{
 "bomFormat": "CycloneDX",
 "specVersion": "1.6",
 "serialNumber": "urn:uuid:b3d746be-a119-5a66-b170-d2a0a29e99e5",
 "version": 1,
 "metadata": {
  "timestamp": "2026-09-14T08:29:40Z",
  "tools": {
   "components": [
    {
     "type": "application",
     "name": "corecp-sbom",
     "version": "1",
     "description": "scripts/sbom.py, from supply-chain/inventory.json"
    }
   ]
  },
  "component": {
   "type": "application",
   "bom-ref": "pkg:deb/ubuntu/corecp-imapsync@2.314-corecp2?arch=all",
   "name": "corecp-imapsync",
   "version": "2.314-corecp2",
   "purl": "pkg:deb/ubuntu/corecp-imapsync@2.314-corecp2?arch=all",
   "description": "corecp-imapsync 2.314-corecp2 for all, built by corecp-sbuild",
   "licenses": [
    {
     "license": {
      "name": "the licences of the upstream sources listed as components"
     }
    }
   ],
   "hashes": [
    {
     "alg": "SHA-512",
     "content": "94773ed59fd82199a49e3d190cdac1e86f882fc60632a4004d392556bff6e976868690476366e8a20e8fd6e06787ff7ede957eba4b1a0f8444329b9db75fc45e"
    },
    {
     "alg": "SHA-256",
     "content": "39efa1a2697244f8dab7e08c795fb93cf9e40b97a62c1ab20298aaf06bb3dc30"
    }
   ],
   "properties": [
    {
     "name": "corecp:artifact:length",
     "value": "138104"
    },
    {
     "name": "corecp:source:commit",
     "value": "b2dd8b8d780f3b973050222ceb7054ab8b8c68c3"
    },
    {
     "name": "corecp:build:installed-build-depends",
     "value": "115"
    }
   ]
  },
  "properties": [
   {
    "name": "corecp:population",
    "value": "The upstream sources this package was built or repackaged from, each fetched and verified before the build started (infra/build-server/sbuild/recipes/imapsync.sh)."
   }
  ]
 },
 "components": [
  {
   "type": "library",
   "bom-ref": "imapsync@2.314",
   "name": "imapsync",
   "version": "2.314",
   "purl": "pkg:generic/imapsync@2.314?download_url=https://raw.githubusercontent.com/imapsync/imapsync/imapsync-2.314/imapsync",
   "hashes": [
    {
     "alg": "SHA-256",
     "content": "89faed96f7c389723ddd7e78a00421b90d5b85bf79407fcf1b11209f3d4d7416"
    }
   ],
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://raw.githubusercontent.com/imapsync/imapsync/imapsync-2.314/imapsync"
    }
   ],
   "licenses": [
    {
     "license": {
      "name": "NOLIMIT Public License"
     }
    }
   ],
   "properties": [
    {
     "name": "corecp:source:verified",
     "value": "sha256 pinned in infra/build-server/sbuild/recipes/imapsync.sh (trust on first use; upstream publishes no digest)"
    },
    {
     "name": "corecp:licence:source",
     "value": "declared by the recipe — no fingerprint matched"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "imapsync-licence@2.314",
   "name": "imapsync-licence",
   "version": "2.314",
   "purl": "pkg:generic/imapsync-licence@2.314?download_url=https://raw.githubusercontent.com/imapsync/imapsync/imapsync-2.314/LICENSE",
   "hashes": [
    {
     "alg": "SHA-256",
     "content": "ff6c1f3ae704d82872e86dd19275e03bfb61a2c9ce5835b6d6989910d88635cf"
    }
   ],
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://raw.githubusercontent.com/imapsync/imapsync/imapsync-2.314/LICENSE"
    }
   ],
   "licenses": [
    {
     "license": {
      "name": "NOLIMIT Public License"
     }
    }
   ],
   "properties": [
    {
     "name": "corecp:source:verified",
     "value": "sha256 pinned in infra/build-server/sbuild/recipes/imapsync.sh"
    },
    {
     "name": "corecp:licence:source",
     "value": "declared by the recipe — no fingerprint matched"
    }
   ]
  }
 ]
}