{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.python/cherry-picker","documentNamespace":"https://spdx.org/spdxdocs/protobom/5290a5ae-6df7-477e-8bb7-f5ae616d0836","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260130170711-0b8e67cacb3b+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-02-06T19:41:38Z"},"packages":[{"name":"requests","SPDXID":"SPDXRef-pypi-requests-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/requests"}]},{"name":"gidgethub","SPDXID":"SPDXRef-pypi-gidgethub-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/gidgethub"}]},{"name":"click","SPDXID":"SPDXRef-pypi-click-75c946","versionInfo":"\u003e= 6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/click"}]},{"name":"stamina","SPDXID":"SPDXRef-pypi-stamina-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/stamina"}]},{"name":"tomli","SPDXID":"SPDXRef-pypi-tomli-75c946","versionInfo":"\u003e= 1.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/tomli"}]},{"name":"pypa/gh-action-pypi-publish","SPDXID":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-releasev1-75c946","versionInfo":"release/v1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pypa/gh-action-pypi-publish@release%2Fv1"}]},{"name":"hynek/build-and-inspect-python-package","SPDXID":"SPDXRef-githubactions-hynek-build-and-inspect-python-package-2..-75c946","versionInfo":"2.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/hynek/build-and-inspect-python-package@2.%2A.%2A"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@6.%2A.%2A"}]},{"name":"actions/download-artifact","SPDXID":"SPDXRef-githubactions-actions-download-artifact-7..-75c946","versionInfo":"7.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/download-artifact@7.%2A.%2A"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@6.%2A.%2A"}]},{"name":"astral-sh/setup-uv","SPDXID":"SPDXRef-githubactions-astral-sh-setup-uv-7..-75c946","versionInfo":"7.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/astral-sh/setup-uv@7.%2A.%2A"}]},{"name":"j178/prek-action","SPDXID":"SPDXRef-githubactions-j178-prek-action-1..-75c946","versionInfo":"1.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/j178/prek-action@1.%2A.%2A"}]},{"name":"hynek/setup-cached-uv","SPDXID":"SPDXRef-githubactions-hynek-setup-cached-uv-2..-75c946","versionInfo":"2.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/hynek/setup-cached-uv@2.%2A.%2A"}]},{"name":"codecov/codecov-action","SPDXID":"SPDXRef-githubactions-codecov-codecov-action-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/codecov/codecov-action@5.%2A.%2A"}]},{"name":"com.github.python/cherry-picker","SPDXID":"SPDXRef-github-python-cherry-picker-main-8c3ec7","versionInfo":"main","downloadLocation":"git+https://github.com/python/cherry-picker","filesAnalyzed":false,"licenseDeclared":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/python/cherry-picker@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-githubactions-hynek-build-and-inspect-python-package-2..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-githubactions-actions-download-artifact-7..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-pypi-requests-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-pypi-gidgethub-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-pypi-click-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-pypi-stamina-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-githubactions-astral-sh-setup-uv-7..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-githubactions-j178-prek-action-1..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-githubactions-hynek-setup-cached-uv-2..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-githubactions-codecov-codecov-action-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-pypi-tomli-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relatedSpdxElement":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-releasev1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-python-cherry-picker-main-8c3ec7","relationshipType":"DESCRIBES"}]}