentences.v1-v1.0.7
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.vifraa.gopom-v0.2.1
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.emirpasic.gods-v1.18.1
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.go-git.go-billy.v5-v5.4.1
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.google.uuid-v1.2.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.imdario.mergo-v0.3.15
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.ProtonMail.go-crypto-v0.0.0-20230518184743-7afd39499903
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.cloudflare.circl-v1.3.3
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-gonum.org.v1.gonum-v0.8.2
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.pkg.errors-v0.9.1
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.skeema.knownhosts-v1.1.1
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.spf13.pflag-v1.0.5
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-golang.org.x.exp-v0.0.0-20221006183845-316c7553db56
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-golang.org.x.mod-v0.11.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-gopkg.in.warnings.v0-v0.1.2
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.anchore.go-struct-converter-v0.0.0-20221118182256-c68fdcfa2092
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.montanaflynn.stats-v0.6.6
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.pelletier.go-toml.v2-v2.0.8
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.sergi.go-diff-v1.2.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.shogo82148.go-shuffle-v1.0.1
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.spf13.cobra-v1.7.0
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.dgryski.go-minhash-v0.0.0-20190315135803-ad340ca03076
Relationship: SPDXRef-github.com.spdx.spdx-sbom-generator DEPENDS_ON SPDXRef-github.com.kevinburke.ssh-config-v1.2.0
Relationship: SPDXRef-github.com.sirupsen.logrus-v1.9.3 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.ProtonMail.go-crypto-v0.0.0-20230518184743-7afd39499903 DEPENDS_ON SPDXRef-github.com.cloudflare.circl-v1.3.3
Relationship: SPDXRef-github.com.ProtonMail.go-crypto-v0.0.0-20230518184743-7afd39499903 DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-golang.org.x.crypto-v0.10.0 DEPENDS_ON SPDXRef-golang.org.x.net-v0.11.0
Relationship: SPDXRef-golang.org.x.crypto-v0.10.0 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-golang.org.x.crypto-v0.10.0 DEPENDS_ON SPDXRef-golang.org.x.text-v0.10.0
Relationship: SPDXRef-github.com.cloudflare.circl-v1.3.3 DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-github.com.cloudflare.circl-v1.3.3 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.go-git.go-billy.v5-v5.4.1 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.emirpasic.gods-v1.18.1
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.go-git.go-billy.v5-v5.4.1
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.kevinburke.ssh-config-v1.2.0
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.skeema.knownhosts-v1.1.1
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.imdario.mergo-v0.3.15
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.xanzy.ssh-agent-v0.3.3
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-golang.org.x.text-v0.10.0
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-gopkg.in.warnings.v0-v0.1.2
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.pjbgf.sha1cd-v0.3.0
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.sergi.go-diff-v1.2.0
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.cloudflare.circl-v1.3.3
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.ProtonMail.go-crypto-v0.0.0-20230518184743-7afd39499903
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.go-git.gcfg-v1.5.1-0.20230307220236-3a3c6141e376
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-github.com.jbenet.go-context-v0.0.0-20150711004518-d14ea06fba99
Relationship: SPDXRef-github.com.go-git.go-git.v5-v5.7.0 DEPENDS_ON SPDXRef-golang.org.x.net-v0.11.0
Relationship: SPDXRef-github.com.pjbgf.sha1cd-v0.3.0 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.pjbgf.sha1cd-v0.3.0 DEPENDS_ON SPDXRef-golang.org.x.mod-v0.11.0
Relationship: SPDXRef-github.com.go-git.gcfg-v1.5.1-0.20230307220236-3a3c6141e376 DEPENDS_ON SPDXRef-github.com.pkg.errors-v0.9.1
Relationship: SPDXRef-github.com.go-git.gcfg-v1.5.1-0.20230307220236-3a3c6141e376 DEPENDS_ON SPDXRef-gopkg.in.warnings.v0-v0.1.2
Relationship: SPDXRef-golang.org.x.net-v0.11.0 DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-golang.org.x.net-v0.11.0 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-golang.org.x.net-v0.11.0 DEPENDS_ON SPDXRef-golang.org.x.text-v0.10.0
Relationship: SPDXRef-github.com.skeema.knownhosts-v1.1.1 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.skeema.knownhosts-v1.1.1 DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-github.com.xanzy.ssh-agent-v0.3.3 DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-github.com.xanzy.ssh-agent-v0.3.3 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-gonum.org.v1.gonum-v0.8.2
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.go-git.go-billy.v5-v5.4.1
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-golang.org.x.mod-v0.11.0
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.ekzhu.minhash-lsh-v0.0.0-20190924033628-faac2c6342f8
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.imdario.mergo-v0.3.15
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.shogo82148.go-shuffle-v1.0.1
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.spf13.pflag-v1.0.5
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.ProtonMail.go-crypto-v0.0.0-20230518184743-7afd39499903
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.jbenet.go-context-v0.0.0-20150711004518-d14ea06fba99
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-golang.org.x.exp-v0.0.0-20221006183845-316c7553db56
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-golang.org.x.net-v0.11.0
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.emirpasic.gods-v1.18.1
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.go-git.gcfg-v1.5.1-0.20230307220236-3a3c6141e376
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.xanzy.ssh-agent-v0.3.3
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.russross.blackfriday.v2-v2.1.0
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.montanaflynn.stats-v0.6.6
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.kevinburke.ssh-config-v1.2.0
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-golang.org.x.text-v0.10.0
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.cloudflare.circl-v1.3.3
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.dgryski.go-minhash-v0.0.0-20190315135803-ad340ca03076
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-gopkg.in.neurosnap.sentences.v1-v1.0.7
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.hhatto.gorst-v0.0.0-20181029133204-ca9f730cac5b
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.pkg.errors-v0.9.1
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.sergi.go-diff-v1.2.0
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.jdkato.prose-v1.2.1
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-gopkg.in.warnings.v0-v0.1.2
Relationship: SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1 DEPENDS_ON SPDXRef-github.com.go-git.go-git.v5-v5.7.0
Relationship: SPDXRef-golang.org.x.text-v0.10.0 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-golang.org.x.text-v0.10.0 DEPENDS_ON SPDXRef-golang.org.x.mod-v0.11.0
Relationship: SPDXRef-golang.org.x.exp-v0.0.0-20221006183845-316c7553db56 DEPENDS_ON SPDXRef-golang.org.x.mod-v0.11.0
Relationship: SPDXRef-golang.org.x.exp-v0.0.0-20221006183845-316c7553db56 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-gonum.org.v1.gonum-v0.8.2 DEPENDS_ON SPDXRef-golang.org.x.exp-v0.0.0-20221006183845-316c7553db56
Relationship: SPDXRef-github.com.jdkato.prose-v1.2.1 DEPENDS_ON SPDXRef-github.com.montanaflynn.stats-v0.6.6
Relationship: SPDXRef-github.com.jdkato.prose-v1.2.1 DEPENDS_ON SPDXRef-github.com.shogo82148.go-shuffle-v1.0.1
Relationship: SPDXRef-github.com.jdkato.prose-v1.2.1 DEPENDS_ON SPDXRef-gopkg.in.neurosnap.sentences.v1-v1.0.7
Relationship: SPDXRef-golang.org.x.mod-v0.11.0 DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-github.com.spf13.cobra-v1.7.0 DEPENDS_ON SPDXRef-github.com.spf13.pflag-v1.0.5
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.ProtonMail.go-crypto-v0.0.0-20230518184743-7afd39499903
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.cloudflare.circl-v1.3.3
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-golang.org.x.text-v0.10.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-gopkg.in.neurosnap.sentences.v1-v1.0.7
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.go-enry.go-license-detector.v4-v4.3.1
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.go-git.go-git.v5-v5.7.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.spdx.spdx-sbom-generator
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.hhatto.gorst-v0.0.0-20181029133204-ca9f730cac5b
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.pkg.errors-v0.9.1
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.skeema.knownhosts-v1.1.1
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-golang.org.x.crypto-v0.10.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.pelletier.go-toml.v2-v2.0.8
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.sirupsen.logrus-v1.9.3
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.dgryski.go-minhash-v0.0.0-20190315135803-ad340ca03076
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.go-git.gcfg-v1.5.1-0.20230307220236-3a3c6141e376
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.montanaflynn.stats-v0.6.6
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.pjbgf.sha1cd-v0.3.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-golang.org.x.mod-v0.11.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.ekzhu.minhash-lsh-v0.0.0-20190924033628-faac2c6342f8
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.jbenet.go-context-v0.0.0-20150711004518-d14ea06fba99
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.russross.blackfriday.v2-v2.1.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.shogo82148.go-shuffle-v1.0.1
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.xanzy.ssh-agent-v0.3.3
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.go-git.go-billy.v5-v5.4.1
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-golang.org.x.exp-v0.0.0-20221006183845-316c7553db56
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.vifraa.gopom-v0.2.1
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-sigs.k8s.io.release-utils-v0.7.4
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.blang.semver.v4-v4.0.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.sergi.go-diff-v1.2.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-gonum.org.v1.gonum-v0.8.2
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-gopkg.in.warnings.v0-v0.1.2
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.emirpasic.gods-v1.18.1
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.imdario.mergo-v0.3.15
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.jdkato.prose-v1.2.1
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-github.com.kevinburke.ssh-config-v1.2.0
Relationship: SPDXRef-github.com.opensbom-generator.parsers-v0.0.0-20230627202907-fc5a182b1325 DEPENDS_ON SPDXRef-golang.org.x.net-v0.11.0
Relationship: SPDXRef-sigs.k8s.io.release-utils-v0.7.4 DEPENDS_ON SPDXRef-github.com.blang.semver.v4-v4.0.0
Relationship: SPDXRef-sigs.k8s.io.release-utils-v0.7.4 DEPENDS_ON SPDXRef-github.com.sirupsen.logrus-v1.9.3
Relationship: SPDXRef-sigs.k8s.io.release-utils-v0.7.4 DEPENDS_ON SPDXRef-github.com.spf13.cobra-v1.7.0
Relationship: SPDXRef-sigs.k8s.io.release-utils-v0.7.4 DEPENDS_ON SPDXRef-github.com.spf13.pflag-v1.0.5
Relationship: SPDXRef-sigs.k8s.io.release-utils-v0.7.4 DEPENDS_ON SPDXRef-golang.org.x.mod-v0.11.0
Relationship: SPDXRef-sigs.k8s.io.release-utils-v0.7.4 DEPENDS_ON SPDXRef-golang.org.x.sys-v0.9.0
Relationship: SPDXRef-github.com.spdx.tools-golang-v0.5.2 DEPENDS_ON SPDXRef-github.com.anchore.go-struct-converter-v0.0.0-20221118182256-c68fdcfa2092
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment