{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.phpstan/phpstan-phpunit","documentNamespace":"https://spdx.org/spdxdocs/protobom/12f0ddb0-050e-453c-83db-9a90fe0a6604","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260327162657-5aefcad73c4c+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-03-29T04:14:26Z"},"packages":[{"name":"cbrgm/mastodon-github-action","SPDXID":"SPDXRef-githubactions-cbrgm-mastodon-github-action-845250b56b82d94e26bf23984d5e0cf5ced6d18f-75c946","versionInfo":"845250b56b82d94e26bf23984d5e0cf5ced6d18f","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/cbrgm/mastodon-github-action@845250b56b82d94e26bf23984d5e0cf5ced6d18f"}]},{"name":"Eomm/why-don-t-you-tweet","SPDXID":"SPDXRef-githubactions-Eomm-why-don-t-you-tweet-d9ec12835f4d494dda920f95f885df3dba380493-75c946","versionInfo":"d9ec12835f4d494dda920f95f885df3dba380493","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/Eomm/why-don-t-you-tweet@d9ec12835f4d494dda920f95f885df3dba380493"}]},{"name":"actions/create-release","SPDXID":"SPDXRef-githubactions-actions-create-release-0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e-75c946","versionInfo":"0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e"}]},{"name":"metcalfc/changelog-generator","SPDXID":"SPDXRef-githubactions-metcalfc-changelog-generator-3f82cef08fe5dcf57c591fe165e70e1d5032e15a-75c946","versionInfo":"3f82cef08fe5dcf57c591fe165e70e1d5032e15a","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/metcalfc/changelog-generator@3f82cef08fe5dcf57c591fe165e70e1d5032e15a"}]},{"name":"nikic/php-parser","SPDXID":"SPDXRef-composer-nikic-php-parser-75c946","versionInfo":"\u003e= 5,\u003c 6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:composer/nikic/php-parser"}]},{"name":"phpstan/phpstan-strict-rules","SPDXID":"SPDXRef-composer-phpstan-phpstan-strict-rules-75c946","versionInfo":"\u003e= 2.0,\u003c 3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:composer/phpstan/phpstan-strict-rules"}]},{"name":"phpstan/phpstan-deprecation-rules","SPDXID":"SPDXRef-composer-phpstan-phpstan-deprecation-rules-75c946","versionInfo":"\u003e= 2.0,\u003c 3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:composer/phpstan/phpstan-deprecation-rules"}]},{"name":"phpstan/phpstan","SPDXID":"SPDXRef-composer-phpstan-phpstan-75c946","versionInfo":"\u003e= 2.1.41,\u003c 3.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:composer/phpstan/phpstan"}]},{"name":"php","SPDXID":"SPDXRef-composer-php-75c946","versionInfo":"\u003e= 7.4,\u003c 8.0 || \u003e= 8.0,\u003c 9.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:composer/php"}]},{"name":"phpunit/phpunit","SPDXID":"SPDXRef-composer-phpunit-phpunit-75c946","versionInfo":"\u003e= 9.6,\u003c 10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:composer/phpunit/phpunit"}]},{"name":"php-parallel-lint/php-parallel-lint","SPDXID":"SPDXRef-composer-php-parallel-lint-php-parallel-lint-75c946","versionInfo":"\u003e= 1.2,\u003c 2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:composer/php-parallel-lint/php-parallel-lint"}]},{"name":"shivammathur/setup-php","SPDXID":"SPDXRef-githubactions-shivammathur-setup-php-44454db4f0199b8b9685a5d763dc37cbf79108e1-75c946","versionInfo":"44454db4f0199b8b9685a5d763dc37cbf79108e1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-de0fac2e4500dabe0009e67214ff5f5447ce83dd-75c946","versionInfo":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"}]},{"name":"actions/cache/restore","SPDXID":"SPDXRef-githubactions-actionscache-restore-cdf6c1fa76f9f475f3d7449005a359c84ca0f306-75c946","versionInfo":"cdf6c1fa76f9f475f3d7449005a359c84ca0f306","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306"}]},{"name":"actions/cache/save","SPDXID":"SPDXRef-githubactions-actionscache-save-cdf6c1fa76f9f475f3d7449005a359c84ca0f306-75c946","versionInfo":"cdf6c1fa76f9f475f3d7449005a359c84ca0f306","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306"}]},{"name":"step-security/harden-runner","SPDXID":"SPDXRef-githubactions-step-security-harden-runner-5ef0c079ce82195b2a36a210272d6b661572d83e-75c946","versionInfo":"5ef0c079ce82195b2a36a210272d6b661572d83e","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e"}]},{"name":"rickstaa/action-create-tag","SPDXID":"SPDXRef-githubactions-rickstaa-action-create-tag-a1c7777fcb2fee4f19b0f283ba888afa11678b72-75c946","versionInfo":"a1c7777fcb2fee4f19b0f283ba888afa11678b72","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/rickstaa/action-create-tag@a1c7777fcb2fee4f19b0f283ba888afa11678b72"}]},{"name":"WyriHaximus/github-action-next-semvers","SPDXID":"SPDXRef-githubactions-WyriHaximus-github-action-next-semvers-d079934efaf011a4cf8912d4637097fe35d32b93-75c946","versionInfo":"d079934efaf011a4cf8912d4637097fe35d32b93","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/WyriHaximus/github-action-next-semvers@d079934efaf011a4cf8912d4637097fe35d32b93"}]},{"name":"WyriHaximus/github-action-get-previous-tag","SPDXID":"SPDXRef-githubactions-WyriHaximus-github-action-get-previous-tag-61819f33034117e6c686e6a31dba995a85afc9de-75c946","versionInfo":"61819f33034117e6c686e6a31dba995a85afc9de","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/WyriHaximus/github-action-get-previous-tag@61819f33034117e6c686e6a31dba995a85afc9de"}]},{"name":"synacktiv/action-octoscan","SPDXID":"SPDXRef-githubactions-synacktiv-action-octoscan-6b1cf2343893dfb9e5f75652388bd2dc83f456b0-75c946","versionInfo":"6b1cf2343893dfb9e5f75652388bd2dc83f456b0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/synacktiv/action-octoscan@6b1cf2343893dfb9e5f75652388bd2dc83f456b0"}]},{"name":"boostsecurityio/poutine-action","SPDXID":"SPDXRef-githubactions-boostsecurityio-poutine-action-84c0a0d32e8d57ae12651222be1eb15351429228-75c946","versionInfo":"84c0a0d32e8d57ae12651222be1eb15351429228","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/boostsecurityio/poutine-action@84c0a0d32e8d57ae12651222be1eb15351429228"}]},{"name":"github/codeql-action/upload-sarif","SPDXID":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-5d4e8d1aca955e8d8589aabd499c5cae939e33c7-75c946","versionInfo":"5d4e8d1aca955e8d8589aabd499c5cae939e33c7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7"}]},{"name":"astral-sh/setup-uv","SPDXID":"SPDXRef-githubactions-astral-sh-setup-uv-eac588ad8def6316056a12d4907a9d4d84ff7a3b-75c946","versionInfo":"eac588ad8def6316056a12d4907a9d4d84ff7a3b","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b"}]},{"name":"github/codeql-action/upload-sarif","SPDXID":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-89a39a4e59826350b863aa6b6252a07ad50cf83e-75c946","versionInfo":"89a39a4e59826350b863aa6b6252a07ad50cf83e","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e"}]},{"name":"dessant/lock-threads","SPDXID":"SPDXRef-githubactions-dessant-lock-threads-7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7-75c946","versionInfo":"7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/dessant/lock-threads@7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7"}]},{"name":"com.github.phpstan/phpstan-phpunit","SPDXID":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","versionInfo":"2.0.x","downloadLocation":"git+https://github.com/phpstan/phpstan-phpunit","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/phpstan/phpstan-phpunit@2.0.x"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-composer-php-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-composer-php-parallel-lint-php-parallel-lint-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-shivammathur-setup-php-44454db4f0199b8b9685a5d763dc37cbf79108e1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-rickstaa-action-create-tag-a1c7777fcb2fee4f19b0f283ba888afa11678b72-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-WyriHaximus-github-action-next-semvers-d079934efaf011a4cf8912d4637097fe35d32b93-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-astral-sh-setup-uv-eac588ad8def6316056a12d4907a9d4d84ff7a3b-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-cbrgm-mastodon-github-action-845250b56b82d94e26bf23984d5e0cf5ced6d18f-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-Eomm-why-don-t-you-tweet-d9ec12835f4d494dda920f95f885df3dba380493-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-de0fac2e4500dabe0009e67214ff5f5447ce83dd-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-actionscache-restore-cdf6c1fa76f9f475f3d7449005a359c84ca0f306-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-WyriHaximus-github-action-get-previous-tag-61819f33034117e6c686e6a31dba995a85afc9de-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-5d4e8d1aca955e8d8589aabd499c5cae939e33c7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-89a39a4e59826350b863aa6b6252a07ad50cf83e-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-actions-create-release-0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-metcalfc-changelog-generator-3f82cef08fe5dcf57c591fe165e70e1d5032e15a-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-composer-phpstan-phpstan-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-composer-phpunit-phpunit-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-synacktiv-action-octoscan-6b1cf2343893dfb9e5f75652388bd2dc83f456b0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-boostsecurityio-poutine-action-84c0a0d32e8d57ae12651222be1eb15351429228-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-composer-phpstan-phpstan-deprecation-rules-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-actionscache-save-cdf6c1fa76f9f475f3d7449005a359c84ca0f306-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-step-security-harden-runner-5ef0c079ce82195b2a36a210272d6b661572d83e-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-githubactions-dessant-lock-threads-7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-composer-nikic-php-parser-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relatedSpdxElement":"SPDXRef-composer-phpstan-phpstan-strict-rules-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-phpstan-phpstan-phpunit-2.0.x-066f64","relationshipType":"DESCRIBES"}]}