{
  "SPDXID": "SPDXRef-DOCUMENT",
  "creationInfo": {
    "created": "2026-11-10T18:17:39Z",
    "creators": [
      "Person: Python Release Managers",
      "Tool: ReleaseTools-73225bc4bc7b0476820c5d6ed5dce616cbd415b7"
    ],
    "licenseListVersion": "3.22"
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://www.python.org/ftp/python/3.16.0/python-3.16.0a2-arm64.zip.spdx.json",
  "files": [],
  "name": "CPython SBOM",
  "packages": [
    {
      "SPDXID": "SPDXRef-PACKAGE-bzip2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ab8d1b0cc087c20d4c32c0e4fcf7d0c733a95da12cedc6d63b3f0a9af07427e2"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/bzip2-1.0.8.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:bzip:bzip2:1.0.8:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "bzip2",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.0.8"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-cachecontrol",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b7ac014ff72ee199b5f8af1de29d60239954f223e948196fa3d84adaffc71d2b"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/ef/79/c45f2d53efe6ada1110cf6f9fca095e4ff47a0454444aefdde6ac4789179/cachecontrol-0.14.4-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/cachecontrol@0.14.4",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "cachecontrol",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.14.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-certifi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e9b54de76e530bb6cf0ccd036787103acb58fd42ba930ea8bf948ddbaa2f61d1"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/32/d1/a3652fe2c19134d0d15922177821d863cbd7e842d53a21bbe7e8e3a1b5ac/certifi-2026.10.23-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/certifi@2026.10.23",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "certifi",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2026.10.23"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-cpython",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0fdfe1b786f77cc0772e0189fc462392d4a91c3414ade0ea7be9dd897fd5a4b5"
        }
      ],
      "downloadLocation": "https://www.python.org/ftp/python/3.16.0/python-3.16.0a2-arm64.zip",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:python:python:3.16.0a2:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "PSF-2.0",
      "name": "CPython",
      "originator": "Organization: Python Software Foundation",
      "packageFileName": "python-3.16.0a2-arm64.zip",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.16.0a2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-distlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cf09d55b1e85a89576b036aeb71550bfd68320f3f21761ca329eadadad918638"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/c1/2b/238f02a4927fa2e27aa995371d240a468b52e42eae44a678434aff736b38/distlib-0.4.4-py2.py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/distlib@0.4.4",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "distlib",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.4.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-distro",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7bffd925d65168f85027d8da9af6bddab658135b840670a223589bc0c8ef02b2"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/12/b3/231ffd4ab1fc9d679809f356cebee130ac7daa00d6d6f3206dd4fd137e9e/distro-1.9.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/distro@1.9.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "distro",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.9.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-expat-2.10.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5466a341f9c692ef7a958a6881311be597f8e1ce345984cf78414f54793dea4c"
        }
      ],
      "downloadLocation": "https://github.com/libexpat/libexpat/releases/download/R_2_10_0/expat-2.10.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:libexpat_project:libexpat:2.10.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "expat",
      "originator": "Organization: Expat development team",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.10.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-hacl-star-504c2987452f87fe44bce9b9f12e19d6e051761f",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d6db56a5d061dcc0890eabdbb5f58a9fa6c606d9f2fbbe9d626925b870ffadfb"
        }
      ],
      "downloadLocation": "https://github.com/hacl-star/hacl-star/archive/504c2987452f87fe44bce9b9f12e19d6e051761f.zip",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:hacl-star:hacl-star:504c2987452f87fe44bce9b9f12e19d6e051761f:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "hacl-star",
      "originator": "Organization: HACL* Developers",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "504c2987452f87fe44bce9b9f12e19d6e051761f"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-idna",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ab7ae7122974553370f0bdb919e1a960b2cd1bc1ef0276416d896db81c14582c"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/58/a2/bb081bab032533a855d44de1d56f8e8426114ff1ba5d1f07a438a0a654f8/idna-3.20-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/idna@3.20",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "idna",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.20"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-libffi",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9d802681adfea27d84cae0487a785fb9caa925bdad44c401b364c59ab2b8edda"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/libffi-3.4.4.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:libffi_project:libffi:3.4.4:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "libffi",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.4.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-macholib-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c76f268f5054024e962f2515a0e522baf85313064f6740d80375afc850787a38"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/ec/57/f0a712efc3ed982cf4038a3cee172057303b9be914c32c93b2fbec27f785/macholib-1.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/macholib@1.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "macholib",
      "originator": "Person: Ronald Oussoren (ronaldoussoren@mac.com)",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-mpdecimal",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "338fac3fb8cdd60f406b6326431338756f58a8af94229ffd9bf1e7c2b1ad71ca"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/mpdecimal-4.0.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:bytereef:mpdecimal:4.0.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "mpdecimal",
      "originator": "Organization: bytereef.org",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "4.0.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-msgpack",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2a4e141a9c91d1502cf98f9ca9f87af222c7857e2bfa49c1d81343157c38a28e"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/a3/d0/68889d2fcead0e81470cf28346a0fce80c451a3e7df9d74b0837f517027e/msgpack-1.2.4-cp310-cp310-macosx_10_9_x86_64.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/msgpack@1.2.4",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "msgpack",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.2.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-openssl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d6cf0d9a651f25fe506f6b3dc133a80b9b79a0bc565f570dcf8fdbd597551485"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/openssl-3.5.9.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:openssl:openssl:3.5.9:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "openssl",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.5.9"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-packaging",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/63/34/ba1c580383c9eada3711951fef0795c80b829a078d72188184bcab9dd527/packaging-26.3-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/packaging@26.3",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "packaging",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "26.3"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-pip",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f3b60b20ffaadd4415ed7957212a38ac63fa4c5fa375bd0f4a797777940fad13"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/07/25/ee8c38ae72d66b844ce8eb9711ba905dba21ca1a8a0c960057c41cd23337/pip-26.3-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/pip@26.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:pypa:pip:26.3:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "pip",
      "originator": "Organization: Python Packaging Authority",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "26.3"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-platformdirs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "78bfb9db2a8471ed7eebe3c3c932da413911042994e699b384fbb4493fa872d7"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/f4/ba/223e00b885e960edd5d4b4d178c88acce019bd5b83786093681b8c393492/platformdirs-4.12.4-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/platformdirs@4.12.4",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "platformdirs",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "4.12.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-pygments",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2363c69b61c4a97c838da3b130dcd6468f4848992b21a82f2a63ec34377137d9"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/71/46/17f022dd3e953bf20a04a028a21ec746d942f8d2af30fa0f124fa0e6a684/pygments-2.21.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/pygments@2.21.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "pygments",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.21.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-pyproject-hooks",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5fc53fdac9f7bd63fbcdc868fb5f90b4784d78a53a3d3388cd738b807441a20b"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/85/11/044d1ae1b4ec0d7af88ee5bc91e081be1022533032b906a7bdabdbb60977/pyproject_hooks-1.3.3-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/pyproject-hooks@1.3.3",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "pyproject-hooks",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.3.3"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-requests",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/a0/f4/c67b0b3f1b9245e8d266f0f112c500d50e5b4e83cb6f3b71b6528104182a/requests-2.34.2-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/requests@2.34.2",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "requests",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.34.2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-resolvelib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fb06b66c8da04172d9e72a21d7d06186d8919e32ae5ab5cdf5b9d920be805ac2"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/e2/23/c941a0d0353681ca138489983c4309e0f5095dfd902e1357004f2357ddf2/resolvelib-1.2.1-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/resolvelib@1.2.1",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "resolvelib",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.2.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-rich",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "33bd4ef74232fb73fe9279a257718407f169c09b78a87ad3d296f548e27de0bb"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/82/3b/64d4899d73f91ba49a8c18a8ff3f0ea8f1c1d75481760df8c68ef5235bf5/rich-15.0.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/rich@15.0.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "rich",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "15.0.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-setuptools",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe384da74336c398e0d956d1cae0669bc02eed936cdb1d49b57de1990dc11ffc"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/ef/15/88e46eb9387e905704b69849618e699dc2f54407d8953cc4ec4b8b46528d/setuptools-70.3.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/setuptools@70.3.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "setuptools",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "70.3.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-sqlite",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "acc27a72ca7745781bb902269370303e778736a090585cc13acd2ea9ab785666"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/sqlite-3.53.4.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:sqlite:sqlite:3.53.4.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "sqlite",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "3.53.4.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tcl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3ac2acd65ddaaac0b2b8df321b558419d21da20bf67ab39149b8248c85f0d214"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/tcl-9.0.4.0.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:9.0.4.0:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tcl",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "9.0.4.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tk",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "66048966cfa88989333ff1632f454e10e9248516bb45efda7b4d2ae5a61642cb"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/tk-9.0.4.1.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:tcl_tk:tcl_tk:9.0.4.1:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tk",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "9.0.4.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tomli",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ae321c7024edebb961624bef04c8bae4f102f34f3422daa2ce532c421debd9f6"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/36/93/11d9724b527b29bf424ab30057ef6420ee8b7a4eb1ef775803e3f5b73358/tomli-2.3.2-cp311-cp311-macosx_10_9_x86_64.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/tomli@2.3.2",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tomli",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.3.2"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-tomli-w",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "188306098d013b691fcadc011abd66727d3c414c571bb01b1a174ba8c983cf90"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/c7/18/c86eb8e0202e32dd3df50d43d7ff9854f8e0603945ff398974c1d91ac1ef/tomli_w-1.2.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/tomli-w@1.2.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "tomli-w",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.2.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-truststore",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9aaaedaefaf06d8b206278cf8b5012bc897f485a874503501e12d776df78951c"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/51/e9/3a7820be2bb0fe53b6bc9c3be26d3d1158004e4c3ab953aa6840b955b1e9/truststore-0.10.5-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/truststore@0.10.5",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "truststore",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "0.10.5"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-urllib3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0cf3cae568d36aa9576b28dfb35f11328f1cb974ca7647d9475ebb86c75ac6e3"
        }
      ],
      "downloadLocation": "https://files.pythonhosted.org/packages/92/9d/c4e665119135114480843e7ab388fa94d8480650450e6f8e26b70d323a4c/urllib3-2.8.0-py3-none-any.whl",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:pypi/urllib3@2.8.0",
          "referenceType": "purl"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "urllib3",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.8.0"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-xz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1bfaba0ccacc6681d3ba85335cc7f49c24cf6f9d16f848cbd153b896d8a7d631"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/xz-5.8.1.1.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:tukaani:xz:5.8.1.1:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "xz",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "5.8.1.1"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-zlib-ng",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "00bbd88709bc416cb96160ab61d3e1c8f76e106799af7328d0fe434dc7dd5004"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/zlib-ng-2.2.4.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:zlib-ng:zlib-ng:2.2.4:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "zlib-ng",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "2.2.4"
    },
    {
      "SPDXID": "SPDXRef-PACKAGE-zstd",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f24b52470d12f466e9fa4fcc94e6c530625ada51d7b36de7fdc6ed7e6f499c8e"
        }
      ],
      "downloadLocation": "https://github.com/python/cpython-source-deps/archive/refs/tags/zstd-1.5.7.tar.gz",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:facebook:zstandard:1.5.7:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "name": "zstd",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: Python Software Foundation",
      "versionInfo": "1.5.7"
    }
  ],
  "relationships": [
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-bzip2",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-cachecontrol",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-certifi",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-cpython",
      "relationshipType": "DESCRIBES",
      "spdxElementId": "SPDXRef-DOCUMENT"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-distlib",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-distro",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-expat-2.10.0",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-hacl-star-504c2987452f87fe44bce9b9f12e19d6e051761f",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-idna",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-libffi",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-macholib-1.0",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-mpdecimal",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-msgpack",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-openssl",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-packaging",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-pip",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-platformdirs",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-pygments",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-pyproject-hooks",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-requests",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-resolvelib",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-rich",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-setuptools",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-sqlite",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tcl",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tk",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tomli",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-tomli-w",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-truststore",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-urllib3",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-pip"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-xz",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-zlib-ng",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    },
    {
      "relatedSpdxElement": "SPDXRef-PACKAGE-zstd",
      "relationshipType": "DEPENDS_ON",
      "spdxElementId": "SPDXRef-PACKAGE-cpython"
    }
  ],
  "spdxVersion": "SPDX-2.3"
}