{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.ali-security/gitpython-4635","documentNamespace":"https://spdx.org/spdxdocs/protobom/c7276709-5bcf-4d6f-8aef-5ba5b2ba11bc","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260402204407-e7dc5dd3ef04+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-04-03T03:48:25Z"},"packages":[{"name":"typing-extensions","SPDXID":"SPDXRef-pypi-typing-extensions-75c946","versionInfo":"\u003e= 3.7.4.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/typing-extensions"}]},{"name":"gitdb","SPDXID":"SPDXRef-pypi-gitdb-75c946","versionInfo":"\u003e= 4.0.1,\u003c 5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/gitdb"}]},{"name":"ddt","SPDXID":"SPDXRef-pypi-ddt-75c946","versionInfo":"\u003e= 1.1.1,\u003c 1.4.3 || \u003e 1.4.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/ddt"}]},{"name":"black","SPDXID":"SPDXRef-pypi-black-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/black"}]},{"name":"pytest","SPDXID":"SPDXRef-pypi-pytest-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest"}]},{"name":"pytest-cov","SPDXID":"SPDXRef-pypi-pytest-cov-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-cov"}]},{"name":"coverage","SPDXID":"SPDXRef-pypi-coverage-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/coverage"}]},{"name":"pre-commit","SPDXID":"SPDXRef-pypi-pre-commit-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pre-commit"}]},{"name":"mypy","SPDXID":"SPDXRef-pypi-mypy-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/mypy"}]},{"name":"pytest-sugar","SPDXID":"SPDXRef-pypi-pytest-sugar-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-sugar"}]},{"name":"sphinx-autodoc-typehints","SPDXID":"SPDXRef-pypi-sphinx-autodoc-typehints-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx-autodoc-typehints"}]},{"name":"sphinx-rtd-theme","SPDXID":"SPDXRef-pypi-sphinx-rtd-theme-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx-rtd-theme"}]},{"name":"sphinx","SPDXID":"SPDXRef-pypi-sphinx-4.3.0-75c946","versionInfo":"4.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause","copyrightText":"(c) 2003 John Gruber, (c) 2004, 2007 Chad Miller, (c) Ban Quan Suo, (c) JS Foundation and other contributors, (copyright)s (copyright)s Makefile, (copyright)s. (c) Autori, (copyright)s. (c) Derechos, (copyright)s. (c) Hak, (copyright)s. (c) Ophavsret, (copyright)s. (c) Sva, (copyright)s. (c) Telif, (copyright)s. (copyright)s. pyversion \u003chttps://github.com/sphinx-doc/sphinx/issues\u003e, (copyright)s.' (c) Autori, (copyright)s.' (c) Derechos, (copyright)s.' (c) Hak, (copyright)s.' (c) Ophavsret, (copyright)s.' (c) Sva, (copyright)s.' (c) Telif, Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017 Python Software Foundation, Copyright (c) 2003 John Gruber (https://daringfireball.net/projects/smartypants/), Copyright (c) 2008 John Resig, https://jquery.com, Copyright (c) 2008 Stefan van der Walt \u003cstefan@mentat.za.net\u003e , Pauli Virtanen \u003cpav@iki.fi\u003e, Copyright (c) 2009 Jeremy Ashkenas, DocumentCloud, copyright (c) 2010 Gunter Milde, Copyright (c) 2010, Georg Brandl \u0026 Team, Copyright (c) 2012, Copyright (c) 2013, Copyright (c) 2015, Copyright (c) 2018, Copyright (copyright)s. Attention, Copyright 2001 by Vivake Gupta \u003cv@nano.com\u003e, copyright 2006-2009, Copyright 2007-2019 by the Sphinx team, Copyright 2008 Societe des arts technologiques (SAT), https://sat.qc.ca, Copyright 2008-2009, Haiku., copyright 2010-2016, Georg Brandl \u0026 Team, Copyright 2011-2014 by Sphinx team, Copyright 2012-2014 by Sphinx team, Copyright Arriskua Zaharkitua, Copyright Create Makefile, Copyright Danger Deprecated, Copyright Error General Index, Copyright Fare Foreldet, Copyright Gefahr Veraltet, Copyright JS Foundation and other contributors, Copyright Pericolo Deprecato, Copyright Perigo Obsoleto, Copyright Perill Obsolet, Copyright Risk Ersatt, copyright u'2016, copyright' self.config.copyright, project, copyright\" Bu Neng Wei Kong","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sphinx@4.3.0"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"cygwin/cygwin-install-action","SPDXID":"SPDXRef-githubactions-cygwin-cygwin-install-action-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/cygwin/cygwin-install-action@4.%2A.%2A"}]},{"name":"pre-commit/action","SPDXID":"SPDXRef-githubactions-pre-commit-action-3.0.0-75c946","versionInfo":"3.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pre-commit/action@3.0.0"}]},{"name":"MatteoH2O1999/setup-python","SPDXID":"SPDXRef-githubactions-MatteoH2O1999-setup-python-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/MatteoH2O1999/setup-python@4.%2A.%2A"}]},{"name":"pytest-icdiff","SPDXID":"SPDXRef-pypi-pytest-icdiff-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-icdiff"}]},{"name":"flake8-type-checking","SPDXID":"SPDXRef-pypi-flake8-type-checking-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/flake8-type-checking"}]},{"name":"com.github.ali-security/gitpython-4635","SPDXID":"SPDXRef-github-ali-security-gitpython-4635-main-685682","versionInfo":"main","downloadLocation":"git+https://github.com/ali-security/gitpython-4635","filesAnalyzed":false,"licenseDeclared":"BSD-3-Clause","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/ali-security/gitpython-4635@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-githubactions-cygwin-cygwin-install-action-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-githubactions-pre-commit-action-3.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-pytest-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-sphinx-autodoc-typehints-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-flake8-type-checking-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-typing-extensions-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-ddt-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-black-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-pre-commit-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-pytest-sugar-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-sphinx-rtd-theme-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-pytest-icdiff-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-gitdb-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-pytest-cov-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-coverage-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-mypy-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-pypi-sphinx-4.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-githubactions-MatteoH2O1999-setup-python-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-ali-security-gitpython-4635-main-685682","relationshipType":"DESCRIBES"}]}