{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.django/code.djangoproject.com","documentNamespace":"https://spdx.org/spdxdocs/protobom/4f423a2b-176a-4d34-9fbf-86012ba6d3e1","creationInfo":{"creators":["Tool: protobom-v0.0.0-20250701093546-a2c3c36b3913+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-07-01T16:29:28Z"},"packages":[{"name":"sentry-sdk","SPDXID":"SPDXRef-pypi-sentry-sdk-2.8.0-75c946","versionInfo":"2.8.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause AND MIT","copyrightText":"Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020 Python Software Foundation, Copyright (c) 2007 by the Pallets team, Copyright (c) 2014 Nylas, Copyright (c) 2018-2024 Functional Software, Inc.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sentry-sdk@2.8.0"}]},{"name":"trac","SPDXID":"SPDXRef-pypi-trac-1.6.0-75c946","versionInfo":"1.6.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/trac@1.6.0"}]},{"name":"gunicorn","SPDXID":"SPDXRef-pypi-gunicorn-23.0.0-75c946","versionInfo":"23.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) Benoit Chesneau \u003cbenoitc@gunicorn.org\u003e 2009-2015, (c) Meebo, Inc., (c) Paul J. Davis \u003cpaul.joseph.davis@gmail.com\u003e, Copyright (c) 2005-2006, Bob Ippolito, Copyright (c) 2007-2010, Linden Research, Inc., Copyright (c) 2008-2010, Eventlet, Copyright 2001-2005 by Vinay Sajip, Copyright 2009 Paul J. Davis \u003cpaul.joseph.davis@gmail.com\u003e, copyright 2009- s, Benoit Chesneau, Copyright 2013 Dariusz Suchojad","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/gunicorn@23.0.0"}]},{"name":"multipart","SPDXID":"SPDXRef-pypi-multipart-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2010-2024, Marcel Hellkamp, copyrighted by the Werkzeug Team, partly copyrighted by the Werkzeug Team","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/multipart@1.1.0"}]},{"name":"django","SPDXID":"SPDXRef-pypi-django-5.1.7-75c946","versionInfo":"5.1.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"(0BSD AND Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-other-permissive AND Python-2.0) OR (0BSD AND BSD-3-Clause AND LicenseRef-scancode-other-permissive AND Python-2.0)","copyrightText":"(c) 2013 title 0.09734s from fe2.rs.github.com GitHub, Inc., (c) 2021 Denis Pushkarev, (c) OpenJS Foundation and other contributors, (c), Better News, (c), Good News, (c), Hello Jack, Copyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands, Copyright (c) 1995-1998, 2000-2010 Free Software Foundation, Inc., Copyright (c) 1995-2001 Corporation for National Research Initiatives, Copyright (c) 2001-2003, Patrick K. O'Brien and Contributors, Copyright (c) 2001-2024 Python Software Foundation, Copyright (c) 2001-present Python Software Foundation, Copyright (c) 2007-2009 Justin Bronn, Copyright (c) 2007-2009, Justin Bronn, Copyright (c) 2007-present Steven Levithan \u003chttp://xregexp.com/\u003e, Copyright (c) 2007, Robert Coup \u003crobert.coup@onetrackmind.co.nz\u003e, Copyright (c) 2007, Sally Smith, Copyright (c) 2007, Sally Smith Hard-coded, Copyright (c) 2008-2009 Aryeh Leib Taurog, Copyright (c) 2008-2009 Aryeh Leib Taurog, http://www.aryehleib.com, Copyright (c) 2008, Yahoo! Inc., Copyright (c) 2009 Oyvind Sean Kinsey, oyvind@kinsey.no, Copyright (c) 2009, Stanislaus Madueke, Copyright (c) 2010 Gary Wilson Jr. \u003cgary.wilson@gmail.com\u003e and contributors, Copyright (c) 2012-2017 Kevin Brown, Igor Vaynberg, and Select2 contributors, Copyright (c) 2014 Code Charm Ltd, copyright (c) 2021 Denis Pushkarev, Copyright (c) 2022, John Doe, Copyright (c) Django Software Foundation and individual contributors, copyright Django Software Foundation and contributors, COPYRIGHT Django Software Foundation and contributors, Copyright jQuery Foundation and other contributors, Copyright OpenJS Foundation and other contributors, Copyright OpenJS Foundation and other contributors, https://openjsf.org, copyright Python (Monty) Pictures, Steven Levithan (c) 2007-present, Steven Levithan (c) 2008-present, Steven Levithan (c) 2010-present","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/django@5.1.7"}]},{"name":"psycopg2","SPDXID":"SPDXRef-pypi-psycopg2-2.9.9-75c946","versionInfo":"2.9.9","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"LGPL-3.0-or-later WITH openvpn-openssl-exception","copyrightText":"Copyright (c) 2001-2019 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2001-2019, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Python Software Foundation, Copyright (c) 2003-2019 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2004-2019 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2005-2019 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2006-2019 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2006-2019 Johan Dahlin \u003cjdahlin@async.com.br\u003e, Copyright (c) 2007 Free Software Foundation, Inc. \u003chttps://fsf.org/\u003e, Copyright (c) 2007-2019 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2007-2019 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2008 Canonical Ltd., Copyright (c) 2008-2019 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2008-2019 James Henstridge \u003cjames@jamesh.id.au\u003e, Copyright (c) 2010-2019 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2010-2019 Federico Di Gregorio \u003cfog@debian.org\u003e, Copyright (c) 2010-2019 Jan Urbanski \u003cwulczer@wulczer.org\u003e, Copyright (c) 2011-2019 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2012-2019 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2013-2019 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2013-2019 Matthew Woodcraft \u003cmatthew@woodcraft.me.uk\u003e, Copyright (c) 2015-2019 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2016-2019 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2017 My Karlsson \u003cmk@acc.umu.se\u003e, Copyright (c) 2017-2019 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2018-2019 Daniele Varrazzo \u003cdaniele.varrazzo@gmail.com\u003e, Copyright (c) 2018-2019, Joyent, Inc., Copyright (c) 2018, Joyent, Inc., Copyright (c) 2020-2021 The Psycopg Team, copyright 2001-2021, Federico Di Gregorio, Daniele Varrazzo, The Psycopg Team, Copyright 2010 by Daniele Varrazzo, Copyright 2013 by Daniele Varrazzo","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/psycopg2@2.9.9"}]},{"name":"passlib","SPDXID":"SPDXRef-pypi-passlib-1.7.4-75c946","versionInfo":"1.7.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","copyrightText":"(c) 2016 the Electronic Freedom Foundation, (c) 2016 the Electronic Freedom Foundation., (c) Assurance Technologies \u003chttp://www.assurancetechnologies.com\u003e, (c) Assurance Technologies 2003-2009, (c) Assurance Technologies 2008-2011, Copyright (c) 1996 Aki Yoshida, Copyright (c) 1996 Aki Yoshida., Copyright (c) 2006 Damien Miller \u003cdjm@mindrot.org\u003e, Copyright (c) 2008-2020 Assurance Technologies, LLC., copyright 2008, copyright 2008- d, s","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/passlib@1.7.4"}]},{"name":"libsass","SPDXID":"SPDXRef-pypi-libsass-0.23.0-75c946","versionInfo":"0.23.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/libsass@0.23.0"}]},{"name":"docker/metadata-action","SPDXID":"SPDXRef-githubactions-docker-metadata-action-98669ae865ea3cffbcbaa878cf57c20bbf1c6c38-75c946","versionInfo":"98669ae865ea3cffbcbaa878cf57c20bbf1c6c38","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38"}]},{"name":"docker/build-push-action","SPDXID":"SPDXRef-githubactions-docker-build-push-action-ad44023a93711e3deb337508980b4b5e9bcdc5dc-75c946","versionInfo":"ad44023a93711e3deb337508980b4b5e9bcdc5dc","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc"}]},{"name":"docker/login-action","SPDXID":"SPDXRef-githubactions-docker-login-action-f054a8b539a109f9f41c372932f1ae047eff08c9-75c946","versionInfo":"f054a8b539a109f9f41c372932f1ae047eff08c9","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-2..-75c946","versionInfo":"2.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@2.%2A.%2A"}]},{"name":"psf/black","SPDXID":"SPDXRef-githubactions-psf-black-stable-75c946","versionInfo":"stable","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/psf/black@stable"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@5.%2A.%2A"}]},{"name":"com.github.django/code.djangoproject.com","SPDXID":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","versionInfo":"main","downloadLocation":"git+https://github.com/django/code.djangoproject.com","filesAnalyzed":false,"licenseDeclared":"BSD-3-Clause","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/django/code.djangoproject.com@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-pypi-gunicorn-23.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-pypi-passlib-1.7.4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-githubactions-psf-black-stable-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-pypi-django-5.1.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-pypi-psycopg2-2.9.9-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-githubactions-docker-build-push-action-ad44023a93711e3deb337508980b4b5e9bcdc5dc-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-2..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-pypi-trac-1.6.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-pypi-libsass-0.23.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-pypi-multipart-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-githubactions-docker-metadata-action-98669ae865ea3cffbcbaa878cf57c20bbf1c6c38-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-githubactions-docker-login-action-f054a8b539a109f9f41c372932f1ae047eff08c9-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relatedSpdxElement":"SPDXRef-pypi-sentry-sdk-2.8.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-django-code.djangoproject.com-main-d51c30","relationshipType":"DESCRIBES"}]}