{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.gitpython-developers/GitPython","documentNamespace":"https://spdx.org/spdxdocs/protobom/40654cdf-4b41-4f9b-84ef-01364d211534","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251201163737-0a89483e840c+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-12-15T06:28:18Z"},"packages":[{"name":"pytest-icdiff","SPDXID":"SPDXRef-pypi-pytest-icdiff-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-icdiff"}]},{"name":"shellcheck","SPDXID":"SPDXRef-pypi-shellcheck-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/shellcheck"}]},{"name":"ruff","SPDXID":"SPDXRef-pypi-ruff-75c946","versionInfo":"\u003e= 0.8","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/ruff"}]},{"name":"coverage","SPDXID":"SPDXRef-pypi-coverage-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/coverage"}]},{"name":"typing-extensions","SPDXID":"SPDXRef-pypi-typing-extensions-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/typing-extensions"}]},{"name":"pre-commit","SPDXID":"SPDXRef-pypi-pre-commit-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pre-commit"}]},{"name":"pytest-mock","SPDXID":"SPDXRef-pypi-pytest-mock-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-mock"}]},{"name":"mock","SPDXID":"SPDXRef-pypi-mock-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/mock"}]},{"name":"pytest-sugar","SPDXID":"SPDXRef-pypi-pytest-sugar-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-sugar"}]},{"name":"pytest-cov","SPDXID":"SPDXRef-pypi-pytest-cov-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-cov"}]},{"name":"pytest","SPDXID":"SPDXRef-pypi-pytest-75c946","versionInfo":"\u003e= 7.3.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest"}]},{"name":"pytest-instafail","SPDXID":"SPDXRef-pypi-pytest-instafail-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-instafail"}]},{"name":"ddt","SPDXID":"SPDXRef-pypi-ddt-75c946","versionInfo":"\u003e= 1.1.1,\u003c 1.4.3 || \u003e 1.4.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/ddt"}]},{"name":"mypy","SPDXID":"SPDXRef-pypi-mypy-1.18.2-75c946","versionInfo":"1.18.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT AND Python-2.0.1","copyrightText":"(c) D TypeAlias, (c) E Argument, (c) E Cannot, (c) E Incompatible, (c) E Only, (c) E Too, (c) Error Method, (c) N Revealed, Copyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands, Copyright (c) 1995-2001 Corporation for National Research Initiatives, Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Python Software Foundation, Copyright (c) 2012-2023 Jukka Lehtosalo and contributors, Copyright (c) 2015 Jukka Lehtosalo and contributors, Copyright (c) 2015-2023 Dropbox, Inc., Copyright (c) 2016 The Pybind Development Team, Copyright 2003 Google Inc., Copyright 2005, Google Inc., Copyright 2006, Google Inc., Copyright 2007, Google Inc., Copyright 2008 Google Inc., Copyright 2008, Google Inc., Copyright 2009 Google Inc., copyright 2012- Y Jukka Lehtosalo and mypy contributors, Copyright 2015, Google Inc., copyright 2020-2022, mypyc team, Copyright Contributors to the pythoncapi_compat project.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/[email protected]"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@6.%2A.%2A"}]},{"name":"cygwin/cygwin-install-action","SPDXID":"SPDXRef-githubactions-cygwin-cygwin-install-action-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/cygwin/cygwin-install-action@6.%2A.%2A"}]},{"name":"Vampire/setup-wsl","SPDXID":"SPDXRef-githubactions-Vampire-setup-wsl-6.0.0-75c946","versionInfo":"6.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/Vampire/[email protected]"}]},{"name":"gitdb","SPDXID":"SPDXRef-pypi-gitdb-75c946","versionInfo":"\u003e= 4.0.1,\u003c 5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/gitdb"}]},{"name":"typing-extensions","SPDXID":"SPDXRef-pypi-typing-extensions-75c946","versionInfo":"\u003e= 3.10.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/typing-extensions"}]},{"name":"sphinx-rtd-theme","SPDXID":"SPDXRef-pypi-sphinx-rtd-theme-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx-rtd-theme"}]},{"name":"sphinx-autodoc-typehints","SPDXID":"SPDXRef-pypi-sphinx-autodoc-typehints-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx-autodoc-typehints"}]},{"name":"sphinx","SPDXID":"SPDXRef-pypi-sphinx-75c946","versionInfo":"\u003e= 7.1.2,\u003c 7.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx"}]},{"name":"github/codeql-action/analyze","SPDXID":"SPDXRef-githubactions-githubcodeql-action-analyze-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/analyze@4.%2A.%2A"}]},{"name":"github/codeql-action/init","SPDXID":"SPDXRef-githubactions-githubcodeql-action-init-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/init@4.%2A.%2A"}]},{"name":"pre-commit/action","SPDXID":"SPDXRef-githubactions-pre-commit-action-3.0.1-75c946","versionInfo":"3.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pre-commit/[email protected]"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@6.%2A.%2A"}]},{"name":"com.github.gitpython-developers/GitPython","SPDXID":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","versionInfo":"main","downloadLocation":"git+https://github.com/gitpython-developers/GitPython","filesAnalyzed":false,"licenseDeclared":"BSD-3-Clause","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/gitpython-developers/GitPython@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-pytest-icdiff-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-pre-commit-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-pytest-mock-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-init-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-githubactions-pre-commit-action-3.0.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-ruff-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-mock-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-pytest-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-pytest-instafail-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-mypy-1.18.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-githubactions-Vampire-setup-wsl-6.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-sphinx-rtd-theme-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-sphinx-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-shellcheck-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-typing-extensions-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-pytest-sugar-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-ddt-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-gitdb-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-sphinx-autodoc-typehints-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-analyze-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-coverage-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-pypi-pytest-cov-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-githubactions-cygwin-cygwin-install-action-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-gitpython-developers-GitPython-main-1ac76e","relationshipType":"DESCRIBES"}]}