packages.sbom.json

{
 "SPDXID": "SPDXRef-DOCUMENT",
 "name": ".",
 "spdxVersion": "SPDX-2.2",
 "creationInfo": {
  "created": "2022-06-20T15:36:54.808657195Z",
  "creators": [
   "Organization: Anchore, Inc",
   "Tool: syft-0.46.2"
  ],
  "licenseListVersion": "3.17"
 },
 "dataLicense": "CC0-1.0",
 "documentNamespace": "https://anchore.com/syft/dir/f0402303-ef62-4eee-b9e4-4dfc5593d648",
 "packages": [
  {
   "SPDXID": "SPDXRef-de075d1a84a8113f",
   "name": "phar-io/version",
   "licenseConcluded": "NONE",
   "downloadLocation": "NOASSERTION",
   "externalRefs": [
    {
     "referenceCategory": "SECURITY",
     "referenceLocator": "cpe:2.3:a:phar-io\\/version:phar-io\\/version:3.0.1:*:*:*:*:*:*:*",
     "referenceType": "cpe23Type"
    },
    {
     "referenceCategory": "SECURITY",
     "referenceLocator": "cpe:2.3:a:phar-io\\/version:phar_io\\/version:3.0.1:*:*:*:*:*:*:*",
     "referenceType": "cpe23Type"
    },
    {
     "referenceCategory": "SECURITY",
     "referenceLocator": "cpe:2.3:a:phar_io\\/version:phar-io\\/version:3.0.1:*:*:*:*:*:*:*",
     "referenceType": "cpe23Type"
    },
    {
     "referenceCategory": "SECURITY",
     "referenceLocator": "cpe:2.3:a:phar_io\\/version:phar_io\\/version:3.0.1:*:*:*:*:*:*:*",
     "referenceType": "cpe23Type"
    },
    {
     "referenceCategory": "SECURITY",
     "referenceLocator": "cpe:2.3:a:phar:phar-io\\/version:3.0.1:*:*:*:*:*:*:*",
     "referenceType": "cpe23Type"
    },
    {
     "referenceCategory": "SECURITY",
     "referenceLocator": "cpe:2.3:a:phar:phar_io\\/version:3.0.1:*:*:*:*:*:*:*",
     "referenceType": "cpe23Type"
    },
    {
     "referenceCategory": "PACKAGE_MANAGER",
     "referenceLocator": "pkg:composer/phar-io/version@3.0.1",
     "referenceType": "purl"
    }
   ],
   "filesAnalyzed": false,
   "licenseDeclared": "NONE",
   "sourceInfo": "acquired package info from PHP composer manifest: vendor/phar-io/manifest/composer.lock",
   "versionInfo": "3.0.1"
  }
 ]
}