{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.roots/.github","documentNamespace":"https://spdx.org/spdxdocs/protobom/d1be587d-72f5-4ae7-a9ae-39d4cfe12b55","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260130170711-0b8e67cacb3b+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-02-06T06:36:55Z"},"packages":[{"name":"inflight","SPDXID":"SPDXRef-npm-inflight-1.0.6-3f0aa1","versionInfo":"1.0.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"ISC","copyrightText":"Copyright (c) Isaac Z. Schlueter","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/inflight@1.0.6"}]},{"name":"fs.realpath","SPDXID":"SPDXRef-npm-fs.realpath-1.0.0-54ecd6","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"ISC","copyrightText":"Copyright (c) Isaac Z. Schlueter and Contributors, Copyright Joyent, Inc. and other Node contributors, Copyright Joyent, Inc. and other Node contributors.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/fs.realpath@1.0.0"}]},{"name":"replace-section","SPDXID":"SPDXRef-npm-replace-section-1.0.0-58524b","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/replace-section@1.0.0"}]},{"name":"path-is-absolute","SPDXID":"SPDXRef-npm-path-is-absolute-1.0.1-a5c139","versionInfo":"1.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) Sindre Sorhus (https://sindresorhus.com), Copyright (c) Sindre Sorhus \u003csindresorhus@gmail.com\u003e (sindresorhus.com)","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/path-is-absolute@1.0.1"}]},{"name":"commander","SPDXID":"SPDXRef-npm-commander-4.1.1-240e98","versionInfo":"4.1.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2011 TJ Holowaychuk \u003ctj@vision-media.ca\u003e","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/commander@4.1.1"}]},{"name":"balanced-match","SPDXID":"SPDXRef-npm-balanced-match-1.0.2-05c87c","versionInfo":"1.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2013 Julian Gruber \u003cjulian@juliangruber.com\u003e","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/balanced-match@1.0.2"}]},{"name":"brace-expansion","SPDXID":"SPDXRef-npm-brace-expansion-1.1.11-3e6db9","versionInfo":"1.1.11","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2013 Julian Gruber \u003cjulian@juliangruber.com\u003e","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/brace-expansion@1.1.11"}]},{"name":"thenify-all","SPDXID":"SPDXRef-npm-thenify-all-1.6.0-736aea","versionInfo":"1.6.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2014 Jonathan Ong me@jongleberry.com","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/thenify-all@1.6.0"}]},{"name":"follow-redirects","SPDXID":"SPDXRef-npm-follow-redirects-1.14.9-6e026b","versionInfo":"1.14.9","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright 2014-present Olivier Lalonde \u003colalonde@gmail.com\u003e , James Talmage \u003cjames@talmage.io\u003e , Ruben Verborgh","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/follow-redirects@1.14.9"}]},{"name":"any-promise","SPDXID":"SPDXRef-npm-any-promise-1.3.0-c7bb98","versionInfo":"1.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2014-2016 Kevin Beaty","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/any-promise@1.3.0"}]},{"name":"lines-and-columns","SPDXID":"SPDXRef-npm-lines-and-columns-1.2.4-ace13b","versionInfo":"1.2.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2015 Brian Donovan","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/lines-and-columns@1.2.4"}]},{"name":"object-assign","SPDXID":"SPDXRef-npm-object-assign-4.1.1-bdf80c","versionInfo":"4.1.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) Sindre Sorhus, (c) Sindre Sorhus (https://sindresorhus.com), Copyright (c) Sindre Sorhus \u003csindresorhus@gmail.com\u003e (sindresorhus.com)","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/object-assign@4.1.1"}]},{"name":"thenify","SPDXID":"SPDXRef-npm-thenify-3.3.1-c2da76","versionInfo":"3.3.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2014-2016 Jonathan Ong me@jongleberry.com and contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/thenify@3.3.1"}]},{"name":"minimatch","SPDXID":"SPDXRef-npm-minimatch-3.1.2-fa317c","versionInfo":"3.1.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"ISC","copyrightText":"Copyright (c) Isaac Z. Schlueter and Contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/minimatch@3.1.2"}]},{"name":"once","SPDXID":"SPDXRef-npm-once-1.4.0-5f29af","versionInfo":"1.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"ISC","copyrightText":"Copyright (c) Isaac Z. Schlueter and Contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/once@1.4.0"}]},{"name":"ts-interface-checker","SPDXID":"SPDXRef-npm-ts-interface-checker-0.1.13-dc40a1","versionInfo":"0.1.13","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/ts-interface-checker@0.1.13"}]},{"name":"mz","SPDXID":"SPDXRef-npm-mz-2.7.0-e6a143","versionInfo":"2.7.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2014-2016 Jonathan Ong me@jongleberry.com and Contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/mz@2.7.0"}]},{"name":"axios","SPDXID":"SPDXRef-npm-axios-0.21.4-db58d1","versionInfo":"0.21.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) 2021 by Matt Zabriskie, Copyright (c) 2014-present Matt Zabriskie","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/axios@0.21.4"}]},{"name":"wrappy","SPDXID":"SPDXRef-npm-wrappy-1.0.2-ac1ff0","versionInfo":"1.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"ISC","copyrightText":"Copyright (c) Isaac Z. Schlueter and Contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/wrappy@1.0.2"}]},{"name":"glob","SPDXID":"SPDXRef-npm-glob-7.1.6-d12dd6","versionInfo":"7.1.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"ISC","copyrightText":"Copyright (c) Isaac Z. Schlueter and Contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/glob@7.1.6"}]},{"name":"inherits","SPDXID":"SPDXRef-npm-inherits-2.0.4-66b873","versionInfo":"2.0.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"ISC","copyrightText":"Copyright (c) Isaac Z. Schlueter","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/inherits@2.0.4"}]},{"name":"ansi-colors","SPDXID":"SPDXRef-npm-ansi-colors-4.1.1-4da45e","versionInfo":"4.1.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2015-present, Brian Woodward, Copyright (c) 2019, Brian Woodward (https://github.com/doowb)","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/ansi-colors@4.1.1"}]},{"name":"enquirer","SPDXID":"SPDXRef-npm-enquirer-2.3.6-53f19e","versionInfo":"2.3.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2016-present, Jon Schlinkert, Copyright (c) 2018-present, Jon Schlinkert (https://github.com/jonschlinkert)","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/enquirer@2.3.6"}]},{"name":"concat-map","SPDXID":"SPDXRef-npm-concat-map-0.0.1-2dd0db","versionInfo":"0.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/concat-map@0.0.1"}]},{"name":"sucrase","SPDXID":"SPDXRef-npm-sucrase-3.20.3-146cce","versionInfo":"3.20.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2012-2018 various","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/sucrase@3.20.3"}]},{"name":"pirates","SPDXID":"SPDXRef-npm-pirates-4.0.5-3d352f","versionInfo":"4.0.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) 2015 Ari Porad (@ariporad) \u003chttp://ariporad.com\u003e, Copyright (c) 2016-2018 Ari Porad","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/pirates@4.0.5"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@3.%2A.%2A"}]},{"name":"actions/setup-node","SPDXID":"SPDXRef-githubactions-actions-setup-node-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-node@4.%2A.%2A"}]},{"name":"com.github.roots/.github","SPDXID":"SPDXRef-github-roots-.github-master-99a941","versionInfo":"master","downloadLocation":"git+https://github.com/roots/.github","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/roots/.github@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-npm-inflight-1.0.6-3f0aa1","relatedSpdxElement":"SPDXRef-npm-once-1.4.0-5f29af","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-inflight-1.0.6-3f0aa1","relatedSpdxElement":"SPDXRef-npm-wrappy-1.0.2-ac1ff0","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-brace-expansion-1.1.11-3e6db9","relatedSpdxElement":"SPDXRef-npm-concat-map-0.0.1-2dd0db","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-brace-expansion-1.1.11-3e6db9","relatedSpdxElement":"SPDXRef-npm-balanced-match-1.0.2-05c87c","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-thenify-all-1.6.0-736aea","relatedSpdxElement":"SPDXRef-npm-thenify-3.3.1-c2da76","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-thenify-3.3.1-c2da76","relatedSpdxElement":"SPDXRef-npm-any-promise-1.3.0-c7bb98","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-minimatch-3.1.2-fa317c","relatedSpdxElement":"SPDXRef-npm-brace-expansion-1.1.11-3e6db9","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-once-1.4.0-5f29af","relatedSpdxElement":"SPDXRef-npm-wrappy-1.0.2-ac1ff0","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-mz-2.7.0-e6a143","relatedSpdxElement":"SPDXRef-npm-thenify-all-1.6.0-736aea","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-mz-2.7.0-e6a143","relatedSpdxElement":"SPDXRef-npm-any-promise-1.3.0-c7bb98","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-mz-2.7.0-e6a143","relatedSpdxElement":"SPDXRef-npm-object-assign-4.1.1-bdf80c","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-axios-0.21.4-db58d1","relatedSpdxElement":"SPDXRef-npm-follow-redirects-1.14.9-6e026b","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-glob-7.1.6-d12dd6","relatedSpdxElement":"SPDXRef-npm-path-is-absolute-1.0.1-a5c139","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-glob-7.1.6-d12dd6","relatedSpdxElement":"SPDXRef-npm-minimatch-3.1.2-fa317c","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-glob-7.1.6-d12dd6","relatedSpdxElement":"SPDXRef-npm-once-1.4.0-5f29af","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-glob-7.1.6-d12dd6","relatedSpdxElement":"SPDXRef-npm-inherits-2.0.4-66b873","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-glob-7.1.6-d12dd6","relatedSpdxElement":"SPDXRef-npm-inflight-1.0.6-3f0aa1","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-glob-7.1.6-d12dd6","relatedSpdxElement":"SPDXRef-npm-fs.realpath-1.0.0-54ecd6","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-enquirer-2.3.6-53f19e","relatedSpdxElement":"SPDXRef-npm-ansi-colors-4.1.1-4da45e","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-sucrase-3.20.3-146cce","relatedSpdxElement":"SPDXRef-npm-ts-interface-checker-0.1.13-dc40a1","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-sucrase-3.20.3-146cce","relatedSpdxElement":"SPDXRef-npm-mz-2.7.0-e6a143","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-sucrase-3.20.3-146cce","relatedSpdxElement":"SPDXRef-npm-lines-and-columns-1.2.4-ace13b","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-sucrase-3.20.3-146cce","relatedSpdxElement":"SPDXRef-npm-commander-4.1.1-240e98","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-sucrase-3.20.3-146cce","relatedSpdxElement":"SPDXRef-npm-glob-7.1.6-d12dd6","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-npm-sucrase-3.20.3-146cce","relatedSpdxElement":"SPDXRef-npm-pirates-4.0.5-3d352f","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-roots-.github-master-99a941","relatedSpdxElement":"SPDXRef-npm-replace-section-1.0.0-58524b","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-roots-.github-master-99a941","relatedSpdxElement":"SPDXRef-npm-axios-0.21.4-db58d1","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-roots-.github-master-99a941","relatedSpdxElement":"SPDXRef-npm-enquirer-2.3.6-53f19e","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-roots-.github-master-99a941","relatedSpdxElement":"SPDXRef-npm-sucrase-3.20.3-146cce","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-roots-.github-master-99a941","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-roots-.github-master-99a941","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-node-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-roots-.github-master-99a941","relationshipType":"DESCRIBES"}]}