{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.OpenFunction/functions-framework-python","documentNamespace":"https://spdx.org/spdxdocs/protobom/617a0dd0-7994-489b-84d3-29c9fc486917","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260130170711-0b8e67cacb3b+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-02-10T08:27:56Z"},"packages":[{"name":"actions/github-script","SPDXID":"SPDXRef-githubactions-actions-github-script-6-75c946","versionInfo":"6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/github-script@6"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-3-75c946","versionInfo":"3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@3"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-4-75c946","versionInfo":"4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@4"}]},{"name":"pypa/gh-action-pypi-publish","SPDXID":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-master-75c946","versionInfo":"master","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pypa/gh-action-pypi-publish@master"}]},{"name":"dapr","SPDXID":"SPDXRef-pypi-dapr-1.10.0-75c946","versionInfo":"1.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 AND LicenseRef-scancode-public-domain","copyrightText":"Copyright 2021 The Dapr Authors, Copyright 2023 The Dapr Authors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/dapr@1.10.0"}]},{"name":"dapr-ext-grpc","SPDXID":"SPDXRef-pypi-dapr-ext-grpc-1.10.0-75c946","versionInfo":"1.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 AND LicenseRef-scancode-public-domain","copyrightText":"Copyright 2021 The Dapr Authors, Copyright 2023 The Dapr Authors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/dapr-ext-grpc@1.10.0"}]},{"name":"uvicorn","SPDXID":"SPDXRef-pypi-uvicorn-75c946","versionInfo":"\u003e= 0.22.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/uvicorn"}]},{"name":"flask","SPDXID":"SPDXRef-pypi-flask-75c946","versionInfo":"\u003e= 1.0,\u003c 3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/flask"}]},{"name":"gunicorn","SPDXID":"SPDXRef-pypi-gunicorn-75c946","versionInfo":"\u003e= 19.2.0,\u003c 21.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/gunicorn"}]},{"name":"cloudevents","SPDXID":"SPDXRef-pypi-cloudevents-75c946","versionInfo":"\u003e= 1.2.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/cloudevents"}]},{"name":"dapr","SPDXID":"SPDXRef-pypi-dapr-75c946","versionInfo":"\u003e= 1.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/dapr"}]},{"name":"dapr-ext-fastapi","SPDXID":"SPDXRef-pypi-dapr-ext-fastapi-75c946","versionInfo":"\u003e= 1.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/dapr-ext-fastapi"}]},{"name":"aiohttp","SPDXID":"SPDXRef-pypi-aiohttp-3.8.6-75c946","versionInfo":"3.8.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"copyright f project contributors, Copyright Fedor Indutny, 2018","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/aiohttp@3.8.6"}]},{"name":"grpcio","SPDXID":"SPDXRef-pypi-grpcio-1.54.2-75c946","versionInfo":"1.54.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"(c) 1999 Entrust.net Limited, (c) 1999 Entrust.net Limited Label Entrust.net Premium 2048 Secure Server CA Serial, (c) 2006 Entrust, Inc., (c) 2006 Entrust, Inc. Label Entrust Root Certification, (c) 2009 Entrust, Inc. - for, (c) 2012 Entrust, Inc. - for, (c) 2015 Entrust, Inc. - for, Copyright (c) 1987-2001 The Regents of the University of California, Copyright (c) 1990-2000 Info-ZIP., Copyright (c) 1995-1997 Eric Young (eay@cryptsoft.com), Copyright (c) 1995-1998 Eric Young (eay@cryptsoft.com), Copyright (c) 1995-2003 Mark Adler, Copyright (c) 1995-2003, 2010 Mark Adler, Copyright (c) 1995-2003, 2010, 2014, 2016 Jean-loup Gailly, Mark Adler, Copyright (c) 1995-2005, 2010 Mark Adler, Copyright (c) 1995-2005, 2014, 2016 Jean-loup Gailly, Mark Adler, Copyright (c) 1995-2006, 2010, 2011, 2016 Jean-loup Gailly, Copyright (c) 1995-2006, 2011, 2016 Jean-loup Gailly, Copyright (c) 1995-2008 Mark Adler, Copyright (c) 1995-2010 Jean-loup Gailly, Brian Raiter and Gilles Vollant, Copyright (c) 1995-2011, 2016 Mark Adler, Copyright (c) 1995-2016 Jean-loup Gailly, Mark Adler, Copyright (c) 1995-2017 Jean-loup Gailly, Copyright (c) 1995-2017 Mark Adler, Copyright (c) 1995-2018 Jean-loup Gailly, Copyright (c) 1995-2019 Mark Adler, Copyright (c) 1995-2021 Jean-loup Gailly, Copyright (c) 1995-2022 Jean-loup Gailly and Mark Adler, Copyright (c) 1995-2022 Jean-loup Gailly, Mark Adler, Copyright (c) 1995-2022 Mark Adler, Copyright (c) 1995, 1996, 1997, and 1998 WIDE Project, Copyright (c) 1996-1999 by Internet Software Consortium, Copyright (c) 1996,1999 by Internet Software Consortium, Copyright (c) 1997 Christian Michelsen Research AS Advanced Computing, Copyright (c) 1998 - 2010 Gilles Vollant, Even Rouault, Mathias Svensson, Copyright (c) 1998-2000 The OpenSSL Project, Copyright (c) 1998-2001 The OpenSSL Project, Copyright (c) 1998-2002 The OpenSSL Project, Copyright (c) 1998-2003 The OpenSSL Project, Copyright (c) 1998-2004 The OpenSSL Project, Copyright (c) 1998-2005 Gilles Vollant, Copyright (c) 1998-2005 The OpenSSL Project, Copyright (c) 1998-2006 The OpenSSL Project, Copyright (c) 1998-2007 The OpenSSL Project, Copyright (c) 1998-2010 Gilles Vollant (minizip) http://www.winimage.com/zLibDll/minizip.html, Copyright (c) 1998-2011 The OpenSSL Project, Copyright (c) 1999 The OpenSSL Project, Copyright (c) 1999-2002 The OpenSSL Project, Copyright (c) 1999-2003 The OpenSSL Project, Copyright (c) 1999-2004 The OpenSSL Project, Copyright (c) 1999-2005 The OpenSSL Project, Copyright (c) 1999-2007 The OpenSSL Project, Copyright (c) 1999-2008 The OpenSSL Project, Copyright (c) 2000 The OpenSSL Project, Copyright (c) 2000-2002 The OpenSSL Project, Copyright (c) 2000-2003 The OpenSSL Project, Copyright (c) 2000-2005 The OpenSSL Project, Copyright (c) 2001 The OpenSSL Project, Copyright (c) 2001-2011 The OpenSSL Project, Copyright (c) 2002 by Lucent Technologies, Copyright (c) 2002-2006 The OpenSSL Project, Copyright (c) 2002-2013 Mark Adler, Copyright (c) 2003 Mark Adler, Copyright (c) 2003 The OpenSSL Project, Copyright (c) 2003-2010 Mark Adler, Copyright (c) 2003, 2005, 2008, 2010, 2012 Mark Adler, Copyright (c) 2003, 2012 Mark Adler, Copyright (c) 2003, 2012, 2013 Mark Adler, Copyright (c) 2004 - 2011 by Daniel Stenberg, Copyright (c) 2004 - 2012 by Daniel Stenberg, Copyright (c) 2004 - 2013 by Daniel Stenberg, Copyright (c) 2004 by Daniel Stenberg, Copyright (c) 2004 by Internet Systems Consortium, Inc., Copyright (c) 2004 The OpenSSL Project, Copyright (c) 2004-2009 by Daniel Stenberg, Copyright (c) 2004-2010 by Daniel Stenberg, Copyright (c) 2004-2011 by Daniel Stenberg, Copyright (c) 2004-2017 by Daniel Stenberg, Copyright (c) 2004-2017 Mark Adler, Copyright (c) 2004-2019 Mark Adler, Copyright (c) 2004, 2005, 2012 Mark Adler, Copyright (c) 2004, 2008, 2012 Mark Adler, Copyright (c) 2004, 2008, 2012, 2016, 2019 Mark Adler, Copyright (c) 2004, 2010 Mark Adler, Copyright (c) 2005 - 2010, Daniel Stenberg, Copyright (c) 2005 by Dominick Meglio, Copyright (c) 2005 The OpenSSL Project, Copyright (c) 2005-2013 by Daniel Stenberg, Copyright (c) 2005, 2012, 2018 Mark Adler, Copyright (c) 2005, 2013 by Dominick Meglio, Copyright (c) 2006 The OpenSSL Project, Copyright (c) 2006, Network Resonance, Inc., Copyright (c) 2006,2007 The OpenSSL Project, Copyright (c) 2007-2008 Even Rouault, Copyright (c) 2007-2013 by Daniel Stenberg, Copyright (c) 2007, 2008, 2012, 2018 Mark Adler, Copyright (c) 2008 by Daniel Stenberg, Copyright (c) 2008 The OpenSSL Project, Copyright (c) 2008-2013 by Daniel Stenberg, Copyright (c) 2009 - 2013 by Daniel Stenberg, Copyright (c) 2009 by Daniel Stenberg, Copyright (c) 2009 by Jakub Hrozek \u003cjhrozek@redhat.com\u003e, Copyright (c) 2009-2010 Mathias Svensson http://result42.com, Copyright (c) 2009-2013 by Daniel Stenberg, Copyright (c) 2009-2021, Google LLC, Copyright (c) 2009-2022, Google LLC, Copyright (c) 2010 Jeremy Lal \u003ckapouer@melix.org\u003e, Copyright (c) 2010 The OpenSSL Project, Copyright (c) 2010-2012 by Daniel Stenberg, Copyright (c) 2010-2013 by Daniel Stenberg, Copyright (c) 2011 The OpenSSL Project, Copyright (c) 2011, 2016 Mark Adler, Copyright (c) 2011, RTFM, Inc., Copyright (c) 2012 Marko Kreen \u003cmarkokr@gmail.com\u003e, Copyright (c) 2012 The Chromium Authors, Copyright (c) 2012 The OpenSSL Project, Copyright (c) 2012-2020 Yann Collet, Copyright (c) 2012, Intel Corporation, Copyright (c) 2013 The OpenSSL Project, Copyright (c) 2014 The OpenSSL Project, Copyright (c) 2014, Google Inc., Copyright (c) 2014, Intel Corporation, Copyright (c) 2015 The OpenSSL Project, Copyright (c) 2015, Google Inc., Copyright (c) 2015, Intel Inc., Copyright (c) 2016, Google Inc., Copyright (c) 2017 - 2018 by Christian Ammer, Copyright (c) 2017 by John Schember \u003cjohn@nachtimwald.com\u003e, Copyright (c) 2017, Google Inc., Copyright (c) 2017, the HRSS authors, Copyright (c) 2018 by John Schember \u003cjohn@nachtimwald.com\u003e, Copyright (c) 2018 Mark Adler, Copyright (c) 2018 The Android Open Source Project, Copyright (c) 2018, Google Inc., Copyright (c) 2019 by Andrew Selivanov, Copyright (c) 2019, Google Inc., Copyright (c) 2020, Arm Ltd., Copyright (c) 2020, Google Inc., Copyright (c) 2021, Google Inc., Copyright (c) 2022, Google Inc., Copyright (c) 2023, Google Inc., Copyright 1995-2016 The OpenSSL Project Authors, Copyright 1995-2022 Jean-loup Gailly and Mark Adler, Copyright 1995-2022 Mark Adler, Copyright 1998 by the Massachusetts Institute of Technology, Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll, Copyright 1998, 2011 by the Massachusetts Institute of Technology, Copyright 1998, 2011, 2013 by the Massachusetts Institute of Technology, Copyright 1999-2005 The RE2 Authors, Copyright 2000 by the Massachusetts Institute of Technology, Copyright 2000-2016 The OpenSSL Project Authors, Copyright 2001-2010 The RE2 Authors, Copyright 2002 Sun Microsystems, Inc., Copyright 2002-2009 The RE2 Authors, Copyright 2003 Google Inc., Copyright 2003-2009 Google Inc., Copyright 2003-2009 The RE2 Authors, Copyright 2003-2010 Google Inc., Copyright 2004 The RE2 Authors, Copyright 2005 by Dominick Meglio, Copyright 2005 Dominick Meglio, Copyright 2005 Google Inc., Copyright 2005 Nokia, Copyright 2005 The RE2 Authors, Copyright 2005, Google Inc., Copyright 2006 The RE2 Authors, Copyright 2006-2007 The RE2 Authors, Copyright 2006-2008 The RE2 Authors, Copyright 2006-2017 The OpenSSL Project Authors, Copyright 2006, Google Inc., Copyright 2007 The RE2 Authors, Copyright 2007-2016 The OpenSSL Project Authors, Copyright 2007, Google Inc., Copyright 2008 Google Inc., Copyright 2008 The RE2 Authors, Copyright 2008, Google Inc., Copyright 2009 Google Inc., Copyright 2009 The RE2 Authors, Copyright 2009, Google Inc., Copyright 2010 Google Inc., Copyright 2010 The RE2 Authors, Copyright 2010, Google Inc., Copyright 2012-2016 The OpenSSL Project Authors, Copyright 2013 Google Inc., Copyright 2013-2016 The OpenSSL Project Authors, Copyright 2013, Google Inc., Copyright 2014 The Chromium Authors, Copyright 2014-2016 The OpenSSL Project Authors, Copyright 2014-2020 The OpenSSL Project Authors, Copyright 2015 Google Inc., Copyright 2015 gRPC, Copyright 2015-2016 gRPC, Copyright 2015-2016 The OpenSSL Project Authors, Copyright 2015, Google Inc., Copyright 2016 Brian Smith, Copyright 2016 Google Inc., Copyright 2016 gRPC, Copyright 2016 The RE2 Authors, Copyright 2016, Google Inc., Copyright 2017 Google Inc., Copyright 2017 gRPC, Copyright 2017 The Abseil Authors, Copyright 2017 The OpenSSL Project Authors, Copyright 2018 Google LLC., Copyright 2018 gRPC, Copyright 2018 The Abseil Authors, Copyright 2018 The gRPC, Copyright 2018 The RE2 Authors, Copyright 2018, Google Inc., Copyright 2018, Google LLC., Copyright 2019 Google LLC., Copyright 2019 gRPC, Copyright 2019 The Abseil Authors, Copyright 2019 The gRPC, Copyright 2019, Google LLC., Copyright 2020 by \u003cdanny.sonnenschein@platynum.ch\u003e, Copyright 2020 gRPC, Copyright 2020 The Abseil Authors, Copyright 2020 The gRPC, Copyright 2021 gRPC, Copyright 2021 The Abseil Authors, Copyright 2021 the gRPC, Copyright 2021 The gRPC, Copyright 2022 gRPC, Copyright 2022 The Abseil Authors, Copyright 2022 The gRPC, Copyright 2023 gRPC, Copyright 2023 The Abseil Authors, Copyright 2023 The gRPC, Copyright Amazon.com, Inc. or its affiliates, holder is Tim Hudson (tjh@cryptsoft.com)","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/grpcio@1.54.2"}]},{"name":"click","SPDXID":"SPDXRef-pypi-click-75c946","versionInfo":"\u003e= 7.0,\u003c 9.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/click"}]},{"name":"dapr-ext-grpc","SPDXID":"SPDXRef-pypi-dapr-ext-grpc-75c946","versionInfo":"\u003e= 1.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/dapr-ext-grpc"}]},{"name":"com.github.OpenFunction/functions-framework-python","SPDXID":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","versionInfo":"main","downloadLocation":"git+https://github.com/OpenFunction/functions-framework-python","filesAnalyzed":false,"licenseDeclared":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/OpenFunction/functions-framework-python@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-master-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-dapr-ext-grpc-1.10.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-uvicorn-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-gunicorn-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-dapr-ext-grpc-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-cloudevents-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-dapr-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-dapr-ext-fastapi-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-aiohttp-3.8.6-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-grpcio-1.54.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-click-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-githubactions-actions-github-script-6-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-dapr-1.10.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relatedSpdxElement":"SPDXRef-pypi-flask-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-OpenFunction-functions-framework-python-main-c60924","relationshipType":"DESCRIBES"}]}