{ "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:0c377953-076b-4604-adea-13a6fb5b1193", "version": 1, "metadata": { "timestamp": "2026-10-20T11:49:16Z", "tools": { "components": [ { "type": "application", "author": "anchore", "name": "grype", "version": "0.120.1" } ] }, "component": { "bom-ref": "73364a805356ee6f", "type": "file", "name": "/hh/act/4ec75808c4b016ed/hostexecutor/.wrk-build-605/rootfs" } }, "components": [ { "bom-ref": "pkg:pypi/anyio@4.15.1?package-id=pkg%3Apypi%2Fanyio%404.15.1%3Fpackage-id%3D3de98571c731f08d", "type": "library", "author": "Alex Grönholm ", "name": "anyio", "version": "4.15.1", "licenses": [ { "license": { "id": "MIT" } } ], "cpe": "cpe:2.3:a:python-anyio:python-anyio:4.15.1:*:*:*:*:*:*:*", "purl": "pkg:pypi/anyio@4.15.1", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-anyio:python_anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_anyio:python-anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_anyio:python_anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python-anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python_anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:anyio:python-anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:anyio:python_anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-anyio:anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_anyio:anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:anyio:anyio:4.15.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/anyio-4.15.1.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/anyio-4.15.1.dist-info/RECORD" }, { "name": "syft:location:2:path", "value": "/opt/venv/lib/python3.14t/site-packages/anyio-4.15.1.dist-info/top_level.txt" } ] }, { "bom-ref": "pkg:pypi/attrs@26.1.0?package-id=pkg%3Apypi%2Fattrs%4026.1.0%3Fpackage-id%3D68295219b96ad41e", "type": "library", "author": "Hynek Schlawack ", "name": "attrs", "version": "26.1.0", "licenses": [ { "license": { "id": "MIT" } } ], "cpe": "cpe:2.3:a:hynek_schlawack_\\", "name": "cattrs", "version": "26.2.1", "licenses": [ { "license": { "id": "MIT" } } ], "cpe": "cpe:2.3:a:tin_tvrtkovic_\\", "name": "h11", "version": "0.16.0", "licenses": [ { "license": { "id": "MIT" } } ], "cpe": "cpe:2.3:a:nathaniel_j__smith_project:python-h11:0.16.0:*:*:*:*:*:*:*", "purl": "pkg:pypi/h11@0.16.0", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:nathaniel_j__smith_project:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:nathaniel_j__smithproject:python-h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:nathaniel_j__smithproject:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:nathaniel_j__smith_project:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:nathaniel_j__smith:python-h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:nathaniel_j__smith:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:nathaniel_j__smithproject:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:nathaniel_j__smith:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:njs_project:python-h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:njs_project:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:njsproject:python-h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:njsproject:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-h11:python-h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-h11:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_h11:python-h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_h11:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python-h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:njs_project:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:h11:python-h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:h11:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:njs:python-h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:njs:python_h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:njsproject:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-h11:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_h11:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:h11:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:njs:h11:0.16.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/h11-0.16.0.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/h11-0.16.0.dist-info/RECORD" }, { "name": "syft:location:2:path", "value": "/opt/venv/lib/python3.14t/site-packages/h11-0.16.0.dist-info/top_level.txt" } ] }, { "bom-ref": "pkg:pypi/hf-xet@1.7.0?package-id=pkg%3Apypi%2Fhf-xet%401.7.0%3Fpackage-id%3Dcbafbb5dce94a94b", "type": "library", "name": "hf-xet", "version": "1.7.0", "licenses": [ { "license": { "id": "Apache-2.0" } } ], "cpe": "cpe:2.3:a:python-hf-xet:python-hf-xet:1.7.0:*:*:*:*:*:*:*", "purl": "pkg:pypi/hf-xet@1.7.0", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-hf-xet:python_hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_hf_xet:python-hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_hf_xet:python_hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-hf:python-hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-hf:python_hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_hf:python-hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_hf:python_hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf-xet:python-hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf-xet:python_hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf_xet:python-hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf_xet:python_hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-hf-xet:hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-hf-xet:hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python-hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python_hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_hf_xet:hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_hf_xet:hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf:python-hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf:python_hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-hf:hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-hf:hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_hf:hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_hf:hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf-xet:hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf-xet:hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf_xet:hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf_xet:hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf:hf-xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hf:hf_xet:1.7.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/hf_xet-1.7.0.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/hf_xet-1.7.0.dist-info/RECORD" } ] }, { "bom-ref": "pkg:pypi/httpcore2@2.15.1?package-id=pkg%3Apypi%2Fhttpcore2%402.15.1%3Fpackage-id%3D73f1c814cd216bc9", "type": "library", "author": "Tom Christie ", "name": "httpcore2", "version": "2.15.1", "licenses": [ { "license": { "id": "BSD-3-Clause" } } ], "cpe": "cpe:2.3:a:tom_christie_\\", "name": "httpx2", "version": "2.15.1", "licenses": [ { "license": { "id": "BSD-3-Clause" } } ], "cpe": "cpe:2.3:a:tom_christie_\\", "name": "huggingface-hub", "version": "2.2.0", "licenses": [ { "license": { "id": "Apache-2.0" } } ], "cpe": "cpe:2.3:a:hugging_face\\,_inc__project:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*", "purl": "pkg:pypi/huggingface-hub@2.2.0", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc__project:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc_project:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc_project:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-huggingface-hub:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-huggingface-hub:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_huggingface_hub:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_huggingface_hub:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc__project:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc__project:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc_:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc_:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc_project:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc_project:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-huggingface:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-huggingface:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_huggingface:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_huggingface:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface-hub:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface-hub:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface_hub:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface_hub:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-huggingface-hub:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-huggingface-hub:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_huggingface_hub:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_huggingface_hub:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julien_project:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julien_project:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julienproject:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julienproject:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc_:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hugging_face\\,_inc_:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-huggingface:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-huggingface:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_huggingface:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_huggingface:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface-hub:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface-hub:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface_hub:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface_hub:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julien_project:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julien_project:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julien:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julien:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julienproject:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julienproject:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python-huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python_huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:huggingface:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julien:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:julien:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:huggingface-hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:huggingface_hub:2.2.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/huggingface_hub-2.2.0.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/huggingface_hub-2.2.0.dist-info/RECORD" }, { "name": "syft:location:2:path", "value": "/opt/venv/lib/python3.14t/site-packages/huggingface_hub-2.2.0.dist-info/top_level.txt" } ] }, { "bom-ref": "pkg:pypi/idna@3.20?package-id=pkg%3Apypi%2Fidna%403.20%3Fpackage-id%3Dc4a2761f7371ab47", "type": "library", "author": "Kim Davies ", "name": "idna", "version": "3.20", "licenses": [ { "license": { "id": "BSD-3-Clause" } } ], "cpe": "cpe:2.3:a:kjd:internationalized_domain_names_in_applications:3.20:*:*:*:*:python:*:*", "purl": "pkg:pypi/idna@3.20", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/idna-3.20.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/idna-3.20.dist-info/RECORD" } ] }, { "bom-ref": "pkg:deb/ubuntu/libzstd@1.5.5%2Bdfsg2-2build1.1?distro=Ubuntu&package-id=pkg%3Adeb%2Fubuntu%2Flibzstd%401.5.5%252Bdfsg2-2build1.1%3Fdistro%3DUbuntu%26package-id%3Da3ba0c0e4cd4d84f", "type": "library", "name": "libzstd", "version": "1.5.5+dfsg2-2build1.1", "cpe": "cpe:2.3:a:libzstd:libzstd:1.5.5\\+dfsg2-2build1.1:*:*:*:*:*:*:*", "purl": "pkg:deb/Ubuntu/libzstd@1.5.5%2Bdfsg2-2build1.1?distro=Ubuntu", "properties": [ { "name": "syft:package:foundBy", "value": "elf-binary-package-cataloger" }, { "name": "syft:package:type", "value": "deb" }, { "name": "syft:package:metadataType", "value": "elf-binary-package-note-json-payload" }, { "name": "syft:location:0:path", "value": "/usr/lib/x86_64-linux-gnu/libzstd.so.1.5.5" } ] }, { "bom-ref": "pkg:pypi/networkx@3.7?package-id=pkg%3Apypi%2Fnetworkx%403.7%3Fpackage-id%3D8f7b3526e87f595e", "type": "library", "author": "Aric Hagberg ", "name": "networkx", "version": "3.7", "licenses": [ { "license": { "id": "BSD-3-Clause" } } ], "cpe": "cpe:2.3:a:python:networkx:3.7:*:*:*:*:*:*:*", "purl": "pkg:pypi/networkx@3.7", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/networkx-3.7.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/networkx-3.7.dist-info/RECORD" }, { "name": "syft:location:2:path", "value": "/opt/venv/lib/python3.14t/site-packages/networkx-3.7.dist-info/top_level.txt" } ] }, { "bom-ref": "pkg:pypi/numpy@2.5.4?package-id=pkg%3Apypi%2Fnumpy%402.5.4%3Fpackage-id%3D56fee6df0661abaf", "type": "library", "author": "Travis E. Oliphant et al.", "name": "numpy", "version": "2.5.4", "licenses": [ { "expression": "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0" } ], "cpe": "cpe:2.3:a:travis_e__oliphant_et_al__project:python-numpy:2.5.4:*:*:*:*:*:*:*", "purl": "pkg:pypi/numpy@2.5.4", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:travis_e__oliphant_et_al__project:python_numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:travis_e__oliphant_et_al_project:python-numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:travis_e__oliphant_et_al_project:python_numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:travis_e__oliphant_et_al__project:numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:travis_e__oliphant_et_al_:python-numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:travis_e__oliphant_et_al_:python_numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:travis_e__oliphant_et_al_project:numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:travis_e__oliphant_et_al_:numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-numpy:python-numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-numpy:python_numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_numpy:python-numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_numpy:python_numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python-numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python_numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:numpy:python-numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:numpy:python_numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-numpy:numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_numpy:numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:numpy:numpy:2.5.4:*:*:*:*:*:*:*" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/numpy-2.5.4.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/numpy-2.5.4.dist-info/RECORD" } ] }, { "bom-ref": "pkg:pypi/openvino@2026.4.1?package-id=pkg%3Apypi%2Fopenvino%402026.4.1%3Fpackage-id%3Da62a5580aef98be4", "type": "library", "author": "OpenVINO Developers ", "name": "openvino", "version": "2026.4.1", "licenses": [ { "license": { "id": "Apache-2.0" } } ], "cpe": "cpe:2.3:a:openvino_developers_\\", "name": "openvino-telemetry", "version": "2025.2.0", "licenses": [ { "license": { "name": "OSI Approved :: Apache Software License" } } ], "cpe": "cpe:2.3:a:python-openvino-telemetry:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*", "purl": "pkg:pypi/openvino-telemetry@2025.2.0", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-openvino-telemetry:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_openvino_telemetry:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_openvino_telemetry:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbot_project:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbot_project:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbotproject:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbotproject:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino-telemetry:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino-telemetry:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_telemetry:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_telemetry:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-openvino-telemetry:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-openvino-telemetry:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_openvino_telemetry:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_openvino_telemetry:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbot_project:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbot_project:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino-pushbot:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino-pushbot:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbot:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbot:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbotproject:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbotproject:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-openvino:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-openvino:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_openvino:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_openvino:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino-telemetry:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino-telemetry:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_telemetry:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_telemetry:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino-pushbot:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino-pushbot:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbot:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino_pushbot:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-openvino:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-openvino:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_openvino:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_openvino:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python-openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python_openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:openvino:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:openvino-telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:openvino_telemetry:2025.2.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/openvino_telemetry-2025.2.0.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/openvino_telemetry-2025.2.0.dist-info/RECORD" }, { "name": "syft:location:2:path", "value": "/opt/venv/lib/python3.14t/site-packages/openvino_telemetry-2025.2.0.dist-info/top_level.txt" } ] }, { "bom-ref": "pkg:pypi/packaging@26.3?package-id=pkg%3Apypi%2Fpackaging%4026.3%3Fpackage-id%3Dcfaf578e7ea4e2bb", "type": "library", "author": "Donald Stufft ", "name": "packaging", "version": "26.3", "licenses": [ { "expression": "Apache-2.0 OR BSD-2-Clause" } ], "cpe": "cpe:2.3:a:donald_stufft_\\", "name": "pillow", "version": "13.0.0", "licenses": [ { "license": { "id": "MIT-CMU" } } ], "cpe": "cpe:2.3:a:jeffrey_\\'alex\\'_clark_\\", "name": "pyyaml", "version": "6.0.3", "licenses": [ { "license": { "id": "MIT" } } ], "cpe": "cpe:2.3:a:kirill_simonov_project:python-pyyaml:6.0.3:*:*:*:*:*:*:*", "purl": "pkg:pypi/pyyaml@6.0.3", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:kirill_simonov_project:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:kirill_simonovproject:python-pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:kirill_simonovproject:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:kirill_simonov_project:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:kirill_simonov:python-pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:kirill_simonov:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:kirill_simonovproject:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-pyyaml:python-pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-pyyaml:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_pyyaml:python-pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_pyyaml:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:xi_project:python-pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:xi_project:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:xiproject:python-pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:xiproject:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:kirill_simonov:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-pyyaml:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python-pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_pyyaml:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:pyyaml:python-pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:pyyaml:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:xi_project:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:xi:python-pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:xi:python_pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:xiproject:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:pyyaml:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:xi:pyyaml:6.0.3:*:*:*:*:*:*:*" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/pyyaml-6.0.3.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/pyyaml-6.0.3.dist-info/RECORD" }, { "name": "syft:location:2:path", "value": "/opt/venv/lib/python3.14t/site-packages/pyyaml-6.0.3.dist-info/top_level.txt" } ] }, { "bom-ref": "pkg:pypi/tqdm@4.70.1?package-id=pkg%3Apypi%2Ftqdm%404.70.1%3Fpackage-id%3D25c1e4322129ad63", "type": "library", "name": "tqdm", "version": "4.70.1", "licenses": [ { "expression": "MPL-2.0 AND MIT" } ], "cpe": "cpe:2.3:a:python-tqdm:python-tqdm:4.70.1:*:*:*:*:*:*:*", "purl": "pkg:pypi/tqdm@4.70.1", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-tqdm:python_tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_tqdm:python-tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_tqdm:python_tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python-tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python_tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-tqdm:tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_tqdm:tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:tqdm:python-tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:tqdm:python_tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:tqdm:tqdm:4.70.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/tqdm-4.70.1.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/tqdm-4.70.1.dist-info/RECORD" }, { "name": "syft:location:2:path", "value": "/opt/venv/lib/python3.14t/site-packages/tqdm-4.70.1.dist-info/top_level.txt" } ] }, { "bom-ref": "pkg:pypi/truststore@0.10.5?package-id=pkg%3Apypi%2Ftruststore%400.10.5%3Fpackage-id%3D3214e6ec26deb85d", "type": "library", "author": "Seth Michael Larson , David Glick ", "name": "truststore", "version": "0.10.5", "licenses": [ { "license": { "id": "MIT" } } ], "cpe": "cpe:2.3:a:seth_michael_larson_\\", "name": "typing-extensions", "version": "4.16.0", "licenses": [ { "license": { "id": "PSF-2.0" } } ], "cpe": "cpe:2.3:a:python-typing-extensions:python-typing-extensions:4.16.0:*:*:*:*:*:*:*", "purl": "pkg:pypi/typing-extensions@4.16.0", "properties": [ { "name": "syft:package:foundBy", "value": "python-installed-package-cataloger" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:package:metadataType", "value": "python-package" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-typing-extensions:python_typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_typing_extensions:python-typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_typing_extensions:python_typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-typing-extensions:typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-typing-extensions:typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_typing_extensions:typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_typing_extensions:typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing-extensions:python-typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing-extensions:python_typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing_extensions:python-typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing_extensions:python_typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-typing:python-typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-typing:python_typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_typing:python-typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_typing:python_typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing-extensions:typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing-extensions:typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing_extensions:typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing_extensions:typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-typing:typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python-typing:typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python-typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:python_typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_typing:typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python_typing:typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing:python-typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing:python_typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:python:typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing:typing-extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:typing:typing_extensions:4.16.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:path", "value": "/opt/venv/lib/python3.14t/site-packages/typing_extensions-4.16.0.dist-info/METADATA" }, { "name": "syft:location:1:path", "value": "/opt/venv/lib/python3.14t/site-packages/typing_extensions-4.16.0.dist-info/RECORD" } ] }, { "bom-ref": "os:ubuntu@24.04", "type": "operating-system", "name": "ubuntu", "version": "24.04", "description": "Ubuntu 24.04.5 LTS", "swid": { "tagId": "ubuntu", "name": "ubuntu", "version": "24.04" }, "externalReferences": [ { "url": "https://bugs.launchpad.net/ubuntu/", "type": "issue-tracker" }, { "url": "https://www.ubuntu.com/", "type": "website" }, { "url": "https://help.ubuntu.com/", "comment": "support", "type": "other" }, { "url": "https://www.ubuntu.com/legal/terms-and-policies/privacy-policy", "comment": "privacyPolicy", "type": "other" } ], "properties": [ { "name": "syft:distro:extendedSupport", "value": "false" }, { "name": "syft:distro:id", "value": "ubuntu" }, { "name": "syft:distro:idLike:0", "value": "debian" }, { "name": "syft:distro:prettyName", "value": "Ubuntu 24.04.5 LTS" }, { "name": "syft:distro:versionCodename", "value": "noble" }, { "name": "syft:distro:versionID", "value": "24.04" } ] } ], "dependencies": [ { "ref": "pkg:pypi/anyio@4.15.1?package-id=pkg%3Apypi%2Fanyio%404.15.1%3Fpackage-id%3D3de98571c731f08d", "dependsOn": [ "pkg:pypi/idna@3.20?package-id=pkg%3Apypi%2Fidna%403.20%3Fpackage-id%3Dc4a2761f7371ab47", "pkg:pypi/typing-extensions@4.16.0?package-id=pkg%3Apypi%2Ftyping-extensions%404.16.0%3Fpackage-id%3D13970fe050b281ef" ] }, { "ref": "pkg:pypi/cattrs@26.2.1?package-id=pkg%3Apypi%2Fcattrs%4026.2.1%3Fpackage-id%3D8ec7cece89c46472", "dependsOn": [ "pkg:pypi/attrs@26.1.0?package-id=pkg%3Apypi%2Fattrs%4026.1.0%3Fpackage-id%3D68295219b96ad41e", "pkg:pypi/pyyaml@6.0.3?package-id=pkg%3Apypi%2Fpyyaml%406.0.3%3Fpackage-id%3Db010245e2de073e0", "pkg:pypi/typing-extensions@4.16.0?package-id=pkg%3Apypi%2Ftyping-extensions%404.16.0%3Fpackage-id%3D13970fe050b281ef" ] }, { "ref": "pkg:pypi/fsspec@2026.9.0?package-id=pkg%3Apypi%2Ffsspec%402026.9.0%3Fpackage-id%3D4b61e8e018b2d911", "dependsOn": [ "pkg:pypi/numpy@2.5.4?package-id=pkg%3Apypi%2Fnumpy%402.5.4%3Fpackage-id%3D56fee6df0661abaf", "pkg:pypi/tqdm@4.70.1?package-id=pkg%3Apypi%2Ftqdm%404.70.1%3Fpackage-id%3D25c1e4322129ad63" ] }, { "ref": "pkg:pypi/httpcore2@2.15.1?package-id=pkg%3Apypi%2Fhttpcore2%402.15.1%3Fpackage-id%3D73f1c814cd216bc9", "dependsOn": [ "pkg:pypi/anyio@4.15.1?package-id=pkg%3Apypi%2Fanyio%404.15.1%3Fpackage-id%3D3de98571c731f08d", "pkg:pypi/h11@0.16.0?package-id=pkg%3Apypi%2Fh11%400.16.0%3Fpackage-id%3D7419dec697ea485d", "pkg:pypi/truststore@0.10.5?package-id=pkg%3Apypi%2Ftruststore%400.10.5%3Fpackage-id%3D3214e6ec26deb85d" ] }, { "ref": "pkg:pypi/httpx2@2.15.1?package-id=pkg%3Apypi%2Fhttpx2%402.15.1%3Fpackage-id%3D0b73ee25c336e81d", "dependsOn": [ "pkg:pypi/anyio@4.15.1?package-id=pkg%3Apypi%2Fanyio%404.15.1%3Fpackage-id%3D3de98571c731f08d", "pkg:pypi/click@8.5.0?package-id=pkg%3Apypi%2Fclick%408.5.0%3Fpackage-id%3D2c1e71a8d1b0a104", "pkg:pypi/httpcore2@2.15.1?package-id=pkg%3Apypi%2Fhttpcore2%402.15.1%3Fpackage-id%3D73f1c814cd216bc9", "pkg:pypi/idna@3.20?package-id=pkg%3Apypi%2Fidna%403.20%3Fpackage-id%3Dc4a2761f7371ab47", "pkg:pypi/truststore@0.10.5?package-id=pkg%3Apypi%2Ftruststore%400.10.5%3Fpackage-id%3D3214e6ec26deb85d", "pkg:pypi/typing-extensions@4.16.0?package-id=pkg%3Apypi%2Ftyping-extensions%404.16.0%3Fpackage-id%3D13970fe050b281ef" ] }, { "ref": "pkg:pypi/huggingface-hub@2.2.0?package-id=pkg%3Apypi%2Fhuggingface-hub%402.2.0%3Fpackage-id%3D0f798babe60fab28", "dependsOn": [ "pkg:pypi/click@8.5.0?package-id=pkg%3Apypi%2Fclick%408.5.0%3Fpackage-id%3D2c1e71a8d1b0a104", "pkg:pypi/filelock@4.2.4?package-id=pkg%3Apypi%2Ffilelock%404.2.4%3Fpackage-id%3Ddfa7a6fd04b64559", "pkg:pypi/fsspec@2026.9.0?package-id=pkg%3Apypi%2Ffsspec%402026.9.0%3Fpackage-id%3D4b61e8e018b2d911", "pkg:pypi/hf-xet@1.7.0?package-id=pkg%3Apypi%2Fhf-xet%401.7.0%3Fpackage-id%3Dcbafbb5dce94a94b", "pkg:pypi/httpx2@2.15.1?package-id=pkg%3Apypi%2Fhttpx2%402.15.1%3Fpackage-id%3D0b73ee25c336e81d", "pkg:pypi/numpy@2.5.4?package-id=pkg%3Apypi%2Fnumpy%402.5.4%3Fpackage-id%3D56fee6df0661abaf", "pkg:pypi/packaging@26.3?package-id=pkg%3Apypi%2Fpackaging%4026.3%3Fpackage-id%3Dcfaf578e7ea4e2bb", "pkg:pypi/pillow@13.0.0?package-id=pkg%3Apypi%2Fpillow%4013.0.0%3Fpackage-id%3D15128fcdf8a94acd", "pkg:pypi/pyyaml@6.0.3?package-id=pkg%3Apypi%2Fpyyaml%406.0.3%3Fpackage-id%3Db010245e2de073e0", "pkg:pypi/tqdm@4.70.1?package-id=pkg%3Apypi%2Ftqdm%404.70.1%3Fpackage-id%3D25c1e4322129ad63", "pkg:pypi/typing-extensions@4.16.0?package-id=pkg%3Apypi%2Ftyping-extensions%404.16.0%3Fpackage-id%3D13970fe050b281ef" ] }, { "ref": "pkg:pypi/networkx@3.7?package-id=pkg%3Apypi%2Fnetworkx%403.7%3Fpackage-id%3D8f7b3526e87f595e", "dependsOn": [ "pkg:pypi/numpy@2.5.4?package-id=pkg%3Apypi%2Fnumpy%402.5.4%3Fpackage-id%3D56fee6df0661abaf", "pkg:pypi/pillow@13.0.0?package-id=pkg%3Apypi%2Fpillow%4013.0.0%3Fpackage-id%3D15128fcdf8a94acd" ] }, { "ref": "pkg:pypi/openvino@2026.4.1?package-id=pkg%3Apypi%2Fopenvino%402026.4.1%3Fpackage-id%3Da62a5580aef98be4", "dependsOn": [ "pkg:pypi/numpy@2.5.4?package-id=pkg%3Apypi%2Fnumpy%402.5.4%3Fpackage-id%3D56fee6df0661abaf", "pkg:pypi/openvino-telemetry@2025.2.0?package-id=pkg%3Apypi%2Fopenvino-telemetry%402025.2.0%3Fpackage-id%3Dc9c3141b87fb72c4" ] }, { "ref": "pkg:pypi/pillow@13.0.0?package-id=pkg%3Apypi%2Fpillow%4013.0.0%3Fpackage-id%3D15128fcdf8a94acd", "dependsOn": [ "pkg:pypi/packaging@26.3?package-id=pkg%3Apypi%2Fpackaging%4026.3%3Fpackage-id%3Dcfaf578e7ea4e2bb" ] } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7a3af3bc-b0ae-4b1b-8629-5f994cacc443", "id": "CVE-2021-24032", "source": { "name": "ubuntu-distro-ubuntu-14.04", "url": "https://ubuntu.com/security/CVE-2021-24032" }, "references": [ { "id": "CVE-2021-24032", "source": { "name": "ubuntu-distro-ubuntu-14.04", "url": "https://ubuntu.com/security/CVE-2021-24032" } } ], "ratings": [ { "severity": "medium", "method": "other" }, { "source": { "name": "FIRST", "url": "https://www.first.org/epss/" }, "score": 0.00348, "method": "other" } ], "affects": [ { "ref": "pkg:deb/ubuntu/libzstd@1.5.5%2Bdfsg2-2build1.1?distro=Ubuntu&package-id=pkg%3Adeb%2Fubuntu%2Flibzstd%401.5.5%252Bdfsg2-2build1.1%3Fdistro%3DUbuntu%26package-id%3Da3ba0c0e4cd4d84f", "versions": [ { "version": "1.5.5+dfsg2-2build1.1", "status": "affected" } ] } ] }, { "bom-ref": "urn:uuid:4c01c51f-eb66-4430-b18c-8625f57171db", "id": "CVE-2021-24032", "source": { "name": "ubuntu-distro-ubuntu-14.04", "url": "https://ubuntu.com/security/CVE-2021-24032" }, "references": [ { "id": "CVE-2021-24032", "source": { "name": "ubuntu-distro-ubuntu-14.04", "url": "https://ubuntu.com/security/CVE-2021-24032" } } ], "ratings": [ { "severity": "medium", "method": "other" }, { "source": { "name": "FIRST", "url": "https://www.first.org/epss/" }, "score": 0.00348, "method": "other" } ], "affects": [ { "ref": "pkg:deb/ubuntu/libzstd@1.5.5%2Bdfsg2-2build1.1?distro=Ubuntu&package-id=pkg%3Adeb%2Fubuntu%2Flibzstd%401.5.5%252Bdfsg2-2build1.1%3Fdistro%3DUbuntu%26package-id%3Da3ba0c0e4cd4d84f", "versions": [ { "version": "1.5.5+dfsg2-2build1.1", "status": "affected" } ] } ] } ] }