{
  "SPDXID": "SPDXRef-DOCUMENT",
  "creationInfo": {
    "created": "2024-12-03T23:41:13Z",
    "creators": [
      "Person: Python Release Managers",
      "Tool: ReleaseTools-95a854f20d69e489d12c3ab601431e32f4094b1a"
    ],
    "licenseListVersion": "3.22"
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://www.python.org/ftp/python/3.13.1/python-3.13.1-amd64.exe.spdx.json",
  "files": [],
  "name": "CPython SBOM",
  "packages": [
    {
      "SPDXID": "SPDXRef-PACKAGE-bzip2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ab8d1b0cc087c20d4c32c0e4fcf7d0c733a95da12cedc6d63b3f0a9af07427e2"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/bzip2-1.0.8.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:bzip:bzip2:1.0.8:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "bzip2",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.0.8"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-cachecontrol",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f5bf3f0620c38db2e5122c0726bdebb0d16869de966ea6a2befe92470b740ea0"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/a3/a9/7d331fec593a4b2953338df33e954aac6ff79eb5a073bca2783766bc7722/cachecontrol-0.14.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/cachecontrol@0.14.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "cachecontrol",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.14.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-certifi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "922820b53db7a7257ffbda3f597266d435245903d80737e34f8a45ff3e3230d8"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/12/90/3c9ff0512038035f59d279fddeb79f5f1eccd8859f06d6163c58798b9487/certifi-2024.8.30-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/certifi@2024.8.30",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "certifi",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2024.8.30"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-cpython",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6b33fa9a439a86f553f9f60e538ccabc857d2f308bc77c477c04a46552ade81f"
        }
      ],
      "downloadLocation": "https://www.python.org/ftp/python/3.13.1/python-3.13.1-amd64.exe",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:python:python:3.13.1:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "PSF-2.0",
      "name": "CPython",
      "originator": "Organization: Python Software Foundation",
      "packageFileName": "python-3.13.1-amd64.exe",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.13.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-distlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "47f8c22fd27c27e25a65601af709b38e4f0a45ea4fc2e710f65755fa8caaaf87"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/91/a1/cf2472db20f7ce4a6be1253a81cfdf85ad9c7885ffbed7047fb72c24cf87/distlib-0.3.9-py2.py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/distlib@0.3.9",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "distlib",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.3.9"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-distro",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7bffd925d65168f85027d8da9af6bddab658135b840670a223589bc0c8ef02b2"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/12/b3/231ffd4ab1fc9d679809f356cebee130ac7daa00d6d6f3206dd4fd137e9e/distro-1.9.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/distro@1.9.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "distro",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.9.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-expat",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "17aa6cfc5c4c219c09287abfc10bc13f0c06f30bb654b28bfe6f567ca646eb79"
        }
      ],
      "downloadLocation": "https://github.com/libexpat/libexpat/releases/download/R_2_6_3/expat-2.6.3.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.6.3:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "expat",
      "originator": "Organization: Expat development team",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.6.3"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-hacl-star",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e31e4ca10da91c585793c0eaf1b98aee3cb43e3a58d3d8d478593e5a6bd82927"
        }
      ],
      "downloadLocation": "https://github.com/hacl-star/hacl-star/archive/bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0.zip",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:hacl-star:hacl-star:bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "hacl-star",
      "originator": "Organization: HACL* Developers",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "bb3d0dc8d9d15a5cd51094d5b69e70aa09005ff0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-idna",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "82fee1fc78add43492d3a1898bfa6d8a904cc97d8427f683ed8e798d07761aa0"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/e5/3e/741d8c82801c347547f8a2a06aa57dbb1992be9e948df2ea0eda2c8b79e8/idna-3.7-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/idna@3.7",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "idna",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.7"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-libb2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "53626fddce753c454a3fea581cbbc7fe9bbcf0bc70416d48fdbbf5d87ef6c72e"
        }
      ],
      "downloadLocation": "https://github.com/BLAKE2/libb2/releases/download/v0.98.1/libb2-0.98.1.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:blake2:libb2:0.98.1:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "libb2",
      "originator": "Organization: BLAKE2 - fast secure hashing",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.98.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-libffi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9d802681adfea27d84cae0487a785fb9caa925bdad44c401b364c59ab2b8edda"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/libffi-3.4.4.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:libffi_project:libffi:3.4.4:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "libffi",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.4.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-macholib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c76f268f5054024e962f2515a0e522baf85313064f6740d80375afc850787a38"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/ec/57/f0a712efc3ed982cf4038a3cee172057303b9be914c32c93b2fbec27f785/macholib-1.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/macholib@1.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "macholib",
      "originator": "Person: Ronald Oussoren (ronaldoussoren@mac.com)",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-mpdecimal",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "338fac3fb8cdd60f406b6326431338756f58a8af94229ffd9bf1e7c2b1ad71ca"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/mpdecimal-4.0.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:4.0.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "mpdecimal",
      "originator": "Organization: bytereef.org",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "4.0.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-mpdecimal",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9f9cd4c041f99b5c49ffb7b59d9f12d95b683d88585608aa56a6307667b2b21f"
        }
      ],
      "downloadLocation": "https://www.bytereef.org/software/mpdecimal/releases/mpdecimal-2.5.1.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:2.5.1:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "mpdecimal",
      "originator": "Organization: bytereef.org",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.5.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-msgpack",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "505fe3d03856ac7d215dbe005414bc28505d26f0c128906037e66d98c4e95868"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/b3/c2/8ecbafd6d3178ad408989c82d6d518fec76e053bae20c0fd9f47bffe7dda/msgpack-1.0.8-cp310-cp310-macosx_10_9_universal2.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/msgpack@1.0.8",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "msgpack",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.0.8"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-openssl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1550c87996a0858474a9dd179deab2c55eb73726b9a140b32865b02fd3d8a86b"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/openssl-3.0.15.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:openssl:openssl:3.0.15:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "openssl",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.0.15"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-packaging",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5b8f2217dbdbd2f7f384c41c628544e6d52f2d0f53c6d0c3ea61aa5d1d7ff124"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/08/aa/cc0199a5f0ad350994d660967a8efb233fe0416e4639146c089643407ce6/packaging-24.1-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/packaging@24.1",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "packaging",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "24.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-pip",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3790624780082365f47549d032f3770eeb2b1e8bd1f7b2e02dace1afa361b4ed"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/ef/7d/500c9ad20238fcfcb4cb9243eede163594d7020ce87bd9610c9e02771876/pip-24.3.1-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/pip@24.3.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:pypa:pip:24.3.1:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "pip",
      "originator": "Organization: Python Packaging Authority",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "24.3.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-platformdirs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2d7a1657e36a80ea911db832a8a6ece5ee53d8de21edd5cc5879af6530b1bfee"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/68/13/2aa1f0e1364feb2c9ef45302f387ac0bd81484e9c9a4c5688a322fbdfd08/platformdirs-4.2.2-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/platformdirs@4.2.2",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "platformdirs",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "4.2.2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-pygments",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b8e6aca0523f3ab76fee51799c488e38782ac06eafcf95e7ba832985c8e7b13a"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/f7/3f/01c8b82017c199075f8f788d0d906b9ffbbc5a47dc9918a945e13d5a2bda/pygments-2.18.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/pygments@2.18.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "pygments",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.18.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-pyproject-hooks",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "283c11acd6b928d2f6a7c73fa0d01cb2bdc5f07c57a2eeb6e83d5e56b97976f8"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/d5/ea/9ae603de7fbb3df820b23a70f6aff92bf8c7770043254ad8d2dc9d6bcba4/pyproject_hooks-1.0.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/pyproject-hooks@1.0.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "pyproject-hooks",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.0.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-requests",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "70761cfe03c773ceb22aa2f671b4757976145175cdfca038c02654d061d6dcc6"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/f9/9b/335f9764261e915ed497fcdeb11df5dfd6f7bf257d4a6a2a686d80da4d54/requests-2.32.3-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/requests@2.32.3",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "requests",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.32.3"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-resolvelib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d2da45d1a8dfee81bdd591647783e340ef3bcb104b54c383f70d422ef5cc7dbf"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/d2/fc/e9ccf0521607bcd244aa0b3fbd574f71b65e9ce6a112c83af988bbbe2e23/resolvelib-1.0.1-py2.py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/resolvelib@1.0.1",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "resolvelib",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.0.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-rich",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4edbae314f59eb482f54e9e30bf00d33350aaa94f4bfcd4e9e3110e64d0d7222"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/87/67/a37f6214d0e9fe57f6ae54b2956d550ca8365857f42a1ce0392bb21d9410/rich-13.7.1-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/rich@13.7.1",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "rich",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "13.7.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-setuptools",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe384da74336c398e0d956d1cae0669bc02eed936cdb1d49b57de1990dc11ffc"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/ef/15/88e46eb9387e905704b69849618e699dc2f54407d8953cc4ec4b8b46528d/setuptools-70.3.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/setuptools@70.3.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "setuptools",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "70.3.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-sqlite",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "730e4a3efd6a63828bee499940fb13acc2a32c182502ce8a1d970387895d0504"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/sqlite-3.45.3.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:sqlite:sqlite:3.45.3.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "sqlite",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.45.3.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tcl-core",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4c23f0dd3efcbe6f3a22c503a68d147617bb30c4f5290f1eb3eaacf0b460440b"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/tcl-core-8.6.15.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.15.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tcl-core",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "8.6.15.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tk",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0ae56d39bca92865f338529557a1e56d110594184b6dc5a91339c5675751e264"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/tk-8.6.15.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.15.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tk",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "8.6.15.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tomli",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "939de3e7a6161af0c887ef91b7d41a53e7c5a1ca976325f429cb46ea9bc30ecc"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/97/75/10a9ebee3fd790d20926a90a2547f0bf78f371b2f13aa822c759680ca7b9/tomli-2.0.1-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/tomli@2.0.1",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tomli",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.0.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-truststore",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b3798548e421ffe2ca2a6217cca49e7a17baf40b72d86a5505dc7d701e77d15b"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/d1/c9/bab5a5dda14af36fe31e2215f0f87bf34408951972fa7220055926dab2e0/truststore-0.10.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/truststore@0.10.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "truststore",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.10.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-typing-extensions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "04e5ca0351e0f3f85c6853954072df659d0d13fac324d0072316b67d7794700d"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/26/9f/ad63fc0248c5379346306f8668cda6e2e2e9c95e01216d2b8ffd9ff037d0/typing_extensions-4.12.2-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/typing_extensions@4.12.2",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "typing_extensions",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "4.12.2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-urllib3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0ed14ccfbf1c30a9072c7ca157e4319b70d65f623e91e7b32fadb2853431016e"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/33/cf/8435d5a7159e2a9c83a95896ed596f68cf798005fe107cc655b5c5c14704/urllib3-1.26.20-py2.py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/urllib3@1.26.20",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "urllib3",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.26.20"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-xz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a15c168e39e87d750c3dc766edc7f19bdda57dacf01e509678467eace91ad282"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/xz-5.2.5.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "xz",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "5.2.5"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e3f3fb32564952006eb18b091ca8464740e5eca29d328cfb0b2da22768e0b638"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/zlib-1.3.1.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:zlib:zlib:1.3.1:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "zlib",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.3.1"
    }
  ],
  "relationships": [
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-bzip2",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-cachecontrol",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-certifi",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-cpython",
      "relationshipType": "DESCRIBES",
      "spdxElementId": "SPDXRef-DOCUMENT"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-distlib",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-distro",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-expat",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-hacl-star",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-idna",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-libb2",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-libffi",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-macholib",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-msgpack",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-openssl",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-packaging",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-pip",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-platformdirs",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-pygments",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-pyproject-hooks",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-requests",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-resolvelib",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-rich",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-setuptools",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-sqlite",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tcl-core",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tk",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tomli",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-truststore",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-typing-extensions",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-urllib3",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-xz",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-zlib",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    }
  ],
  "spdxVersion": "SPDX-2.3"
}
.