imod-python.spdx.json

{
  "SPDXID": "SPDXRef-DOCUMENT",
  "spdxVersion": "SPDX-2.3",
  "creationInfo": {
    "comment": "SBOM Type: Build - This document has been automatically generated.",
    "creators": [
      "Tool: sbom4python-0.12.6"
    ],
    "created": "2026-10-22T16:40:48Z",
    "licenseListVersion": "3.28.0"
  },
  "name": "Python-imod",
  "dataLicense": "CC0-1.0",
  "documentNamespace": "http://spdx.org/spdxdocs/Python-imod-2c44f95f-d7e0-492a-a645-9454df9bc483",
  "files": [
    {
      "SPDXID": "SPDXRef-File-1-llvmlite.dll",
      "fileName": "./llvmlite.dll",
      "fileTypes": [
        "BINARY"
      ],
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "be793550e4d0d93414191ca40a75469bc9073414"
        },
        {
          "algorithm": "SHA256",
          "checksumValue": "46bdc631252f44f6acbf7fde595b97fcc8df5a4ed8a8546a5a0b67c3b7d6fb80"
        },
        {
          "algorithm": "SHA512",
          "checksumValue": "c6497f9a1119f39b556846c70fe7846581e4f9671e8144b840026c3e9e75a09167bb23dd5440fec56b3f9da93850cb5bd53099e490cb865637513ff9a656222d"
        }
      ],
      "comment": "File location: C:\\ProgramData\\DevDrive\\src\\imod-python\\.pixi\\envs\\default\\Lib\\site-packages\\llvmlite\\binding\\llvmlite.dll"
    }
  ],
  "packages": [
    {
      "SPDXID": "SPDXRef-1-imod",
      "name": "imod",
      "versionInfo": "1.1.1.dev0",
      "primaryPackagePurpose": "APPLICATION",
      "supplier": "Person: Deltares (imod.info@deltares.nl)",
      "downloadLocation": "https://pypi.org/project/imod/1.1.1.dev0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/Deltares/imod-python",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "imod declares MIT License\n\nCopyright (c) Deltares\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE. which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Make massive MODFLOW models!",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://deltares.github.io/imod-python/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/Deltares/imod-python.git"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/Deltares/imod-python/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/Deltares/imod-python/blob/master/docs/api/changelog.rst"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/imod@1.1.1.dev0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:deltares:imod:1.1.1.dev0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-2-affine",
      "name": "affine",
      "versionInfo": "3.0.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Sean Gillies (sean.gillies@gmail.com)",
      "downloadLocation": "https://pypi.org/project/affine/3.0.1/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cda3b303325e7bf2bf34817e68753a0d1c4cacbdd451fe67c4878dc2ecbaa540"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Matrices describing affine transformation of the plane",
      "releaseDate": "2026-08-28T18:38:12Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/rasterio/affine"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/affine@3.0.1"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:sean_gillies:affine:3.0.1:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-3-attrs",
      "name": "attrs",
      "versionInfo": "26.1.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Hynek Schlawack (hs@ox.cx)",
      "downloadLocation": "https://pypi.org/project/attrs/26.1.0/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Classes Without Boilerplate",
      "releaseDate": "2026-03-19T14:22:23Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://www.attrs.org/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://www.attrs.org/en/stable/changelog.html"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/python-attrs/attrs"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://github.com/sponsors/hynek"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://tidelift.com/subscription/pkg/pypi-attrs?utm_source=pypi-attrs&utm_medium=pypi"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/attrs@26.1.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:hynek_schlawack:attrs:26.1.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-4-certifi",
      "name": "certifi",
      "versionInfo": "2026.10.19",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Kenneth Reitz (me@kennethreitz.com)",
      "downloadLocation": "https://pypi.org/project/certifi/2026.10.19/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/certifi/python-certifi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b"
        }
      ],
      "licenseConcluded": "MPL-2.0",
      "licenseDeclared": "MPL-2.0",
      "copyrightText": "NOASSERTION",
      "summary": "Python package for providing Mozilla's CA Bundle.",
      "releaseDate": "2026-10-20T02:24:15Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/certifi/python-certifi"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/certifi@2026.10.19"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:kenneth_reitz:certifi:2026.10.19:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-5-cftime",
      "name": "cftime",
      "versionInfo": "1.6.5",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Jeff Whitaker (whitaker.jeffrey@gmail.com)",
      "downloadLocation": "https://pypi.org/project/cftime/1.6.5/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8ad81e8cb0eb873b33c3d1e22c6168163fdc64daa8f7aeb4da8092f272575f4d"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Time-handling functionality from netcdf4-python",
      "releaseDate": "2025-10-13T18:55:52Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/cftime@1.6.5"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:jeff_whitaker:cftime:1.6.5:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-6-numpy",
      "name": "numpy",
      "versionInfo": "2.5.3",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Travis E. Oliphant et al.",
      "downloadLocation": "https://pypi.org/project/numpy/2.5.3/#files",
      "filesAnalyzed": false,
      "homepage": "https://numpy.org",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cb189f09db39283b26bfd061ec16189e14f71c6755207f72a0f7540867afe5b9"
        }
      ],
      "licenseConcluded": "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0",
      "licenseDeclared": "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0",
      "copyrightText": "NOASSERTION",
      "summary": "Fundamental package for array computing in Python",
      "releaseDate": "2026-09-06T16:24:29Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://numpy.org/doc/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/numpy/numpy"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://pypi.org/project/numpy/#files"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/numpy/numpy/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "release-notes",
          "referenceLocator": "https://numpy.org/doc/stable/release"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/numpy@2.5.3"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:travis_e._oliphant_et_al.:numpy:2.5.3:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-7-dask",
      "name": "dask",
      "versionInfo": "2026.8.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/dask/2026.8.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/dask/dask/",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ccc0c83a189b0398602435189771d28dad7b5773b6089bb8dce14ae732dd782c"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Parallel PyData with Task Scheduling",
      "releaseDate": "2026-08-24T19:21:23Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/dask@2026.8.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-8-click",
      "name": "click",
      "versionInfo": "8.5.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/click/8.5.0/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "255bc9599cf7748b4b1a446ccc735421bd08a2ae529a8b88597d3de5664ee360"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Composable command line interface toolkit",
      "releaseDate": "2026-08-26T13:33:12Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://click.palletsprojects.com/page/changes/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "chat",
          "referenceLocator": "https://discord.gg/pallets"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://click.palletsprojects.com/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://palletsprojects.com/donate"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pallets/click/"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/click@8.5.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-9-cloudpickle",
      "name": "cloudpickle",
      "versionInfo": "3.1.2",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: The cloudpickle developer team (cloudpipe@googlegroups.com)",
      "downloadLocation": "https://pypi.org/project/cloudpickle/3.1.2/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/cloudpipe/cloudpickle",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9acb47f6afd73f60dc1df93bb801b472f05ff42fa6c84167d25cb206be1fbf4a"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Pickler class to extend the standard pickle.Pickler functionality",
      "releaseDate": "2025-11-03T09:25:25Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/cloudpickle@3.1.2"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:the_cloudpickle_developer_team:cloudpickle:3.1.2:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-10-fsspec",
      "name": "fsspec",
      "versionInfo": "2026.9.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/fsspec/2026.9.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/fsspec/filesystem_spec",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8dd6e646e99ea382bd85f97a45e6b526a442d79423a7dc673f1e2756d05fcb5f"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "File-system specification",
      "releaseDate": "2026-09-18T17:50:41Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://filesystem-spec.readthedocs.io/en/latest/changelog.html"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://filesystem-spec.readthedocs.io/en/latest/"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/fsspec@2026.9.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-11-packaging",
      "name": "packaging",
      "versionInfo": "26.3",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Donald Stufft (donald@stufft.io)",
      "downloadLocation": "https://pypi.org/project/packaging/26.3/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c"
        }
      ],
      "licenseConcluded": "Apache-2.0 OR BSD-2-Clause",
      "licenseDeclared": "Apache-2.0 OR BSD-2-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Core utilities for Python packages",
      "releaseDate": "2026-08-04T18:15:27Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://packaging.pypa.io/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pypa/packaging"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/packaging@26.3"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:donald_stufft:packaging:26.3:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-12-partd",
      "name": "partd",
      "versionInfo": "1.4.2",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/partd/1.4.2/#files",
      "filesAnalyzed": false,
      "homepage": "http://github.com/dask/partd/",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "978e4ac767ec4ba5b86c6eaa52e5a2a3bc748a2ca839e8cc798f1cc6ce6efb0f"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "partd declares BSD which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Appendable key-value storage",
      "releaseDate": "2024-05-06T19:51:39Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/partd@1.4.2"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-13-locket",
      "name": "locket",
      "versionInfo": "1.0.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Michael Williamson (mike@zwobble.org)",
      "downloadLocation": "https://pypi.org/project/locket/1.0.0/#files",
      "filesAnalyzed": false,
      "homepage": "http://github.com/mwilliamson/locket.py",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b6c819a722f7b6bd955b80781788e4a66a55628b858d347536b7e81325a3a5e3"
        }
      ],
      "licenseConcluded": "BSD-2-Clause",
      "licenseDeclared": "BSD-2-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "File-based locks for Python on Linux and Windows",
      "releaseDate": "2022-04-20T22:04:42Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/locket@1.0.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:michael_williamson:locket:1.0.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-14-toolz",
      "name": "toolz",
      "versionInfo": "1.1.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: PyToolz Contributors",
      "downloadLocation": "https://pypi.org/project/toolz/1.1.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/pytoolz/toolz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "15ccc861ac51c53696de0a5d6d4607f99c210739caf987b5d2054f3efed429d8"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "List processing tools and functional utilities",
      "releaseDate": "2025-10-17T04:03:20Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pytoolz/toolz"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://toolz.readthedocs.io/en/latest/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/pytoolz/toolz/releases"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/toolz@1.1.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:pytoolz_contributors:toolz:1.1.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-15-pyyaml",
      "name": "pyyaml",
      "versionInfo": "6.0.3",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Kirill Simonov (xi@resolvent.net)",
      "downloadLocation": "https://pypi.org/project/PyYAML/",
      "filesAnalyzed": false,
      "homepage": "https://pyyaml.org/",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "214ed4befebe12df36bcc8bc2b64b396ca31be9304b8f59e25c11cf94a4c033b"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "YAML parser and emitter for Python",
      "releaseDate": "2025-09-25T21:31:46Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/yaml/pyyaml/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "build-system",
          "referenceLocator": "https://github.com/yaml/pyyaml/actions"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://pyyaml.org/wiki/PyYAMLDocumentation"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "mailing-list",
          "referenceLocator": "http://lists.sourceforge.net/lists/listinfo/yaml-core"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/yaml/pyyaml"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/pyyaml@6.0.3"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:kirill_simonov:pyyaml:6.0.3:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-16-importlib-metadata",
      "name": "importlib-metadata",
      "versionInfo": "9.0.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Jason R. (jaraco@jaraco.com)",
      "downloadLocation": "https://pypi.org/project/importlib-metadata/9.0.1/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bba5600596a7e21f3eef53281cf28d6a5195634d2f2b78ff9501a3272c6eaab0"
        }
      ],
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "NOASSERTION",
      "summary": "Read metadata from Python packages",
      "releaseDate": "2026-08-28T15:30:33Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/python/importlib_metadata"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/importlib-metadata@9.0.1"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:jason_r.:importlib-metadata:9.0.1:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-17-zipp",
      "name": "zipp",
      "versionInfo": "4.1.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Jason R. (jaraco@jaraco.com)",
      "downloadLocation": "https://pypi.org/project/zipp/4.1.1/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8979f52d874162f485ff2981e3891f3a3317b7a3dd43ff1e1775b9304f307a9c"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Backport of pathlib-compatible object wrapper for zip files",
      "releaseDate": "2026-10-03T17:03:02Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/jaraco/zipp"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/zipp@4.1.1"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:jason_r.:zipp:4.1.1:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-18-filelock",
      "name": "filelock",
      "versionInfo": "4.0.10",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/filelock/4.0.10/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/tox-dev/py-filelock",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "698048d158dc3c9e18cc5e88b3efdd4bd0e77d76686b22adb4511cc4b2c2f0db"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "A platform independent file lock.",
      "releaseDate": "2026-10-03T23:40:47Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://py-filelock.readthedocs.io"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/tox-dev/py-filelock"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/tox-dev/py-filelock/issues"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/filelock@4.0.10"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-19-jinja2",
      "name": "jinja2",
      "versionInfo": "3.1.6",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/jinja2/3.1.6/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "jinja2 declares BSD License which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "A very fast and expressive template engine.",
      "releaseDate": "2025-03-05T20:05:00Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://jinja.palletsprojects.com/changes/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "chat",
          "referenceLocator": "https://discord.gg/pallets"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://jinja.palletsprojects.com/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://palletsprojects.com/donate"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pallets/jinja/"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/jinja2@3.1.6"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-20-markupsafe",
      "name": "markupsafe",
      "versionInfo": "3.0.4",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/markupsafe/3.0.4/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dd8ea6ebee7aedbf7c749fa80521d9ccf1ba473e0d1e14805caafbaad281c889"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Safely add untrusted strings to HTML/XML markup.",
      "releaseDate": "2026-10-02T23:04:20Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://palletsprojects.com/donate"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://markupsafe.palletsprojects.com/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://markupsafe.palletsprojects.com/page/changes/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pallets/markupsafe/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "chat",
          "referenceLocator": "https://discord.gg/pallets"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/markupsafe@3.0.4"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-21-loguru",
      "name": "loguru",
      "versionInfo": "0.7.3",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Delgan (delgan.py@gmail.com)",
      "downloadLocation": "https://pypi.org/project/loguru/0.7.3/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/Delgan/loguru",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "31a33c10c8e1e10422bfd431aeb5d351c7cf7fa671e3c4df004162264b28220c"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "loguru declares MIT License which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Python logging made (stupidly) simple",
      "releaseDate": "2024-12-06T11:20:54Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/Delgan/loguru/blob/master/CHANGELOG.rst"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://loguru.readthedocs.io/en/stable/index.html"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/loguru@0.7.3"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:delgan:loguru:0.7.3:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-22-colorama",
      "name": "colorama",
      "versionInfo": "0.4.6",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Jonathan Hartley (tartley@tartley.com)",
      "downloadLocation": "https://pypi.org/project/colorama/0.4.6/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/tartley/colorama",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Cross-platform colored terminal text.",
      "releaseDate": "2022-10-25T02:36:20Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/colorama@0.4.6"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:jonathan_hartley:colorama:0.4.6:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-23-win32-setctime",
      "name": "win32-setctime",
      "versionInfo": "1.2.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Delgan (delgan.py@gmail.com)",
      "downloadLocation": "https://github.com/Delgan/win32-setctime/archive/1.2.0.tar.gz",
      "filesAnalyzed": false,
      "homepage": "https://github.com/Delgan/win32-setctime",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "95d644c4e708aba81dc3704a116d8cbc974d70b3bdb8be1d150e36be6e9d1390"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "win32-setctime declares MIT license which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "A small Python utility to set file creation time on Windows",
      "releaseDate": "2024-12-07T15:28:26Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/win32-setctime@1.2.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:delgan:win32-setctime:1.2.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-24-matplotlib",
      "name": "matplotlib",
      "versionInfo": "3.10.9",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: John D. Michael Droettboom",
      "downloadLocation": "https://pypi.org/project/matplotlib/3.10.9/#files",
      "filesAnalyzed": false,
      "homepage": "https://matplotlib.org",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "77210dce9cb8153dffc967efaae990543392563d5a376d4dd8539bebcb0ed217"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "matplotlib declares License agreement for matplotlib versions 1.3.0 and later\n =========================================================\n\n 1. This LICENSE AGREEMENT is between the Matplotlib Development Team\n (\"MDT\"), and the Individual or Organization (\"Licensee\") accessing and\n otherwise using matplotlib software in source or binary form and its\n associated documentation.\n\n 2. Subject to the terms and conditions of this License Agreement, MDT\n hereby grants Licensee a nonexclusive, royalty-free, world-wide license\n to reproduce, analyze, test, perform and/or display publicly, prepare\n derivative works, distribute, and otherwise use matplotlib\n alone or in any derivative version, provided, however, that MDT's\n License Agreement and MDT's notice of copyright, i.e., \"Copyright (c)\n 2012- Matplotlib Development Team; All Rights Reserved\" are retained in\n matplotlib  alone or in any derivative version prepared by\n Licensee.\n\n 3. In the event Licensee prepares a derivative work that is based on or\n incorporates matplotlib or any part thereof, and wants to\n make the derivative work available to others as provided herein, then\n Licensee hereby agrees to include in any such work a brief summary of\n the changes made to matplotlib .\n\n 4. MDT is making matplotlib available to Licensee on an \"AS\n IS\" basis.  MDT MAKES NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR\n IMPLIED.  BY WAY OF EXAMPLE, BUT NOT LIMITATION, MDT MAKES NO AND\n DISCLAIMS ANY REPRESENTATION OR WARRANTY OF MERCHANTABILITY OR FITNESS\n FOR ANY PARTICULAR PURPOSE OR THAT THE USE OF MATPLOTLIB\n WILL NOT INFRINGE ANY THIRD PARTY RIGHTS.\n\n 5. MDT SHALL NOT BE LIABLE TO LICENSEE OR ANY OTHER USERS OF MATPLOTLIB\n  FOR ANY INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES OR\n LOSS AS A RESULT OF MODIFYING, DISTRIBUTING, OR OTHERWISE USING\n MATPLOTLIB , OR ANY DERIVATIVE THEREOF, EVEN IF ADVISED OF\n THE POSSIBILITY THEREOF.\n\n 6. This License Agreement will automatically terminate upon a material\n breach of its terms and conditions.\n\n 7. Nothing in this License Agreement shall be deemed to create any\n relationship of agency, partnership, or joint venture between MDT and\n Licensee.  This License Agreement does not grant permission to use MDT\n trademarks or trade name in a trademark sense to endorse or promote\n products or services of Licensee, or any third party.\n\n 8. By copying, installing or otherwise using matplotlib ,\n Licensee agrees to be bound by the terms and conditions of this License\n Agreement.\n\n License agreement for matplotlib versions prior to 1.3.0\n ========================================================\n\n 1. This LICENSE AGREEMENT is between John D. Hunter (\"JDH\"), and the\n Individual or Organization (\"Licensee\") accessing and otherwise using\n matplotlib software in source or binary form and its associated\n documentation.\n\n 2. Subject to the terms and conditions of this License Agreement, JDH\n hereby grants Licensee a nonexclusive, royalty-free, world-wide license\n to reproduce, analyze, test, perform and/or display publicly, prepare\n derivative works, distribute, and otherwise use matplotlib\n alone or in any derivative version, provided, however, that JDH's\n License Agreement and JDH's notice of copyright, i.e., \"Copyright (c)\n 2002-2011 John D. Hunter; All Rights Reserved\" are retained in\n matplotlib  alone or in any derivative version prepared by\n Licensee.\n\n 3. In the event Licensee prepares a derivative work that is based on or\n incorporates matplotlib  or any part thereof, and wants to\n make the derivative work available to others as provided herein, then\n Licensee hereby agrees to include in any such work a brief summary of\n the changes made to matplotlib.\n\n 4. JDH is making matplotlib  available to Licensee on an \"AS\n IS\" basis.  JDH MAKES NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR\n IMPLIED.  BY WAY OF EXAMPLE, BUT NOT LIMITATION, JDH MAKES NO AND\n DISCLAIMS ANY REPRESENTATION OR WARRANTY OF MERCHANTABILITY OR FITNESS\n FOR ANY PARTICULAR PURPOSE OR THAT THE USE OF MATPLOTLIB\n WILL NOT INFRINGE ANY THIRD PARTY RIGHTS.\n\n 5. JDH SHALL NOT BE LIABLE TO LICENSEE OR ANY OTHER USERS OF MATPLOTLIB\n  FOR ANY INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES OR\n LOSS AS A RESULT OF MODIFYING, DISTRIBUTING, OR OTHERWISE USING\n MATPLOTLIB , OR ANY DERIVATIVE THEREOF, EVEN IF ADVISED OF\n THE POSSIBILITY THEREOF.\n\n 6. This License Agreement will automatically terminate upon a material\n breach of its terms and conditions.\n\n 7. Nothing in this License Agreement shall be deemed to create any\n relationship of agency, partnership, or joint venture between JDH and\n Licensee.  This License Agreement does not grant permission to use JDH\n trademarks or trade name in a trademark sense to endorse or promote\n products or services of Licensee, or any third party.\n\n 8. By copying, installing or otherwise using matplotlib,\n Licensee agrees to be bound by the terms and conditions of this License\n Agreement. which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Python plotting package",
      "releaseDate": "2026-04-24T00:11:43Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://matplotlib.org/stable/install/index.html"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://matplotlib.org"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/matplotlib/matplotlib"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/matplotlib/matplotlib/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://discourse.matplotlib.org/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://numfocus.org/donate-to-matplotlib"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/matplotlib@3.10.9"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:john_d._michael_droettboom:matplotlib:3.10.9:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-25-contourpy",
      "name": "contourpy",
      "versionInfo": "1.4.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/contourpy/1.4.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/contourpy/contourpy",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "186ba929df36d61b6127da2e89cd1357e4cb79aca647381ab1a6feb0b152877b"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Python library for calculating contours of 2D quadrilateral grids",
      "releaseDate": "2026-09-11T19:02:45Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://contourpy.readthedocs.io/en/latest/changelog.html"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://contourpy.readthedocs.io"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/contourpy/contourpy"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/contourpy@1.4.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-26-cycler",
      "name": "cycler",
      "versionInfo": "0.12.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Thomas A Caswell (matplotlib-users@python.org)",
      "downloadLocation": "https://pypi.org/project/cycler/0.12.1/#files",
      "filesAnalyzed": false,
      "homepage": "https://matplotlib.org/cycler/",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "85cef7cff222d8644161529808465972e51340599459b8ac3ccbac5a854e0d30"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "cycler declares Copyright (c) 2015, matplotlib project\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are met:\n\n* Redistributions of source code must retain the above copyright notice, this\n  list of conditions and the following disclaimer.\n\n* Redistributions in binary form must reproduce the above copyright notice,\n  this list of conditions and the following disclaimer in the documentation\n  and/or other materials provided with the distribution.\n\n* Neither the name of the matplotlib project nor the names of its\n  contributors may be used to endorse or promote products derived from\n  this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\"\nAND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE\nIMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE\nFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\nDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\nSERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER\nCAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,\nOR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Composable style cycles",
      "releaseDate": "2023-10-07T05:32:16Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/matplotlib/cycler"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/cycler@0.12.1"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:thomas_a_caswell:cycler:0.12.1:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-27-fonttools",
      "name": "fonttools",
      "versionInfo": "4.66.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Just van Rossum (just@letterror.com)",
      "downloadLocation": "https://pypi.org/project/fonttools/4.66.1/#files",
      "filesAnalyzed": false,
      "homepage": "http://github.com/fonttools/fonttools",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d4f76868aea9cc4ce47fdbeaa904c02ee7d85dd0ad095071ae77f0bda6e62cf5"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Tools to manipulate font files",
      "releaseDate": "2026-09-29T16:09:50Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/fonttools@4.66.1"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:just_van_rossum:fonttools:4.66.1:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-28-kiwisolver",
      "name": "kiwisolver",
      "versionInfo": "1.5.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: The Nucleic Development Team (sccolbert@gmail.com)",
      "downloadLocation": "https://pypi.org/project/kiwisolver/1.5.1/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/nucleic/kiwi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1acc7e5b7ef05e9da8bb70cd6c7c4513090213d2e1ad9720f599f0bf6c52aec5"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "kiwisolver declares =========================\n The Kiwi licensing terms\n=========================\nKiwi is licensed under the terms of the Modified BSD License (also known as\nNew or Revised BSD), as follows:\n\nCopyright (c) 2013-2026, Nucleic Development Team\n\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are met:\n\nRedistributions of source code must retain the above copyright notice, this\nlist of conditions and the following disclaimer.\n\nRedistributions in binary form must reproduce the above copyright notice, this\nlist of conditions and the following disclaimer in the documentation and/or\nother materials provided with the distribution.\n\nNeither the name of the Nucleic Development Team nor the names of its\ncontributors may be used to endorse or promote products derived from this\nsoftware without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\nANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE\nFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\nDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\nSERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER\nCAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,\nOR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\nAbout Kiwi\n----------\nChris Colbert began the Kiwi project in December 2013 in an effort to\ncreate a blisteringly fast UI constraint solver. Chris is still the\nproject lead.\n\nThe Nucleic Development Team is the set of all contributors to the Nucleic\nproject and its subprojects.\n\nThe core team that coordinates development on GitHub can be found here:\nhttp://github.com/nucleic. The current team consists of:\n\n* Chris Colbert\n\nOur Copyright Policy\n--------------------\nNucleic uses a shared copyright model. Each contributor maintains copyright\nover their contributions to Nucleic. But, it is important to note that these\ncontributions are typically only changes to the repositories. Thus, the Nucleic\nsource code, in its entirety is not the copyright of any single person or\ninstitution. Instead, it is the collective copyright of the entire Nucleic\nDevelopment Team. If individual contributors want to maintain a record of what\nchanges/contributions they have specific copyright on, they should indicate\ntheir copyright in the commit message of the change, when they commit the\nchange to one of the Nucleic repositories.\n\nWith this in mind, the following banner should be used in any source code file\nto indicate the copyright and license terms:\n\n#------------------------------------------------------------------------------\n# Copyright (c) 2013-2026, Nucleic Development Team.\n#\n# Distributed under the terms of the Modified BSD License.\n#\n# The full license is in the file LICENSE, distributed with this software.\n#------------------------------------------------------------------------------\n which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "A fast implementation of the Cassowary constraint solver",
      "releaseDate": "2026-08-28T10:24:43Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://kiwisolver.readthedocs.io/en/latest/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/nucleic/kiwi"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/nucleic/kiwi/blob/main/releasenotes.rst"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/kiwisolver@1.5.1"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:the_nucleic_development_team:kiwisolver:1.5.1:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-29-pillow",
      "name": "pillow",
      "versionInfo": "12.3.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Jeffrey Clark (aclark@aclark.net)",
      "downloadLocation": "https://pypi.org/project/pillow/12.3.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://python-pillow.github.io",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6c0016e7b354317c4e9e525b937ac8596c38d2d232b419529b9cd7a1cd46e39a"
        }
      ],
      "licenseConcluded": "MIT-CMU",
      "licenseDeclared": "MIT-CMU",
      "copyrightText": "NOASSERTION",
      "summary": "Python Imaging Library (fork)",
      "releaseDate": "2026-07-01T11:53:27Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "release-notes",
          "referenceLocator": "https://pillow.readthedocs.io/en/stable/releasenotes/index.html"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/python-pillow/Pillow/releases"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://pillow.readthedocs.io"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://tidelift.com/subscription/pkg/pypi-pillow?utm_source=pypi-pillow&utm_medium=pypi"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://fosstodon.org/@pillow"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/python-pillow/Pillow"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/pillow@12.3.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:jeffrey_clark:pillow:12.3.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-30-pyparsing",
      "name": "pyparsing",
      "versionInfo": "3.3.3",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Paul McGuire (ptmcg.gm+pyparsing@gmail.com)",
      "downloadLocation": "https://pypi.org/project/pyparsing/3.3.3/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/pyparsing/pyparsing/",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ece8c00a69cf01b45d0b1dedabb469c90d8caf996d4fda40f147627a122849a4"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "pyparsing - Classes and methods to define and execute parsing grammars",
      "releaseDate": "2026-09-20T20:59:04Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://pyparsing-docs.readthedocs.io/en/latest/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pyparsing/pyparsing.git"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/pyparsing@3.3.3"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:paul_mcguire:pyparsing:3.3.3:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-31-python-dateutil",
      "name": "python-dateutil",
      "versionInfo": "2.9.0.post0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Gustavo Niemeyer (gustavo@niemeyer.net)",
      "downloadLocation": "https://pypi.org/project/python-dateutil/2.9.0.post0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/dateutil/dateutil",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "python-dateutil declares Dual License which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Extensions to the standard Python datetime module",
      "releaseDate": "2024-03-01T18:36:18Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://dateutil.readthedocs.io/en/stable/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/dateutil/dateutil"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/python-dateutil@2.9.0.post0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:gustavo_niemeyer:python-dateutil:2.9.0.post0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-32-six",
      "name": "six",
      "versionInfo": "1.17.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Benjamin Peterson (benjamin@python.org)",
      "downloadLocation": "https://pypi.org/project/six/1.17.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/benjaminp/six",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Python 2 and 3 compatibility utilities",
      "releaseDate": "2024-12-04T17:35:26Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/six@1.17.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:benjamin_peterson:six:1.17.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-33-numba",
      "name": "numba",
      "versionInfo": "0.68.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/numba/0.68.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://numba.pydata.org",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "080bf1d0dc6adaa834400b6f92e5407de2a7dd80a665f71f74597e95508b2f1f"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "numba declares BSD which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "compiling Python code using LLVM",
      "releaseDate": "2026-09-30T15:04:34Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/numba@0.68.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-34-llvmlite",
      "name": "llvmlite",
      "versionInfo": "0.50.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/llvmlite/0.50.0/#files",
      "filesAnalyzed": false,
      "homepage": "http://llvmlite.readthedocs.io",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "211da1b088d566aafa1e444d546f64fc7f13b1af56ff0207a1705d88607be6ab"
        }
      ],
      "licenseConcluded": "BSD-2-Clause AND Apache-2.0 WITH LLVM-exception",
      "licenseDeclared": "BSD-2-Clause AND Apache-2.0 WITH LLVM-exception",
      "copyrightText": "NOASSERTION",
      "summary": "lightweight wrapper around basic LLVM functionality",
      "releaseDate": "2026-09-29T18:42:25Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/numba/llvmlite"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/llvmlite@0.50.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-35-pandas",
      "name": "pandas",
      "versionInfo": "3.0.6",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/pandas/3.0.6/#files",
      "filesAnalyzed": false,
      "homepage": "https://pandas.pydata.org",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "085e3786ae6b2e82b406266bce36690f72b9dc1421903ba9296b2981a9fcf586"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "pandas declares BSD 3-Clause License\n\n Copyright (c) 2008-2011, AQR Capital Management, LLC, Lambda Foundry, Inc. and PyData Development Team\n All rights reserved.\n\n Copyright (c) 2011-2026, Open source contributors.\n\n Redistribution and use in source and binary forms, with or without\n modification, are permitted provided that the following conditions are met:\n\n * Redistributions of source code must retain the above copyright notice, this\n   list of conditions and the following disclaimer.\n\n * Redistributions in binary form must reproduce the above copyright notice,\n   this list of conditions and the following disclaimer in the documentation\n   and/or other materials provided with the distribution.\n\n * Neither the name of the copyright holder nor the names of its\n   contributors may be used to endorse or promote products derived from\n   this software without specific prior written permission.\n\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\"\n AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE\n IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE\n FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\n DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\n SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER\n CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,\n OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\n OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Powerful data structures for data analysis, time series, and statistics",
      "releaseDate": "2026-09-17T23:20:20Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://pandas.pydata.org/docs/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pandas-dev/pandas"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/pandas@3.0.6"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-36-tzdata",
      "name": "tzdata",
      "versionInfo": "2026.5",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation (datetime-sig@python.org)",
      "downloadLocation": "https://pypi.org/project/tzdata/2026.5/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/python/tzdata",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b683bd1b6659ddcd810ff02ad09ba821d4bf1065072805063eb35c49617905ac"
        }
      ],
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "NOASSERTION",
      "summary": "Provider of IANA time zone data",
      "releaseDate": "2026-10-03T09:23:12Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/python/tzdata/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/python/tzdata"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://tzdata.python.org"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/tzdata@2026.5"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:python_software_foundation:tzdata:2026.5:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-37-plum-dispatch",
      "name": "plum-dispatch",
      "versionInfo": "2.10.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Wessel Bruinsma (wessel.p.bruinsma@gmail.com)",
      "downloadLocation": "https://pypi.org/project/plum-dispatch/2.10.1/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "57ec3a0ad2fd8973595b56048bac7cffe5b7c0f4650bf7b95d8758c48d8fbaaf"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Multiple dispatch in Python",
      "releaseDate": "2026-09-07T17:38:20Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/beartype/plum"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://beartype.github.io/plum"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/plum-dispatch@2.10.1"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:wessel_bruinsma:plum-dispatch:2.10.1:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-38-beartype",
      "name": "beartype",
      "versionInfo": "0.22.9",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Cecil Curry (leycec@gmail.com)",
      "downloadLocation": "https://pypi.org/project/beartype/0.22.9/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d16c9bbc61ea14637596c5f6fbff2ee99cbe3573e46a716401734ef50c3060c2"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "beartype declares MIT License\n\nCopyright (c) 2014-2025 Beartype authors.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE. which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Unbearably fast near-real-time pure-Python runtime-static type-checker.",
      "releaseDate": "2025-12-13T06:50:28Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://beartype.readthedocs.io"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/beartype/beartype"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://github.com/beartype/beartype/discussions"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/beartype/beartype/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "release-notes",
          "referenceLocator": "https://github.com/beartype/beartype/releases"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/beartype@0.22.9"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:cecil_curry:beartype:0.22.9:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-39-rich",
      "name": "rich",
      "versionInfo": "15.0.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Will McGugan (willmcgugan@gmail.com)",
      "downloadLocation": "https://pypi.org/project/rich/15.0.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/Textualize/rich",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "33bd4ef74232fb73fe9279a257718407f169c09b78a87ad3d296f548e27de0bb"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
      "releaseDate": "2026-04-12T08:24:02Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://rich.readthedocs.io/en/latest/"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/rich@15.0.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:will_mcgugan:rich:15.0.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-40-markdown-it-py",
      "name": "markdown-it-py",
      "versionInfo": "4.2.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Chris Sewell (chrisj_sewell@hotmail.com)",
      "downloadLocation": "https://pypi.org/project/markdown-it-py/4.2.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/executablebooks/markdown-it-py",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9f7ebbcd14fe59494226453aed97c1070d83f8d24b6fc3a3bcf9a38092641c4a"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "markdown-it-py declares MIT License which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Python port of markdown-it. Markdown parsing, done right!",
      "releaseDate": "2026-05-07T12:08:27Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://markdown-it-py.readthedocs.io"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/markdown-it-py@4.2.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:chris_sewell:markdown-it-py:4.2.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-41-mdurl",
      "name": "mdurl",
      "versionInfo": "0.1.2",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Taneli Hukkinen (hukkin@users.noreply.github.com)",
      "downloadLocation": "https://pypi.org/project/mdurl/0.1.2/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/executablebooks/mdurl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "84008a41e51615a49fc9966191ff91509e3c40b939176e643fd50a5c2196b8f8"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "mdurl declares MIT License which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Markdown URL utilities",
      "releaseDate": "2022-08-14T12:40:09Z",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/mdurl@0.1.2"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:taneli_hukkinen:mdurl:0.1.2:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-42-pygments",
      "name": "pygments",
      "versionInfo": "2.21.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Georg Brandl (georg@python.org)",
      "downloadLocation": "https://pypi.org/project/pygments/2.21.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://pygments.org",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2363c69b61c4a97c838da3b130dcd6468f4848992b21a82f2a63ec34377137d9"
        }
      ],
      "licenseConcluded": "BSD-2-Clause",
      "licenseDeclared": "BSD-2-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Pygments is a syntax highlighting package written in Python.",
      "releaseDate": "2026-08-17T08:02:44Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://pygments.org/docs"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pygments/pygments"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/pygments/pygments/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/pygments/pygments/blob/master/CHANGES"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/pygments@2.21.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:georg_brandl:pygments:2.21.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-43-typing-extensions",
      "name": "typing-extensions",
      "versionInfo": "4.16.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Guido van Jukka ukasz Michael (levkivskyi@gmail.com)",
      "downloadLocation": "https://pypi.org/project/typing-extensions/4.16.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/python/typing_extensions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8"
        }
      ],
      "licenseConcluded": "PSF-2.0",
      "licenseDeclared": "PSF-2.0",
      "copyrightText": "NOASSERTION",
      "summary": "Backported and Experimental Type Hints for Python 3.9+",
      "releaseDate": "2026-07-02T08:40:04Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/python/typing_extensions/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://typing-extensions.readthedocs.io/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://github.com/python/typing/discussions"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/python/typing_extensions"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/typing-extensions@4.16.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.16.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-44-pooch",
      "name": "pooch",
      "versionInfo": "1.9.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: The Pooch Developers (fatiandoaterra@protonmail.com)",
      "downloadLocation": "https://pypi.org/project/pooch/1.9.0/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f265597baa9f760d25ceb29d0beb8186c243d6607b0f60b83ecf14078dbc703b"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "A friend to fetch your data files",
      "releaseDate": "2026-01-30T19:15:08Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://www.fatiando.org/pooch"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://www.fatiando.org/pooch/latest/changes.html"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/fatiando/pooch/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/fatiando/pooch"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/pooch@1.9.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:the_pooch_developers:pooch:1.9.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-45-platformdirs",
      "name": "platformdirs",
      "versionInfo": "4.12.2",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/platformdirs/4.12.2/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/tox-dev/platformdirs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "29dbf06d96c500bc6bdbce75fb0a14d63279c93b1842f97e72a135b33e856983"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "A small Python package for determining appropriate platform-specific dirs, e.g. a `user data dir`.",
      "releaseDate": "2026-09-29T18:27:54Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://platformdirs.readthedocs.io/en/latest/changelog.html"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://platformdirs.readthedocs.io"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/tox-dev/platformdirs"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/tox-dev/platformdirs/issues"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/platformdirs@4.12.2"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-46-requests",
      "name": "requests",
      "versionInfo": "2.34.2",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Kenneth Reitz (me@kennethreitz.org)",
      "downloadLocation": "https://pypi.org/project/requests/2.34.2/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0"
        }
      ],
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "NOASSERTION",
      "summary": "Python HTTP for Humans.",
      "releaseDate": "2026-05-14T19:25:26Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://requests.readthedocs.io"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/psf/requests"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/requests@2.34.2"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:kenneth_reitz:requests:2.34.2:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-47-charset-normalizer",
      "name": "charset-normalizer",
      "versionInfo": "3.5.2",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Ahmed R. (tahri.ahmed@proton.me)",
      "downloadLocation": "https://pypi.org/project/charset-normalizer/3.5.2/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "195c26fb65950f8fce54e26349852b7bdd7c5f120aeefbcc440b8a20faaed4a3"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.",
      "releaseDate": "2026-09-30T04:34:42Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://charset-normalizer.readthedocs.io/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/jawah/charset_normalizer"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/jawah/charset_normalizer/issues"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/charset-normalizer@3.5.2"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:ahmed_r.:charset-normalizer:3.5.2:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-48-idna",
      "name": "idna",
      "versionInfo": "3.20",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Kim Davies (kim+pypi@gumleaf.org)",
      "downloadLocation": "https://pypi.org/project/idna/3.20/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ab7ae7122974553370f0bdb919e1a960b2cd1bc1ef0276416d896db81c14582c"
        }
      ],
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "summary": "Internationalized Domain Names in Applications (IDNA)",
      "releaseDate": "2026-09-17T14:11:03Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/kjd/idna/blob/master/HISTORY.md"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/kjd/idna/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/kjd/idna"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/idna@3.20"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:kim_davies:idna:3.20:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-49-urllib3",
      "name": "urllib3",
      "versionInfo": "2.8.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Andrey Petrov (andrey.petrov@shazow.net)",
      "downloadLocation": "https://pypi.org/project/urllib3/2.8.0/#files",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0cf3cae568d36aa9576b28dfb35f11328f1cb974ca7647d9475ebb86c75ac6e3"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "HTTP library with thread-safe connection pooling, file post, and more.",
      "releaseDate": "2026-09-15T19:29:34Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/urllib3/urllib3/blob/main/CHANGES.rst"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://urllib3.readthedocs.io"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/urllib3/urllib3"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/urllib3/urllib3/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://urllib3.readthedocs.io/en/latest/security.html"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/urllib3@2.8.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:andrey_petrov:urllib3:2.8.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-50-pydantic",
      "name": "pydantic",
      "versionInfo": "2.13.5",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Samuel Colvin Eric Jolibois Hasan Ramezani Adrian Garcia Badaracco Terrence Dorsey David Montague Serge Matveenko Marcelo Trylesinski Sydney Runkle David Hewitt Alex Hall Victorien Plot (contact@vctrn.dev)",
      "downloadLocation": "https://pypi.org/project/pydantic/2.13.5/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/pydantic/pydantic",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "346a034f080da3755d8e9cb5e00e8b07de1d39e4f6e2c87d8ab7cafa0b269a73"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Data validation using Python type hints",
      "releaseDate": "2026-08-28T14:03:59Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://docs.pydantic.dev"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pydantic/pydantic"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://docs.pydantic.dev/latest/changelog/"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/pydantic@2.13.5"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:samuel_colvin_eric_jolibois_hasan_ramezani_adrian_garcia_badaracco_terrence_dorsey_david_montague_serge_matveenko_marcelo_trylesinski_sydney_runkle_david_hewitt_alex_hall_victorien_plot:pydantic:2.13.5:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-51-annotated-types",
      "name": "annotated-types",
      "versionInfo": "0.8.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Adrian Garcia Badaracco Samuel Colvin Zac Dodds (zac@zhd.dev)",
      "downloadLocation": "https://pypi.org/project/annotated-types/0.8.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/annotated-types/annotated-types",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f072f4d804ea359e4eaf198b1af7a8b0943881a87f31bb764f8bf219bb9419e0"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Reusable constraint types to use with typing.Annotated",
      "releaseDate": "2026-07-23T20:16:12Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/annotated-types/annotated-types"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/annotated-types/annotated-types/releases"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/annotated-types@0.8.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:adrian_garcia_badaracco_samuel_colvin_zac_dodds:annotated-types:0.8.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-52-pydantic-core",
      "name": "pydantic-core",
      "versionInfo": "2.46.5",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Samuel Colvin Adrian Garcia Badaracco David Montague David Hewitt Sydney Runkle Victorien Plot (contact@vctrn.dev)",
      "downloadLocation": "https://pypi.org/project/pydantic-core/2.46.5/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/pydantic",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "657b40d6240c0a7b6a64b30f22d1e3aa631c7e846c621b0c0f6d1d75e2e15ea6"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Core functionality for Pydantic validation and serialization",
      "releaseDate": "2026-08-28T09:57:35Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://github.com/sponsors/samuelcolvin"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pydantic/pydantic/tree/main/pydantic-core"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/pydantic-core@2.46.5"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:samuel_colvin_adrian_garcia_badaracco_david_montague_david_hewitt_sydney_runkle_victorien_plot:pydantic-core:2.46.5:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-53-typing-inspection",
      "name": "typing-inspection",
      "versionInfo": "0.4.4",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Victorien Plot (contact@vctrn.dev)",
      "downloadLocation": "https://pypi.org/project/typing-inspection/0.4.4/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/pydantic/typing-inspection",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "65b8397ba37ccbce054456aaccddfc91e6e3083c92824df348d96ca832f3f147"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Runtime typing introspection tools",
      "releaseDate": "2026-08-12T12:37:24Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://pydantic.github.io/typing-inspection/dev/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pydantic/typing-inspection"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/typing-inspection@0.4.4"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:victorien_plot:typing-inspection:0.4.4:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-54-scipy",
      "name": "scipy",
      "versionInfo": "1.18.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/scipy/1.18.1/#files",
      "filesAnalyzed": false,
      "homepage": "https://scipy.org/",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "457fd7a2a8edeb044ab6ffbc0aa03ff6cd18491356e5e0c834d76ce621b916d1"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "scipy declares Copyright (c) 2001-2002 Enthought, Inc. 2003, SciPy Developers.\n All rights reserved.\n\n Redistribution and use in source and binary forms, with or without\n modification, are permitted provided that the following conditions\n are met:\n\n 1. Redistributions of source code must retain the above copyright\n    notice, this list of conditions and the following disclaimer.\n\n 2. Redistributions in binary form must reproduce the above\n    copyright notice, this list of conditions and the following\n    disclaimer in the documentation and/or other materials provided\n    with the distribution.\n\n 3. Neither the name of the copyright holder nor the names of its\n    contributors may be used to endorse or promote products derived\n    from this software without specific prior written permission.\n\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\n LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\n A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\n OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\n SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\n LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\n DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\n THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\n OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "Fundamental algorithms for scientific computing in Python",
      "releaseDate": "2026-08-21T23:23:44Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://docs.scipy.org/doc/scipy/"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/scipy/scipy"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://github.com/scipy/scipy/releases"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/scipy/scipy/issues"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/scipy@1.18.1"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-55-tomli-w",
      "name": "tomli-w",
      "versionInfo": "1.2.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Taneli Hukkinen (hukkin@users.noreply.github.com)",
      "downloadLocation": "https://pypi.org/project/tomli-w/1.2.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/hukkin/tomli-w",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "188306098d013b691fcadc011abd66727d3c414c571bb01b1a174ba8c983cf90"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "NOASSERTION",
      "licenseComments": "tomli-w declares MIT License which is not currently a valid SPDX License identifier or expression.",
      "copyrightText": "NOASSERTION",
      "summary": "A lil' TOML writer",
      "releaseDate": "2025-01-15T12:07:22Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/hukkin/tomli-w/blob/master/CHANGELOG.md"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/tomli-w@1.2.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:taneli_hukkinen:tomli-w:1.2.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-56-tomli",
      "name": "tomli",
      "versionInfo": "2.4.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: Taneli Hukkinen (hukkin@users.noreply.github.com)",
      "downloadLocation": "https://pypi.org/project/tomli/2.4.1/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/hukkin/tomli",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f8f0fc26ec2cc2b965b7a3b87cd19c5c6b8c5e5f436b984e85f486d652285c30"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "A lil' TOML parser",
      "releaseDate": "2026-03-25T20:21:10Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://github.com/hukkin/tomli/blob/master/CHANGELOG.md"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/tomli@2.4.1"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:taneli_hukkinen:tomli:2.4.1:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-57-tqdm",
      "name": "tqdm",
      "versionInfo": "4.70.1",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/tqdm/4.70.1/#files",
      "filesAnalyzed": false,
      "homepage": "https://tqdm.github.io",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c293e525e6fef9c20e8728fd4612df02a0aa31bb5fe91ecd93e123b1b7bffa73"
        }
      ],
      "licenseConcluded": "MPL-2.0 AND MIT",
      "licenseDeclared": "MPL-2.0 AND MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Fast, Extensible Progress Meter",
      "releaseDate": "2026-09-11T07:25:14Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/tqdm/tqdm"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "log",
          "referenceLocator": "https://tqdm.github.io/releases"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://github.com/tqdm/tqdm/wiki"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/tqdm@4.70.1"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-58-xarray",
      "name": "xarray",
      "versionInfo": "2026.9.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Person: xarray Developers (xarray@googlegroups.com)",
      "downloadLocation": "https://pypi.org/project/xarray/2026.9.0/#files",
      "filesAnalyzed": false,
      "homepage": "https://xarray.dev/",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe349fa871628b1a0a5217af3fe1283a2862d5485156e6eda354fffb81c3bb7c"
        }
      ],
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "copyrightText": "NOASSERTION",
      "summary": "N-D labeled arrays and datasets in Python",
      "releaseDate": "2026-09-29T23:06:23Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "documentation",
          "referenceLocator": "https://docs.xarray.dev"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "other",
          "referenceLocator": "https://www.youtube.com/watch?v=X0pAhJgySxk"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/pydata/xarray/issues"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/pydata/xarray"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/xarray@2026.9.0"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:xarray_developers:xarray:2026.9.0:*:*:*:*:*:*:*"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-59-xugrid",
      "name": "xugrid",
      "versionInfo": "0.15.3",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "NOASSERTION",
      "downloadLocation": "https://pypi.org/project/xugrid/0.15.3/#files",
      "filesAnalyzed": false,
      "homepage": "https://github.com/deltares/xugrid",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6afb89f9ac72ae2d3d0fde476d366e8eb112f448a1bc2313a5189ebff06074e1"
        }
      ],
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "summary": "Xarray extension for unstructured grids",
      "releaseDate": "2026-06-19T14:47:26Z",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "vcs",
          "referenceLocator": "https://github.com/deltares/xugrid"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "issue-tracker",
          "referenceLocator": "https://github.com/deltares/xugrid/issues"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:pypi/xugrid@0.15.3"
        }
      ]
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relatedSpdxElement": "SPDXRef-1-imod",
      "relationshipType": "DESCRIBES"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-2-affine",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-2-affine",
      "relatedSpdxElement": "SPDXRef-3-attrs",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-4-certifi",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-5-cftime",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-5-cftime",
      "relatedSpdxElement": "SPDXRef-6-numpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-7-dask",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-7-dask",
      "relatedSpdxElement": "SPDXRef-8-click",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-7-dask",
      "relatedSpdxElement": "SPDXRef-9-cloudpickle",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-7-dask",
      "relatedSpdxElement": "SPDXRef-10-fsspec",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-7-dask",
      "relatedSpdxElement": "SPDXRef-11-packaging",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-7-dask",
      "relatedSpdxElement": "SPDXRef-12-partd",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-12-partd",
      "relatedSpdxElement": "SPDXRef-13-locket",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-12-partd",
      "relatedSpdxElement": "SPDXRef-14-toolz",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-7-dask",
      "relatedSpdxElement": "SPDXRef-15-pyyaml",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-7-dask",
      "relatedSpdxElement": "SPDXRef-14-toolz",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-7-dask",
      "relatedSpdxElement": "SPDXRef-16-importlib-metadata",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-18-filelock",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-19-jinja2",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-19-jinja2",
      "relatedSpdxElement": "SPDXRef-20-markupsafe",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-21-loguru",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-21-loguru",
      "relatedSpdxElement": "SPDXRef-22-colorama",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-21-loguru",
      "relatedSpdxElement": "SPDXRef-23-win32-setctime",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-24-matplotlib",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-24-matplotlib",
      "relatedSpdxElement": "SPDXRef-25-contourpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-25-contourpy",
      "relatedSpdxElement": "SPDXRef-6-numpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-24-matplotlib",
      "relatedSpdxElement": "SPDXRef-26-cycler",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-24-matplotlib",
      "relatedSpdxElement": "SPDXRef-27-fonttools",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-24-matplotlib",
      "relatedSpdxElement": "SPDXRef-28-kiwisolver",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-24-matplotlib",
      "relatedSpdxElement": "SPDXRef-6-numpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-24-matplotlib",
      "relatedSpdxElement": "SPDXRef-11-packaging",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-24-matplotlib",
      "relatedSpdxElement": "SPDXRef-29-pillow",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-24-matplotlib",
      "relatedSpdxElement": "SPDXRef-30-pyparsing",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-24-matplotlib",
      "relatedSpdxElement": "SPDXRef-31-python-dateutil",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-31-python-dateutil",
      "relatedSpdxElement": "SPDXRef-32-six",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-33-numba",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-33-numba",
      "relatedSpdxElement": "SPDXRef-34-llvmlite",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-34-llvmlite",
      "relatedSpdxElement": "SPDXRef-File-1-llvmlite.dll",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-33-numba",
      "relatedSpdxElement": "SPDXRef-6-numpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-6-numpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-35-pandas",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-35-pandas",
      "relatedSpdxElement": "SPDXRef-6-numpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-35-pandas",
      "relatedSpdxElement": "SPDXRef-31-python-dateutil",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-35-pandas",
      "relatedSpdxElement": "SPDXRef-36-tzdata",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-37-plum-dispatch",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-37-plum-dispatch",
      "relatedSpdxElement": "SPDXRef-38-beartype",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-37-plum-dispatch",
      "relatedSpdxElement": "SPDXRef-39-rich",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-39-rich",
      "relatedSpdxElement": "SPDXRef-40-markdown-it-py",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-40-markdown-it-py",
      "relatedSpdxElement": "SPDXRef-41-mdurl",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-39-rich",
      "relatedSpdxElement": "SPDXRef-42-pygments",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-37-plum-dispatch",
      "relatedSpdxElement": "SPDXRef-43-typing-extensions",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-44-pooch",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-44-pooch",
      "relatedSpdxElement": "SPDXRef-45-platformdirs",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-44-pooch",
      "relatedSpdxElement": "SPDXRef-11-packaging",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-44-pooch",
      "relatedSpdxElement": "SPDXRef-46-requests",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-46-requests",
      "relatedSpdxElement": "SPDXRef-47-charset-normalizer",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-46-requests",
      "relatedSpdxElement": "SPDXRef-48-idna",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-46-requests",
      "relatedSpdxElement": "SPDXRef-49-urllib3",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-46-requests",
      "relatedSpdxElement": "SPDXRef-4-certifi",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-50-pydantic",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-50-pydantic",
      "relatedSpdxElement": "SPDXRef-51-annotated-types",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-50-pydantic",
      "relatedSpdxElement": "SPDXRef-52-pydantic-core",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-52-pydantic-core",
      "relatedSpdxElement": "SPDXRef-43-typing-extensions",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-50-pydantic",
      "relatedSpdxElement": "SPDXRef-43-typing-extensions",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-50-pydantic",
      "relatedSpdxElement": "SPDXRef-53-typing-inspection",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-53-typing-inspection",
      "relatedSpdxElement": "SPDXRef-43-typing-extensions",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-54-scipy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-54-scipy",
      "relatedSpdxElement": "SPDXRef-6-numpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-55-tomli-w",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-56-tomli",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-14-toolz",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-57-tqdm",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-57-tqdm",
      "relatedSpdxElement": "SPDXRef-22-colorama",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-58-xarray",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-58-xarray",
      "relatedSpdxElement": "SPDXRef-6-numpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-58-xarray",
      "relatedSpdxElement": "SPDXRef-11-packaging",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-58-xarray",
      "relatedSpdxElement": "SPDXRef-35-pandas",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-1-imod",
      "relatedSpdxElement": "SPDXRef-59-xugrid",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-59-xugrid",
      "relatedSpdxElement": "SPDXRef-6-numpy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-59-xugrid",
      "relatedSpdxElement": "SPDXRef-35-pandas",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-59-xugrid",
      "relatedSpdxElement": "SPDXRef-44-pooch",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-59-xugrid",
      "relatedSpdxElement": "SPDXRef-54-scipy",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-59-xugrid",
      "relatedSpdxElement": "SPDXRef-58-xarray",
      "relationshipType": "DEPENDS_ON"
    }
  ]
}