{
  "SPDXID": "SPDXRef-DOCUMENT",
  "creationInfo": {
    "created": "2026-04-07T16:51:00Z",
    "creators": [
      "Person: Python Release Managers",
      "Tool: ReleaseTools-2133a4a21a9fe2acc68a130eaf615deae3c6080c"
    ],
    "licenseListVersion": "3.22"
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://www.python.org/ftp/python/3.14.4/python-3.14.4.exe.spdx.json",
  "files": [],
  "name": "CPython SBOM",
  "packages": [
    {
      "SPDXID": "SPDXRef-PACKAGE-bzip2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ab8d1b0cc087c20d4c32c0e4fcf7d0c733a95da12cedc6d63b3f0a9af07427e2"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/bzip2-1.0.8.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:bzip:bzip2:1.0.8:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "bzip2",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.0.8"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-cachecontrol",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b7ac014ff72ee199b5f8af1de29d60239954f223e948196fa3d84adaffc71d2b"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/ef/79/c45f2d53efe6ada1110cf6f9fca095e4ff47a0454444aefdde6ac4789179/cachecontrol-0.14.4-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/cachecontrol@0.14.4",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "cachecontrol",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.14.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-certifi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9943707519e4add1115f44c2bc244f782c0249876bf51b6599fee1ffbedd685c"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/e6/ad/3cc14f097111b4de0040c83a525973216457bbeeb63739ef1ed275c1c021/certifi-2026.1.4-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/certifi@2026.1.4",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "certifi",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2026.1.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-cpython",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "67bef323d951363d06aa73cbbb8a372303c96912b512778ce48fbf9a521cbbfe"
        }
      ],
      "downloadLocation": "https://www.python.org/ftp/python/3.14.4/python-3.14.4.exe",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:python:python:3.14.4:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "PSF-2.0",
      "name": "CPython",
      "originator": "Organization: Python Software Foundation",
      "packageFileName": "python-3.14.4.exe",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.14.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-dependency-groups",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "51aeaa0dfad72430fcfb7bcdbefbd75f3792e5919563077f30bc0d73f4493030"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/99/c7/d1ec24fb280caa5a79b6b950db565dab30210a66259d17d5bb2b3a9f878d/dependency_groups-1.3.1-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/dependency-groups@1.3.1",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "dependency-groups",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.3.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-distlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9659f7d87e46584a30b5780e43ac7a2143098441670ff0a49d5f9034c54a6c16"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/33/6b/e0547afaf41bf2c42e52430072fa5658766e3d65bd4b03a563d1b6336f57/distlib-0.4.0-py2.py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/distlib@0.4.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "distlib",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.4.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-distro",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7bffd925d65168f85027d8da9af6bddab658135b840670a223589bc0c8ef02b2"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/12/b3/231ffd4ab1fc9d679809f356cebee130ac7daa00d6d6f3206dd4fd137e9e/distro-1.9.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/distro@1.9.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "distro",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.9.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-expat-2.7.5",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9931f9860d18e6cf72d183eb8f309bfb96196c00e1d40caa978e95bc9aa978b6"
        }
      ],
      "downloadLocation": "https://github.com/libexpat/libexpat/releases/download/R_2_7_5/expat-2.7.5.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.7.5:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "expat",
      "originator": "Organization: Expat development team",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.7.5"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-hacl-star-8ba599b2f6c9701b3dc961db895b0856a2210f76",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "61e48893f37cb2280d106cefacf6fb5afe84edf625fec39572d0ee94e1018f26"
        }
      ],
      "downloadLocation": "https://github.com/hacl-star/hacl-star/archive/8ba599b2f6c9701b3dc961db895b0856a2210f76.zip",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:hacl-star:hacl-star:8ba599b2f6c9701b3dc961db895b0856a2210f76:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "hacl-star",
      "originator": "Organization: HACL* Developers",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "8ba599b2f6c9701b3dc961db895b0856a2210f76"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-idna",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "771a87f49d9defaf64091e6e6fe9c18d4833f140bd19464795bc32d966ca37ea"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/0e/61/66938bbb5fc52dbdf84594873d5b51fb1f7c7794e9c0f5bd885f30bc507b/idna-3.11-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/idna@3.11",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "idna",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.11"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-libffi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9d802681adfea27d84cae0487a785fb9caa925bdad44c401b364c59ab2b8edda"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/libffi-3.4.4.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:libffi_project:libffi:3.4.4:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "libffi",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.4.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-macholib-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c76f268f5054024e962f2515a0e522baf85313064f6740d80375afc850787a38"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/ec/57/f0a712efc3ed982cf4038a3cee172057303b9be914c32c93b2fbec27f785/macholib-1.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/macholib@1.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "macholib",
      "originator": "Person: Ronald Oussoren (ronaldoussoren@mac.com)",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-mpdecimal",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "338fac3fb8cdd60f406b6326431338756f58a8af94229ffd9bf1e7c2b1ad71ca"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/mpdecimal-4.0.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:4.0.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "mpdecimal",
      "originator": "Organization: bytereef.org",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "4.0.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-mpdecimal-2.5.1",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9f9cd4c041f99b5c49ffb7b59d9f12d95b683d88585608aa56a6307667b2b21f"
        }
      ],
      "downloadLocation": "https://www.bytereef.org/software/mpdecimal/releases/mpdecimal-2.5.1.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:2.5.1:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "mpdecimal",
      "originator": "Organization: bytereef.org",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.5.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-msgpack",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0051fffef5a37ca2cd16978ae4f0aef92f164df86823871b5162812bebecd8e2"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/f5/a2/3b68a9e769db68668b25c6108444a35f9bd163bb848c0650d516761a59c0/msgpack-1.1.2-cp310-cp310-macosx_10_9_x86_64.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/msgpack@1.1.2",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "msgpack",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.1.2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-openssl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c6ea8a5423f3966923060db2089f869017dfb10bcf2037394146e7a74caec0a8"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/openssl-3.0.19.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:openssl:openssl:3.0.19:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "openssl",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.0.19"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-packaging",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b36f1fef9334a5588b4166f8bcd26a14e521f2b55e6b9de3aaa80d3ff7a37529"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/b7/b9/c538f279a4e237a006a2c98387d081e9eb060d203d8ed34467cc0f0b9b53/packaging-26.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/packaging@26.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "packaging",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "26.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-pip",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bdb1b08f4274833d62c1aa29e20907365a2ceb950410df15fc9521bad440122b"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/de/f0/c81e05b613866b76d2d1066490adf1a3dbc4ee9d9c839961c3fc8a6997af/pip-26.0.1-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/pip@26.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:pypa:pip:26.0.1:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "pip",
      "originator": "Organization: Python Packaging Authority",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "26.0.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-platformdirs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d03afa3963c806a9bed9d5125c8f4cb2fdaf74a55ab60e5d59b3fde758104d31"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/cb/28/3bfe2fa5a7b9c46fe7e13c97bda14c895fb10fa2ebf1d0abb90e0cea7ee1/platformdirs-4.5.1-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/platformdirs@4.5.1",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "platformdirs",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "4.5.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-pygments",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "86540386c03d588bb81d44bc3928634ff26449851e99741617ecb9037ee5ec0b"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/c7/21/705964c7812476f378728bdf590ca4b771ec72385c533964653c68e86bdc/pygments-2.19.2-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/pygments@2.19.2",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "pygments",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.19.2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-pyproject-hooks",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9e5c6bfa8dcc30091c74b0cf803c81fdd29d94f01992a7707bc97babb1141913"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/bd/24/12818598c362d7f300f18e74db45963dbcb85150324092410c8b49405e42/pyproject_hooks-1.2.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/pyproject-hooks@1.2.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "pyproject-hooks",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.2.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-requests",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/1e/db/4254e3eabe8020b458f1a747140d32277ec7a271daf1d235b70dc0b4e6e3/requests-2.32.5-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/requests@2.32.5",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "requests",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.32.5"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-resolvelib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fb06b66c8da04172d9e72a21d7d06186d8919e32ae5ab5cdf5b9d920be805ac2"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/e2/23/c941a0d0353681ca138489983c4309e0f5095dfd902e1357004f2357ddf2/resolvelib-1.2.1-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/resolvelib@1.2.1",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "resolvelib",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.2.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-rich",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "76bc51fe2e57d2b1be1f96c524b890b816e334ab4c1e45888799bfaab0021edd"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/25/7a/b0178788f8dc6cafce37a212c99565fa1fe7872c70c6c9c1e1a372d9d88f/rich-14.2.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/rich@14.2.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "rich",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "14.2.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-setuptools",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe384da74336c398e0d956d1cae0669bc02eed936cdb1d49b57de1990dc11ffc"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/ef/15/88e46eb9387e905704b69849618e699dc2f54407d8953cc4ec4b8b46528d/setuptools-70.3.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/setuptools@70.3.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "setuptools",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "70.3.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-sqlite",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fb5ab81f27612b0a7b4861ba655906c76dc85ee969e7a4905d2075aff931e8d0"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/sqlite-3.50.4.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:sqlite:sqlite:3.50.4.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "sqlite",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.50.4.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tcl-core",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4c23f0dd3efcbe6f3a22c503a68d147617bb30c4f5290f1eb3eaacf0b460440b"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/tcl-core-8.6.15.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.15.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tcl-core",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "8.6.15.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tk",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0ae56d39bca92865f338529557a1e56d110594184b6dc5a91339c5675751e264"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/tk-8.6.15.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:8.6.15.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tk",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "8.6.15.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tomli",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "88bd15eb972f3664f5ed4b57c1634a97153b4bac4479dcb6a495f41921eb7f45"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/b3/2e/299f62b401438d5fe1624119c723f5d877acc86a4c2492da405626665f12/tomli-2.3.0-cp311-cp311-macosx_10_9_x86_64.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/tomli@2.3.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tomli",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.3.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tomli-w",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "188306098d013b691fcadc011abd66727d3c414c571bb01b1a174ba8c983cf90"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/c7/18/c86eb8e0202e32dd3df50d43d7ff9854f8e0603945ff398974c1d91ac1ef/tomli_w-1.2.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/tomli-w@1.2.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tomli-w",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.2.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-truststore",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "adaeaecf1cbb5f4de3b1959b42d41f6fab57b2b1666adb59e89cb0b53361d981"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/19/97/56608b2249fe206a67cd573bc93cd9896e1efb9e98bce9c163bcdc704b88/truststore-0.10.4-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/truststore@0.10.4",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "truststore",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.10.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-urllib3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0ed14ccfbf1c30a9072c7ca157e4319b70d65f623e91e7b32fadb2853431016e"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/33/cf/8435d5a7159e2a9c83a95896ed596f68cf798005fe107cc655b5c5c14704/urllib3-1.26.20-py2.py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/urllib3@1.26.20",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "urllib3",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.26.20"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-xz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a15c168e39e87d750c3dc766edc7f19bdda57dacf01e509678467eace91ad282"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/xz-5.2.5.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:tukaani:xz:5.2.5:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "xz",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "5.2.5"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-zlib-ng",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "00bbd88709bc416cb96160ab61d3e1c8f76e106799af7328d0fe434dc7dd5004"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/zlib-ng-2.2.4.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:zlib-ng:zlib-ng:2.2.4:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "zlib-ng",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.2.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-zstd",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f24b52470d12f466e9fa4fcc94e6c530625ada51d7b36de7fdc6ed7e6f499c8e"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/zstd-1.5.7.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:facebook:zstandard:1.5.7:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "zstd",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.5.7"
    }
  ],
  "relationships": [
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-bzip2",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-cachecontrol",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-certifi",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-cpython",
      "relationshipType": "DESCRIBES",
      "spdxElementId": "SPDXRef-DOCUMENT"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-dependency-groups",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-distlib",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-distro",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-expat-2.7.5",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-hacl-star-8ba599b2f6c9701b3dc961db895b0856a2210f76",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-idna",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-libffi",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-macholib-1.0",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal-2.5.1",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-msgpack",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-openssl",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-packaging",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-pip",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-platformdirs",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-pygments",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-pyproject-hooks",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-requests",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-resolvelib",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-rich",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-setuptools",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-sqlite",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tcl-core",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tk",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tomli",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tomli-w",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-truststore",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-urllib3",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-xz",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-zlib-ng",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-zstd",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    }
  ],
  "spdxVersion": "SPDX-2.3"
}