{
 "bomFormat": "CycloneDX",
 "specVersion": "1.6",
 "serialNumber": "urn:uuid:722510cd-d8a6-529d-8405-1388b96e2a27",
 "version": 1,
 "metadata": {
  "timestamp": "2026-10-01T16:21:12Z",
  "tools": {
   "components": [
    {
     "type": "application",
     "name": "corecp-sbom",
     "version": "1",
     "description": "scripts/sbom.py, from supply-chain/inventory.json"
    }
   ]
  },
  "component": {
   "type": "application",
   "bom-ref": "pkg:deb/ubuntu/corecp-agent@0.50.0~dev.1790871609?arch=amd64",
   "name": "corecp-agent",
   "version": "0.50.0~dev.1790871609",
   "purl": "pkg:deb/ubuntu/corecp-agent@0.50.0~dev.1790871609?arch=amd64",
   "description": "CoreCP corecp-agent 0.50.0~dev.1790871609 for amd64",
   "licenses": [
    {
     "license": {
      "name": "proprietary — all rights reserved (see LICENSE in this package's copyright file)"
     }
    }
   ],
   "hashes": [
    {
     "alg": "SHA-512",
     "content": "20e05b0e79b5d6cfd0264d028d323df160f2d55d2b52b63c6a4debe762bd022ce05ae9ea2804b5379e43d08d871f3453983a5e8bcdbbddb5bee3d70a082a4dc1"
    },
    {
     "alg": "SHA-256",
     "content": "f1a09bf5a5e7dab84ecd3e00e82db3572275089131f802ba8c386ffd33ca7f6c"
    }
   ],
   "properties": [
    {
     "name": "corecp:artifact:length",
     "value": "8288074"
    },
    {
     "name": "corecp:source:commit",
     "value": "unknown: this build ran from a source tree with no git history (the build server holds an rsync copy), and no caller passed CORECP_SOURCE_COMMIT"
    }
   ]
  },
  "properties": [
   {
    "name": "corecp:population",
    "value": "Go modules the linker pulls into this binary, and — for the panel — the whole production npm tree behind its web bundle. See the head of NOTICE for why that population is a superset."
   }
  ]
 },
 "components": [
  {
   "type": "library",
   "bom-ref": "go:github.com/cenkalti/backoff/v5@v5.0.3",
   "name": "github.com/cenkalti/backoff/v5",
   "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
   "licenses": [
    {
     "license": {
      "id": "MIT"
     }
    }
   ],
   "version": "v5.0.3",
   "copyright": "Copyright (c) 2014 Cenk Altı",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/github.com/cenkalti/backoff/v5@v5.0.3"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "go:github.com/go-acme/lego/v5@v5.3.1",
   "name": "github.com/go-acme/lego/v5",
   "purl": "pkg:golang/github.com/go-acme/lego/v5@v5.3.1",
   "licenses": [
    {
     "license": {
      "id": "MIT"
     }
    }
   ],
   "version": "v5.3.1",
   "copyright": "Copyright (c) 2017-2024 Ludovic Fernandez",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/github.com/go-acme/lego/v5@v5.3.1"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "go:github.com/go-jose/go-jose/v4@v4.1.4",
   "name": "github.com/go-jose/go-jose/v4",
   "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
   "licenses": [
    {
     "license": {
      "id": "Apache-2.0"
     }
    }
   ],
   "version": "v4.1.4",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4@v4.1.4"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "go:github.com/miekg/dns@v1.1.72",
   "name": "github.com/miekg/dns",
   "purl": "pkg:golang/github.com/miekg/dns@v1.1.72",
   "licenses": [
    {
     "license": {
      "id": "BSD-3-Clause"
     }
    }
   ],
   "version": "v1.1.72",
   "copyright": "Copyright (c) 2009, The Go Authors. Extensions copyright (c) 2011, Miek Gieben.",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/github.com/miekg/dns@v1.1.72"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "go:golang.org/x/crypto@v0.54.0",
   "name": "golang.org/x/crypto",
   "purl": "pkg:golang/golang.org/x/crypto@v0.54.0",
   "licenses": [
    {
     "license": {
      "id": "BSD-3-Clause"
     }
    }
   ],
   "version": "v0.54.0",
   "copyright": "Copyright 2009 The Go Authors.",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/golang.org/x/crypto@v0.54.0"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "go:golang.org/x/net@v0.57.0",
   "name": "golang.org/x/net",
   "purl": "pkg:golang/golang.org/x/net@v0.57.0",
   "licenses": [
    {
     "license": {
      "id": "BSD-3-Clause"
     }
    }
   ],
   "version": "v0.57.0",
   "copyright": "Copyright 2009 The Go Authors.",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/golang.org/x/net@v0.57.0"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "go:golang.org/x/sys@v0.47.0",
   "name": "golang.org/x/sys",
   "purl": "pkg:golang/golang.org/x/sys@v0.47.0",
   "licenses": [
    {
     "license": {
      "id": "BSD-3-Clause"
     }
    }
   ],
   "version": "v0.47.0",
   "copyright": "Copyright 2009 The Go Authors.",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/golang.org/x/sys@v0.47.0"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "go:golang.org/x/text@v0.40.0",
   "name": "golang.org/x/text",
   "purl": "pkg:golang/golang.org/x/text@v0.40.0",
   "licenses": [
    {
     "license": {
      "id": "BSD-3-Clause"
     }
    }
   ],
   "version": "v0.40.0",
   "copyright": "Copyright 2009 The Go Authors.",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/golang.org/x/text@v0.40.0"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "go:gopkg.in/yaml.v3@v3.0.1",
   "name": "gopkg.in/yaml.v3",
   "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
   "licenses": [
    {
     "expression": "MIT AND Apache-2.0"
    }
   ],
   "version": "v3.0.1",
   "copyright": "Copyright (c) 2006-2010 Kirill Simonov",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/gopkg.in/yaml.v3@v3.0.1"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "go:software.sslmate.com/src/go-pkcs12@v0.7.3",
   "name": "software.sslmate.com/src/go-pkcs12",
   "purl": "pkg:golang/software.sslmate.com/src/go-pkcs12@v0.7.3",
   "licenses": [
    {
     "license": {
      "id": "BSD-3-Clause"
     }
    }
   ],
   "version": "v0.7.3",
   "copyright": "Copyright (c) 2015, 2018, 2019 Opsmate, Inc. All rights reserved.",
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://pkg.go.dev/software.sslmate.com/src/go-pkcs12@v0.7.3"
    }
   ]
  }
 ]
}