{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.DeepSourceCorp/cppcheck-deepsource","documentNamespace":"https://spdx.org/spdxdocs/protobom/b502bd60-9ac4-444b-84a9-a466abef9a15","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260130170711-0b8e67cacb3b+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-02-12T02:54:45Z"},"packages":[{"name":"proc-macro2","SPDXID":"SPDXRef-cargo-proc-macro2-1.0.56-75c946","versionInfo":"1.0.56","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/proc-macro2@1.0.56"}]},{"name":"env_struct","SPDXID":"SPDXRef-cargo-envstruct-0.1.3-75c946","versionInfo":"0.1.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/env_struct@0.1.3"}]},{"name":"winapi-x86_64-pc-windows-gnu","SPDXID":"SPDXRef-cargo-winapi-x8664-pc-windows-gnu-0.4.0-75c946","versionInfo":"0.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","copyrightText":"Copyright (c) 2016, Copyright (c) 2016 winapi-rs, Copyright (c) 2016 winapi-rs developers, Copyright (c) 2016-2018, Copyright (c) 2016-2018 winapi-rs, Copyright (c) 2016-2018 winapi-rs developers","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/winapi-x86_64-pc-windows-gnu@0.4.0"}]},{"name":"atty","SPDXID":"SPDXRef-cargo-atty-0.2.14-75c946","versionInfo":"0.2.14","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2015-2019 Doug Tangren","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/atty@0.2.14"}]},{"name":"walkdir","SPDXID":"SPDXRef-cargo-walkdir-2.3.3-75c946","versionInfo":"2.3.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Unlicense OR MIT","copyrightText":"Copyright (c) 2015 Andrew Gallant","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/walkdir@2.3.3"}]},{"name":"quote","SPDXID":"SPDXRef-cargo-quote-1.0.26-75c946","versionInfo":"1.0.26","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/quote@1.0.26"}]},{"name":"libc","SPDXID":"SPDXRef-cargo-libc-0.2.142-75c946","versionInfo":"0.2.142","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","copyrightText":"Copyright (c) 2014-2020 The Rust Project","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/libc@0.2.142"}]},{"name":"same-file","SPDXID":"SPDXRef-cargo-same-file-1.0.6-75c946","versionInfo":"1.0.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Unlicense OR MIT","copyrightText":"Copyright (c) 2017 Andrew Gallant","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/same-file@1.0.6"}]},{"name":"winapi-util","SPDXID":"SPDXRef-cargo-winapi-util-0.1.5-75c946","versionInfo":"0.1.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Unlicense OR MIT","copyrightText":"Copyright (c) 2017 Andrew Gallant","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/winapi-util@0.1.5"}]},{"name":"hermit-abi","SPDXID":"SPDXRef-cargo-hermit-abi-0.1.19-75c946","versionInfo":"0.1.19","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/hermit-abi@0.1.19"}]},{"name":"unicode-ident","SPDXID":"SPDXRef-cargo-unicode-ident-1.0.8-75c946","versionInfo":"1.0.8","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"(MIT OR Apache-2.0) AND Unicode-DFS-2016","copyrightText":"Copyright (c) 1991-2022 Unicode, Inc.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/unicode-ident@1.0.8"}]},{"name":"serde_json","SPDXID":"SPDXRef-cargo-serdejson-1.0.96-75c946","versionInfo":"1.0.96","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","copyrightText":"copyright Alexander Huszagh","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/serde_json@1.0.96"}]},{"name":"serde_derive","SPDXID":"SPDXRef-cargo-serdederive-1.0.160-75c946","versionInfo":"1.0.160","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/serde_derive@1.0.160"}]},{"name":"winapi","SPDXID":"SPDXRef-cargo-winapi-0.3.9-75c946","versionInfo":"0.3.9","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","copyrightText":"Copyright (c) 2015-2018, Copyright (c) 2015-2018 The winapi-rs, Copyright (c) 2015-2018 The winapi-rs Developers","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/winapi@0.3.9"}]},{"name":"winapi-i686-pc-windows-gnu","SPDXID":"SPDXRef-cargo-winapi-i686-pc-windows-gnu-0.4.0-75c946","versionInfo":"0.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","copyrightText":"Copyright (c) 2016, Copyright (c) 2016 winapi-rs, Copyright (c) 2016 winapi-rs developers, Copyright (c) 2016-2018, Copyright (c) 2016-2018 winapi-rs, Copyright (c) 2016-2018 winapi-rs developers","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/winapi-i686-pc-windows-gnu@0.4.0"}]},{"name":"log","SPDXID":"SPDXRef-cargo-log-0.4.17-75c946","versionInfo":"0.4.17","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","copyrightText":"Copyright (c) 2014 The Rust Project, Copyright (c) 2014 The Rust Project Developers, Copyright 2014-2015 The Rust Project, Copyright 2014-2015 The Rust Project Developers, Copyright 2015 The Rust Project, Copyright 2015 The Rust Project Developers","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/log@0.4.17"}]},{"name":"quick-xml","SPDXID":"SPDXRef-cargo-quick-xml-0.28.2-75c946","versionInfo":"0.28.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2016 Johann Tuffe","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/quick-xml@0.28.2"}]},{"name":"itoa","SPDXID":"SPDXRef-cargo-itoa-1.0.6-75c946","versionInfo":"1.0.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/itoa@1.0.6"}]},{"name":"serde","SPDXID":"SPDXRef-cargo-serde-1.0.160-75c946","versionInfo":"1.0.160","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","copyrightText":"(c), None Ok","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/serde@1.0.160"}]},{"name":"syn","SPDXID":"SPDXRef-cargo-syn-2.0.15-75c946","versionInfo":"2.0.15","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT OR Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/syn@2.0.15"}]},{"name":"cppcheck-deepsource","SPDXID":"SPDXRef-cargo-cppcheck-deepsource-0.2.0-75c946","versionInfo":"0.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/cppcheck-deepsource@0.2.0"}]},{"name":"cfg-if","SPDXID":"SPDXRef-cargo-cfg-if-1.0.0-75c946","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 OR MIT","copyrightText":"Copyright (c) 2014 Alex Crichton","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/cfg-if@1.0.0"}]},{"name":"memchr","SPDXID":"SPDXRef-cargo-memchr-2.5.0-75c946","versionInfo":"2.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Unlicense OR MIT","copyrightText":"(c) 83, (c) 83, // a, Copyright (c) 2015 Andrew Gallant","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/memchr@2.5.0"}]},{"name":"ryu","SPDXID":"SPDXRef-cargo-ryu-1.0.13-75c946","versionInfo":"1.0.13","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 OR BSL-1.0","copyrightText":"Copyright 2018 Ulf Adams","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/ryu@1.0.13"}]},{"name":"com.github.DeepSourceCorp/cppcheck-deepsource","SPDXID":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","versionInfo":"master","downloadLocation":"git+https://github.com/DeepSourceCorp/cppcheck-deepsource","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/DeepSourceCorp/cppcheck-deepsource@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-walkdir-2.3.3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-quote-1.0.26-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-winapi-util-0.1.5-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-serdederive-1.0.160-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-winapi-0.3.9-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-quick-xml-0.28.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-ryu-1.0.13-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-envstruct-0.1.3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-libc-0.2.142-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-unicode-ident-1.0.8-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-winapi-i686-pc-windows-gnu-0.4.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-log-0.4.17-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-itoa-1.0.6-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-syn-2.0.15-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-cppcheck-deepsource-0.2.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-serdejson-1.0.96-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-serde-1.0.160-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-memchr-2.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-proc-macro2-1.0.56-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-winapi-x8664-pc-windows-gnu-0.4.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-atty-0.2.14-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-same-file-1.0.6-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-hermit-abi-0.1.19-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relatedSpdxElement":"SPDXRef-cargo-cfg-if-1.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-DeepSourceCorp-cppcheck-deepsource-master-024200","relationshipType":"DESCRIBES"}]}