{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.splitio/python-client","documentNamespace":"https://spdx.org/spdxdocs/protobom/b07aeb8d-c2f7-4730-a043-68ababcf1ce3","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251216165153-1f3f3060931e+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-12-31T19:01:36Z"},"packages":[{"name":"SonarSource/sonarcloud-github-action","SPDXID":"SPDXRef-githubactions-SonarSource-sonarcloud-github-action-1.9.-75c946","versionInfo":"1.9.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/SonarSource/sonarcloud-github-action@1.9.%2A"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@3.%2A.%2A"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@3.%2A.%2A"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"peter-evans/create-pull-request","SPDXID":"SPDXRef-githubactions-peter-evans-create-pull-request-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/peter-evans/create-pull-request@5.%2A.%2A"}]},{"name":"jacobtomlinson/gha-find-replace","SPDXID":"SPDXRef-githubactions-jacobtomlinson-gha-find-replace-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/jacobtomlinson/gha-find-replace@3.%2A.%2A"}]},{"name":"aiohttp","SPDXID":"SPDXRef-pypi-aiohttp-75c946","versionInfo":"\u003e= 3.8.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/aiohttp"}]},{"name":"aiofiles","SPDXID":"SPDXRef-pypi-aiofiles-75c946","versionInfo":"\u003e= 23.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/aiofiles"}]},{"name":"bloom-filter2","SPDXID":"SPDXRef-pypi-bloom-filter2-75c946","versionInfo":"\u003e= 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/bloom-filter2"}]},{"name":"iniconfig","SPDXID":"SPDXRef-pypi-iniconfig-1.1.1-75c946","versionInfo":"1.1.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) 2010 Ronny Pfannschmidt, Holger Krekel, (c) Ronny Pfannschmidt, Holger Krekel","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/iniconfig@1.1.1"}]},{"name":"attrs","SPDXID":"SPDXRef-pypi-attrs-22.1.0-75c946","versionInfo":"22.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) N Revealed, Copyright ...\" is shown in the HTML footer. Default is True., Copyright (c) 2015 Hynek Schlawack, Copyright (c) 2015 Hynek Schlawack\", Hynek Schlawack copyright f'2015","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/attrs@22.1.0"}]},{"name":"pytest-asyncio","SPDXID":"SPDXRef-pypi-pytest-asyncio-0.21.0-75c946","versionInfo":"0.21.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"copyright 2022, pytest-asyncio contributors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-asyncio@0.21.0"}]},{"name":"pytest-mock","SPDXID":"SPDXRef-pypi-pytest-mock-3.11.1-75c946","versionInfo":"3.11.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2016 Bruno Oliveira, copyright 2022, Bruno Oliveira","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-mock@3.11.1"}]},{"name":"docopt","SPDXID":"SPDXRef-pypi-docopt-75c946","versionInfo":"\u003e= 0.6.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/docopt"}]},{"name":"importlib-metadata","SPDXID":"SPDXRef-pypi-importlib-metadata-6.7-75c946","versionInfo":"6.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/importlib-metadata@6.7"}]},{"name":"pyyaml","SPDXID":"SPDXRef-pypi-pyyaml-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pyyaml"}]},{"name":"pytest","SPDXID":"SPDXRef-pypi-pytest-7.0.1-75c946","versionInfo":"7.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2004 Holger Krekel and others, Copyright (c) 2014, Gregory Boissinot, copyright 2015, holger krekel and pytest-dev team, Copyright Holger Krekel and others, 2004","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest@7.0.1"}]},{"name":"tomli","SPDXID":"SPDXRef-pypi-tomli-1.2.3-75c946","versionInfo":"1.2.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/tomli@1.2.3"}]},{"name":"enum34","SPDXID":"SPDXRef-pypi-enum34-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/enum34"}]},{"name":"requests","SPDXID":"SPDXRef-pypi-requests-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/requests"}]},{"name":"pytest-cov","SPDXID":"SPDXRef-pypi-pytest-cov-4.1.0-75c946","versionInfo":"4.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2010 Meme Dough","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pytest-cov@4.1.0"}]},{"name":"urllib3","SPDXID":"SPDXRef-pypi-urllib3-2.0.7-75c946","versionInfo":"2.0.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2008-2020 Andrey Petrov and contributors, Copyright (c) 2012 Senko Rasic \u003csenko.rasic@dobarkod.hr\u003e, Copyright (c) 2015-2016 Will Bond \u003cwill@wbond.net\u003e","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/urllib3@2.0.7"}]},{"name":"coverage","SPDXID":"SPDXRef-pypi-coverage-7.0.0-75c946","versionInfo":"7.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2001 Gareth Rees, Copyright 2004- facts.now Y Ned, Copyright 2004-2022 Ned Batchelder, Copyright 2004. Ned, Copyright 2004. Ned', f, copyright 2009 N, copyright 2009-2022, Ned Batchelder, Copyright Software Freedom Conservancy, Inc., Portions (c) International Organization, Portions (c) International Organization for Standardization 1986","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/coverage@7.0.0"}]},{"name":"requests-kerberos","SPDXID":"SPDXRef-pypi-requests-kerberos-75c946","versionInfo":"\u003e= 0.15.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/requests-kerberos"}]},{"name":"flake8","SPDXID":"SPDXRef-pypi-flake8-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/flake8"}]},{"name":"com.github.splitio/python-client","SPDXID":"SPDXRef-github-splitio-python-client-master-ccd0d5","versionInfo":"master","downloadLocation":"git+https://github.com/splitio/python-client","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/splitio/python-client@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-requests-kerberos-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-githubactions-peter-evans-create-pull-request-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-githubactions-jacobtomlinson-gha-find-replace-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-pyyaml-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-pytest-7.0.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-tomli-1.2.3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-urllib3-2.0.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-coverage-7.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-aiohttp-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-requests-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-pytest-cov-4.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-flake8-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-attrs-22.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-pytest-asyncio-0.21.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-pytest-mock-3.11.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-githubactions-SonarSource-sonarcloud-github-action-1.9.-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-aiofiles-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-bloom-filter2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-iniconfig-1.1.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-docopt-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-importlib-metadata-6.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-splitio-python-client-master-ccd0d5","relatedSpdxElement":"SPDXRef-pypi-enum34-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-splitio-python-client-master-ccd0d5","relationshipType":"DESCRIBES"}]}