{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.coveragepy/coveragepy","documentNamespace":"https://spdx.org/spdxdocs/protobom/a7d96478-7f79-4654-86c9-988dfb4d0597","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251216165153-1f3f3060931e+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-12-21T03:37:40Z"},"packages":[{"name":"docker/setup-qemu-action","SPDXID":"SPDXRef-githubactions-docker-setup-qemu-action-c7c53464625b32c7a7e944ae62b3e17d2b600130-75c946","versionInfo":"c7c53464625b32c7a7e944ae62b3e17d2b600130","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130"}]},{"name":"sigstore/gh-action-sigstore-python","SPDXID":"SPDXRef-githubactions-sigstore-gh-action-sigstore-python-a5caf349bc536fbef3668a10ed7f5cd309a4b53d-75c946","versionInfo":"a5caf349bc536fbef3668a10ed7f5cd309a4b53d","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/sigstore/gh-action-sigstore-python@a5caf349bc536fbef3668a10ed7f5cd309a4b53d"}]},{"name":"octokit/request-action","SPDXID":"SPDXRef-githubactions-octokit-request-action-dad4362715b7fb2ddedf9772c8670824af564f0d-75c946","versionInfo":"dad4362715b7fb2ddedf9772c8670824af564f0d","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/octokit/request-action@dad4362715b7fb2ddedf9772c8670824af564f0d"}]},{"name":"actions/attest-build-provenance","SPDXID":"SPDXRef-githubactions-actions-attest-build-provenance-977bb373ede98d70efdf65b84cb5f73e068dcc2a-75c946","versionInfo":"977bb373ede98d70efdf65b84cb5f73e068dcc2a","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a"}]},{"name":"pypa/gh-action-pypi-publish","SPDXID":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e-75c946","versionInfo":"ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e"}]},{"name":"astral-sh/setup-uv","SPDXID":"SPDXRef-githubactions-astral-sh-setup-uv-1e862dfacbd1d6d858c55d9b792c756523627244-75c946","versionInfo":"1e862dfacbd1d6d858c55d9b792c756523627244","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244"}]},{"name":"re-actors/alls-green","SPDXID":"SPDXRef-githubactions-re-actors-alls-green-05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe-75c946","versionInfo":"05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe"}]},{"name":"github/codeql-action/analyze","SPDXID":"SPDXRef-githubactions-githubcodeql-action-analyze-014f16e7ab1402f30e7c3329d33797e7948572db-75c946","versionInfo":"014f16e7ab1402f30e7c3329d33797e7948572db","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/analyze@014f16e7ab1402f30e7c3329d33797e7948572db"}]},{"name":"github/codeql-action/autobuild","SPDXID":"SPDXRef-githubactions-githubcodeql-action-autobuild-014f16e7ab1402f30e7c3329d33797e7948572db-75c946","versionInfo":"014f16e7ab1402f30e7c3329d33797e7948572db","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/autobuild@014f16e7ab1402f30e7c3329d33797e7948572db"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-8e8c483db84b4bee98b60c0593521ed34d9990e8-75c946","versionInfo":"8e8c483db84b4bee98b60c0593521ed34d9990e8","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8"}]},{"name":"github/codeql-action/init","SPDXID":"SPDXRef-githubactions-githubcodeql-action-init-014f16e7ab1402f30e7c3329d33797e7948572db-75c946","versionInfo":"014f16e7ab1402f30e7c3329d33797e7948572db","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/init@014f16e7ab1402f30e7c3329d33797e7948572db"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-83679a892e2d95755f2dac6acb0bfd1e9ac5d548-75c946","versionInfo":"83679a892e2d95755f2dac6acb0bfd1e9ac5d548","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548"}]},{"name":"schneegans/dynamic-badges-action","SPDXID":"SPDXRef-githubactions-schneegans-dynamic-badges-action-e9a478b16159b4d31420099ba146cdc50f134483-75c946","versionInfo":"e9a478b16159b4d31420099ba146cdc50f134483","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/schneegans/dynamic-badges-action@e9a478b16159b4d31420099ba146cdc50f134483"}]},{"name":"dorny/paths-filter","SPDXID":"SPDXRef-githubactions-dorny-paths-filter-de90cc6fb38fc0963ad72b210f1f284cd68cea36-75c946","versionInfo":"de90cc6fb38fc0963ad72b210f1f284cd68cea36","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36"}]},{"name":"actions/download-artifact","SPDXID":"SPDXRef-githubactions-actions-download-artifact-018cc2cf5baa6db3ef3c5f8a56943fffe632ef53-75c946","versionInfo":"018cc2cf5baa6db3ef3c5f8a56943fffe632ef53","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-330a01c490aca151604b8cf639adc76d48f6c5d4-75c946","versionInfo":"330a01c490aca151604b8cf639adc76d48f6c5d4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4"}]},{"name":"actions/dependency-review-action","SPDXID":"SPDXRef-githubactions-actions-dependency-review-action-3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261-75c946","versionInfo":"3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261"}]},{"name":"com.github.coveragepy/coveragepy","SPDXID":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","versionInfo":"main","downloadLocation":"git+https://github.com/coveragepy/coveragepy","filesAnalyzed":false,"licenseDeclared":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/coveragepy/coveragepy@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-actions-attest-build-provenance-977bb373ede98d70efdf65b84cb5f73e068dcc2a-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-re-actors-alls-green-05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-octokit-request-action-dad4362715b7fb2ddedf9772c8670824af564f0d-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-analyze-014f16e7ab1402f30e7c3329d33797e7948572db-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-8e8c483db84b4bee98b60c0593521ed34d9990e8-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-init-014f16e7ab1402f30e7c3329d33797e7948572db-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-qemu-action-c7c53464625b32c7a7e944ae62b3e17d2b600130-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-sigstore-gh-action-sigstore-python-a5caf349bc536fbef3668a10ed7f5cd309a4b53d-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-astral-sh-setup-uv-1e862dfacbd1d6d858c55d9b792c756523627244-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-autobuild-014f16e7ab1402f30e7c3329d33797e7948572db-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-schneegans-dynamic-badges-action-e9a478b16159b4d31420099ba146cdc50f134483-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-dorny-paths-filter-de90cc6fb38fc0963ad72b210f1f284cd68cea36-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-actions-download-artifact-018cc2cf5baa6db3ef3c5f8a56943fffe632ef53-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-330a01c490aca151604b8cf639adc76d48f6c5d4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-83679a892e2d95755f2dac6acb0bfd1e9ac5d548-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relatedSpdxElement":"SPDXRef-githubactions-actions-dependency-review-action-3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-coveragepy-coveragepy-main-ce5b5e","relationshipType":"DESCRIBES"}]}